Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/7HWTkhrF8_rNrpTKBx_6GWPGNJI.roa
File:                     7HWTkhrF8_rNrpTKBx_6GWPGNJI.roa (raw, json)
Hash identifier:          SNTvpTVo9/wlbkFtIlJFKkvl0arbaPcdm79s4EvUNrs=
Subject key identifier:   EC:75:93:92:1A:C5:F3:FA:CD:AE:94:CA:07:1F:FA:19:63:C6:34:92
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0CE1
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/7HWTkhrF8_rNrpTKBx_6GWPGNJI.roa
Signing time:             Sun 07 Feb 2021 11:45:43 +0000
ROA not before:           Sun 07 Feb 2021 11:45:42 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9919
IP address blocks:        122.146.110.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3297 (0xce1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Feb  7 11:45:42 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=EC7593921AC5F3FACDAE94CA071FFA1963C63492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:16:c0:cf:59:6f:13:7e:79:41:1f:d1:57:f2:
                    63:20:80:b5:f7:8e:69:2c:9c:b2:9f:a3:73:3c:3c:
                    1c:d0:72:01:c3:8b:b0:17:d4:fb:8a:3b:68:87:14:
                    f6:4c:2a:cc:e0:b1:dc:b4:3f:e9:3d:e0:18:00:ae:
                    85:8d:19:c4:85:e8:b0:63:5c:22:8d:2d:17:77:c4:
                    ae:9a:a4:5a:98:44:74:27:80:7f:60:2f:5e:e0:48:
                    62:8f:32:50:8a:f2:2c:15:96:25:47:ea:58:0f:23:
                    d4:6c:26:a9:af:90:83:67:af:b0:8c:3a:70:47:e5:
                    68:34:af:c5:ee:d2:e5:67:2c:12:bd:53:a5:64:b7:
                    99:58:0c:c0:1c:29:05:90:b4:d9:83:ed:5f:b8:a1:
                    26:bb:d3:96:32:01:0b:e7:b4:70:1f:ad:1c:4e:7a:
                    c4:fb:c5:4d:46:a4:8b:28:57:f3:5a:d0:71:60:09:
                    46:ea:50:2b:ea:05:89:f4:22:49:dc:d2:e8:77:a0:
                    b0:8a:91:28:c2:f9:17:d1:01:62:71:d7:dc:3d:e8:
                    77:ca:9d:ff:bf:3e:da:24:9f:99:68:51:55:d1:26:
                    f3:f6:f3:06:f2:57:21:16:c0:29:6d:8e:4b:bd:49:
                    e6:8f:9f:42:21:92:0d:37:c9:60:a7:83:c5:58:ab:
                    3e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:75:93:92:1A:C5:F3:FA:CD:AE:94:CA:07:1F:FA:19:63:C6:34:92
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/7HWTkhrF8_rNrpTKBx_6GWPGNJI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.146.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:10:ea:31:ae:bb:75:71:03:af:cb:07:8a:ee:49:f9:e6:b5:
         13:e6:57:7d:7f:1a:69:22:a7:72:ce:77:3d:1a:f8:ad:18:c7:
         75:12:b3:02:b7:01:cf:90:95:52:84:a1:51:eb:e7:bb:b1:bb:
         a5:68:2a:70:ef:e8:c5:57:7e:ec:a9:57:59:0f:bb:82:9c:d0:
         a1:a6:20:55:88:56:6f:85:28:d7:71:a2:43:a9:5f:20:90:69:
         c4:60:13:22:46:61:06:9c:93:de:5b:21:e6:7c:6e:23:da:80:
         79:ca:e9:0e:66:8f:0f:28:9d:5a:59:ed:5b:d4:81:ba:f8:d2:
         0b:35:86:ef:81:c7:a0:da:20:f4:b8:b2:ca:ef:4c:50:60:90:
         ae:30:88:2c:fb:a8:59:cd:12:26:03:33:fd:79:62:bb:14:6f:
         6f:3f:6b:1b:5e:3b:21:21:86:d8:09:9e:46:ca:6b:b5:28:2f:
         fb:d3:3f:49:c9:41:c9:22:e4:ad:78:ef:3e:3b:b0:c6:b4:f6:
         89:02:a9:6e:30:79:51:8e:03:21:c2:e1:b1:f8:64:69:c5:20:
         93:15:6e:29:55:f6:f1:de:38:99:63:72:73:dc:7a:88:21:68:
         5b:a4:74:ad:57:fa:d3:d9:4f:53:42:fb:6e:35:cc:52:6c:0a:
         13:97:95:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----