Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/2liZJRMnUbHpbpKz6PBtxr_c_c8.roa
File:                     2liZJRMnUbHpbpKz6PBtxr_c_c8.roa (raw, json)
Hash identifier:          TL1kBAu5cD9mAYuaaMdq+8Z+sbEnX57XiQV1ltCXUxQ=
Subject key identifier:   DA:58:99:25:13:27:51:B1:E9:6E:92:B3:E8:F0:6D:C6:BF:DC:FD:CF
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0E46
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/2liZJRMnUbHpbpKz6PBtxr_c_c8.roa
Signing time:             Wed 29 Sep 2021 02:43:23 +0000
ROA not before:           Wed 29 Sep 2021 02:43:23 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38851
IP address blocks:        122.146.108.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3654 (0xe46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:23 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=DA589925132751B1E96E92B3E8F06DC6BFDCFDCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f1:17:53:52:3d:06:6a:4a:be:a8:80:cc:db:
                    a5:bc:9e:68:ed:8d:cf:a5:4e:4e:1e:46:c7:87:cb:
                    e9:68:51:de:6c:64:66:70:24:27:78:09:9f:97:c0:
                    e3:42:13:b2:f4:ec:1b:f6:1e:80:8b:c0:4c:b3:41:
                    b8:47:50:6f:8f:2a:8e:dd:57:40:66:25:6c:45:b9:
                    1c:08:92:50:96:da:6e:c0:9c:90:61:ee:54:b5:fe:
                    dd:ef:58:ed:26:6a:b0:17:39:38:14:d1:03:6d:d2:
                    d2:1b:3d:a7:2f:e4:0b:36:aa:6a:6d:6a:02:35:72:
                    eb:ba:df:eb:3d:8e:02:44:17:da:74:ca:aa:47:f8:
                    37:5a:ed:98:59:a3:3c:94:e3:a0:92:e1:c4:65:6c:
                    38:51:b4:ff:a9:a8:a9:e5:9a:ee:30:74:68:38:57:
                    f5:2b:fd:da:72:78:62:01:61:b5:1e:6d:84:d1:c2:
                    c8:a5:e9:98:fe:28:df:35:1e:3d:74:95:bd:e7:b5:
                    30:65:3e:a9:52:2d:44:41:a3:f9:56:2c:07:e3:cf:
                    8f:b8:56:b4:e3:74:82:91:67:a6:f6:44:d1:80:ec:
                    f0:09:c0:5b:63:e6:23:77:5b:84:45:b7:73:9d:bd:
                    14:96:50:ae:3e:18:97:43:17:ae:66:e9:9c:7b:86:
                    1a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:58:99:25:13:27:51:B1:E9:6E:92:B3:E8:F0:6D:C6:BF:DC:FD:CF
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/2liZJRMnUbHpbpKz6PBtxr_c_c8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.146.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:1d:fc:f1:a5:f9:bf:ae:ed:44:69:77:b6:0a:95:e5:62:52:
         27:3f:60:d3:13:af:4a:94:a1:6d:0e:81:48:61:22:df:32:ea:
         06:18:54:10:91:a1:ba:69:c6:4a:49:e5:7d:63:48:94:76:6a:
         db:2c:48:30:c1:71:2c:1d:e3:0d:56:90:f3:63:ff:e3:29:06:
         b7:a3:b0:4c:ad:44:47:21:92:1d:e5:10:89:94:88:be:e4:e3:
         9a:87:db:23:5b:58:28:f6:a0:19:88:44:fd:b0:47:c6:3c:af:
         d1:b0:00:bb:7b:b9:07:8c:36:ce:b3:21:3a:a7:9f:f8:e3:fd:
         2d:47:dd:a3:7f:6f:84:6c:95:6c:6e:31:ba:ea:67:9b:d2:b0:
         c0:69:20:ca:98:66:75:a3:07:2d:8d:0c:83:26:df:aa:75:b1:
         af:85:8c:42:7b:40:bd:e4:b5:62:cf:a7:a9:85:ac:4a:6a:fb:
         44:7c:c3:54:b1:0d:90:35:ee:fc:54:32:06:c0:1e:48:23:d2:
         16:29:47:e7:18:ff:13:3f:37:d1:9f:c2:ec:8a:6e:a0:13:03:
         02:d9:5c:03:00:b4:09:af:57:48:c7:0a:70:74:ed:8f:10:c2:
         9a:19:3a:12:27:46:b6:0e:55:a0:89:cb:f5:2b:67:af:70:f0:
         89:da:3e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----