Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/6HiyGHHo1UOYF3Hfh6bZL1b2z5c.roa
File:                     6HiyGHHo1UOYF3Hfh6bZL1b2z5c.roa (raw, json)
Hash identifier:          DSt5Z5qoXBPeq0mv4+majATSj+6bxz+0/UjbsmutKwY=
Subject key identifier:   E8:78:B2:18:71:E8:D5:43:98:17:71:DF:87:A6:D9:2F:56:F6:CF:97
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0E63
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/6HiyGHHo1UOYF3Hfh6bZL1b2z5c.roa
Signing time:             Wed 29 Sep 2021 02:43:32 +0000
ROA not before:           Wed 29 Sep 2021 02:43:32 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18049
IP address blocks:        106.105.80.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3683 (0xe63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:32 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=E878B21871E8D543981771DF87A6D92F56F6CF97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:17:de:a2:ba:ff:7a:78:e5:88:bd:8c:76:b7:
                    d0:2b:54:98:15:ff:2f:63:8d:ba:cf:6b:25:e9:56:
                    1c:cf:0c:1b:1e:1d:9b:e2:3c:91:4e:58:ff:dd:6e:
                    2a:45:9a:e0:92:69:7a:b9:97:18:78:2c:80:80:a3:
                    ea:bf:9e:44:6f:2e:ff:b7:b4:b5:d2:09:97:aa:e1:
                    f7:c5:7f:54:78:84:f8:1e:6e:97:f7:01:22:e1:b0:
                    43:ee:e5:30:d2:6c:33:36:4a:c6:d6:60:94:f1:5b:
                    37:06:79:8e:2c:8e:43:75:b4:be:80:30:e3:3c:2b:
                    f6:5e:ee:1a:ef:dc:97:cc:9f:62:57:42:70:78:df:
                    8b:93:5f:4b:48:36:58:e7:d7:cd:d9:a4:3e:88:58:
                    85:8c:0b:d8:45:54:6b:2b:0f:1b:3b:9c:ed:bd:28:
                    ad:05:cb:7d:66:cf:b2:2b:3d:32:89:6d:9c:e7:70:
                    01:46:24:d7:00:d6:b1:b0:8b:26:af:79:11:92:98:
                    06:c5:41:e8:8a:69:48:a8:f9:56:48:d5:d2:67:22:
                    3a:57:75:51:53:dc:d3:d0:a1:ad:f6:94:64:ee:1e:
                    54:e9:de:e4:40:c7:9c:c7:52:7d:e0:1e:c5:69:a4:
                    6a:db:9e:3f:49:44:a8:ce:80:08:57:11:0f:a6:7e:
                    b1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:78:B2:18:71:E8:D5:43:98:17:71:DF:87:A6:D9:2F:56:F6:CF:97
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/6HiyGHHo1UOYF3Hfh6bZL1b2z5c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.105.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6e:05:84:3f:79:f6:ef:2b:a8:6c:b7:ff:2f:0c:24:ed:61:71:
         10:f1:44:5a:00:fb:af:67:b4:64:33:55:3a:13:80:77:86:d3:
         8e:7a:fb:76:3c:a2:cf:a8:53:62:11:4e:04:ad:72:7e:0b:e6:
         19:5e:d5:bf:1b:ea:14:47:11:6a:61:64:80:9d:80:4c:77:4f:
         81:ea:c8:d9:10:c9:e7:0e:f7:e3:bc:48:b5:60:09:f4:2c:7a:
         34:63:51:88:31:67:94:a2:ef:4b:a8:69:17:23:32:17:2a:5d:
         c7:b2:39:94:5e:92:15:7d:41:79:ab:7c:cf:0f:c1:39:00:00:
         48:d2:a9:4b:c3:26:d9:7e:69:5d:58:22:6e:67:a1:68:b3:ae:
         ac:12:56:71:49:2c:fc:77:c9:e4:82:22:cf:20:0c:cb:fd:3b:
         f9:34:d3:e9:19:1c:43:12:36:44:76:c3:e0:e0:1d:7b:b3:e4:
         89:47:93:14:7c:d3:ec:df:9d:8e:e1:1b:21:58:ec:d6:95:57:
         38:98:c8:22:64:ba:e7:0d:39:77:43:ef:29:d9:7b:3f:f0:24:
         2e:ee:3e:b3:76:f5:9e:54:ca:81:04:52:2c:26:db:96:c2:07:
         f0:89:ff:6e:07:51:1c:36:1b:f2:9d:8b:bb:c2:6e:ba:c8:40:
         41:58:64:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----