Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/4WSAXU8V3hfg2x6VS5MRSRsnaMY.roa
File:                     4WSAXU8V3hfg2x6VS5MRSRsnaMY.roa (raw, json)
Hash identifier:          fG2PLeLD1UAUpd2vm0nP6zEMg6S1gapSCaB7eYRZl9Y=
Subject key identifier:   E1:64:80:5D:4F:15:DE:17:E0:DB:1E:95:4B:93:11:49:1B:27:68:C6
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       08E8
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/4WSAXU8V3hfg2x6VS5MRSRsnaMY.roa
Signing time:             Tue 29 Sep 2020 09:52:34 +0000
ROA not before:           Tue 29 Sep 2020 09:52:34 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9919
IP address blocks:        113.196.0.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2280 (0x8e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:34 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E164805D4F15DE17E0DB1E954B9311491B2768C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e2:ba:1c:29:0d:9e:00:56:0c:76:a9:86:8e:
                    2e:10:f7:24:fa:45:f2:ef:4d:ba:6a:ce:15:29:de:
                    59:b5:01:8a:4c:ef:ef:46:b3:b5:38:88:96:fd:c4:
                    f6:e0:05:09:8d:0b:f5:80:1e:83:69:b3:72:a6:d5:
                    e7:6f:19:fc:e0:c7:7f:37:c1:07:7d:30:95:2d:63:
                    06:59:5a:e7:a1:48:93:cb:b1:bf:7f:b5:11:f8:f7:
                    39:e5:2f:a0:c4:d4:50:7a:af:bb:c7:da:f8:49:3f:
                    2a:dc:ff:16:dc:87:36:35:a2:e7:ba:ba:03:98:81:
                    69:6e:5f:25:48:65:81:d4:6b:b8:4f:ab:75:42:d8:
                    18:90:ae:60:0e:b6:04:59:6c:e9:5f:60:26:e8:95:
                    56:d7:de:95:45:66:98:4e:9f:d5:1f:cf:2d:ec:86:
                    11:2b:ac:4f:3f:2a:e0:42:69:f8:cc:88:47:71:01:
                    ce:31:c7:34:37:a2:01:53:c7:3e:a3:7a:36:4e:2c:
                    9d:7f:65:f6:36:8e:19:4d:87:1f:c6:b5:df:bc:70:
                    0d:c1:9c:b2:72:d4:e1:75:e9:1f:39:7e:c6:c7:6b:
                    11:66:3a:0b:bc:a2:ce:cd:8e:87:83:78:25:e5:6d:
                    c5:18:ff:53:db:9a:f2:b3:ee:b0:f5:39:ef:ae:55:
                    b4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:64:80:5D:4F:15:DE:17:E0:DB:1E:95:4B:93:11:49:1B:27:68:C6
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/4WSAXU8V3hfg2x6VS5MRSRsnaMY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.196.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a4:9a:40:3b:f0:85:35:57:77:21:52:b9:0a:45:32:ff:17:cf:
         a6:a3:83:2b:dd:12:8c:56:10:29:11:8f:9d:6f:86:13:d4:a7:
         8a:a2:dc:de:76:56:d4:52:36:22:df:48:1d:5f:16:c6:f3:30:
         35:f3:a0:80:97:e5:dd:9d:b7:71:d9:2d:dd:93:b8:b3:87:a5:
         1f:7e:37:d6:2e:bc:0c:3a:ce:5d:7f:80:f5:0b:44:db:6a:18:
         88:06:95:0f:02:b9:2a:50:30:e2:e3:87:71:9e:e8:dd:56:17:
         e5:44:cb:ee:46:bd:71:23:d7:0a:59:5f:39:cb:fa:ba:76:c8:
         e0:70:9b:65:f9:a7:f5:02:73:9d:93:b6:b0:4f:25:86:34:fb:
         51:6a:f9:c4:c3:9e:ec:17:a1:2d:69:25:a6:62:36:c6:38:78:
         0d:f0:bc:f1:cb:7f:3c:c9:79:3e:78:a9:64:87:41:47:93:d8:
         56:e0:8f:a0:25:ee:00:bb:a2:c6:60:ed:00:f0:cc:7d:1b:15:
         13:48:bc:9c:54:8a:1f:05:1f:5d:e0:ef:b0:21:3a:c5:60:ff:
         1f:aa:3c:ce:af:8e:4c:14:34:ce:a3:3b:1e:ff:be:23:8b:22:
         d8:5f:16:81:a7:03:ac:86:ab:34:d2:e3:a3:d1:bb:15:0f:c7:
         2b:d8:25:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----