Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/46RRMJ5oGM7BBYYLhYTACuc1n2s.roa
File:                     46RRMJ5oGM7BBYYLhYTACuc1n2s.roa (raw, json)
Hash identifier:          0Ak09KMjGhscqwoB0pClbQNTv4POu8lNm83Y7fNpZ+0=
Subject key identifier:   E3:A4:51:30:9E:68:18:CE:C1:05:86:0B:85:84:C0:0A:E7:35:9F:6B
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0A2E
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/46RRMJ5oGM7BBYYLhYTACuc1n2s.roa
Signing time:             Tue 24 Nov 2020 09:16:37 +0000
ROA not before:           Tue 24 Nov 2020 09:16:37 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9919
IP address blocks:        115.30.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2606 (0xa2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Nov 24 09:16:37 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E3A451309E6818CEC105860B8584C00AE7359F6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cb:11:03:f8:57:ec:ba:df:07:77:f0:f8:e8:
                    8f:89:40:69:ee:93:43:a5:a6:6e:1b:73:05:2b:e0:
                    ab:3d:d9:90:61:7d:72:d7:ab:97:52:00:37:3f:b9:
                    bd:9e:d5:fd:45:a9:bc:aa:65:36:38:1a:c4:80:00:
                    85:c6:d7:9b:c6:a8:a4:b0:af:a5:3a:cb:75:73:a7:
                    cf:d9:77:2d:90:ce:bb:e2:43:62:87:ac:db:55:3e:
                    43:0b:d6:57:8b:fb:d9:ba:2b:5e:f6:f4:5b:fc:22:
                    f3:bc:b4:69:95:2a:71:b7:66:df:fc:56:54:ac:b7:
                    b7:a2:17:1b:c3:99:fb:70:15:d4:c0:28:57:b3:2b:
                    8a:c6:11:f5:0b:c8:d1:db:a8:23:50:c8:9d:c0:d2:
                    e5:05:c2:6c:a8:04:d3:da:1d:66:7e:c1:8f:9a:99:
                    e9:7b:f7:d4:8f:4c:60:45:fb:3e:5f:9a:cd:26:ba:
                    63:c9:96:0d:a9:16:c2:bf:6c:ff:b3:be:8d:f6:63:
                    8d:ea:74:5c:57:e3:29:12:45:d0:5f:11:43:0a:fc:
                    25:08:8f:60:c0:a7:d5:a0:80:de:50:f9:78:c3:68:
                    47:6f:2d:fd:ef:d0:af:fa:4a:7e:ef:d3:98:60:44:
                    c3:97:c3:c9:dc:59:cd:0e:8b:5d:d3:c4:67:5e:39:
                    fa:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A4:51:30:9E:68:18:CE:C1:05:86:0B:85:84:C0:0A:E7:35:9F:6B
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/46RRMJ5oGM7BBYYLhYTACuc1n2s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.30.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         52:4c:9b:85:64:fe:5e:d7:63:68:67:da:a8:e7:73:c6:6e:9f:
         c4:c0:c3:a7:dc:55:27:9c:d7:ae:51:61:c5:06:27:14:00:75:
         f0:5a:42:47:10:b1:17:d0:8f:65:40:7a:9f:1f:bf:06:2a:ba:
         a7:d6:6b:92:49:cd:9a:66:ce:14:04:da:bb:9f:f0:cf:45:96:
         17:b6:b9:c1:08:e9:33:41:cc:86:40:e2:37:cb:f2:c5:0d:54:
         3c:bc:ad:6b:28:8e:28:08:c8:c8:2f:43:80:04:2f:97:3e:e2:
         46:e1:da:f0:73:d0:12:05:ba:e3:a9:28:87:79:c6:ae:86:7c:
         ed:8f:df:a5:11:a3:6d:1a:7d:74:d5:b3:ce:5e:82:a7:09:f7:
         61:2e:85:fc:a1:64:d6:59:f3:b7:c9:26:25:3e:32:7f:27:25:
         c1:89:eb:46:d1:fb:8f:82:c4:46:17:66:7b:c9:7b:10:d1:31:
         d3:cb:41:5c:18:00:f7:37:91:f4:f5:97:e2:aa:71:f4:ad:a4:
         e4:8d:4e:64:5d:e9:5e:d5:17:38:f4:34:d9:d1:f0:6c:e1:d9:
         94:e3:30:58:e6:ed:71:b1:02:77:10:f5:d8:5f:f2:05:36:e5:
         dc:d1:47:b0:e2:0a:34:41:5c:3c:7f:2e:5a:b7:78:23:78:01:
         53:0e:ad:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----