Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/8LkUodPljKc0uWj5AH00FA2GVGk.roa
File:                     8LkUodPljKc0uWj5AH00FA2GVGk.roa (raw, json)
Hash identifier:          j0r1po+EZ0CSDaRgX4JNlpFpqGBlQJS1LHHzMAM/hcg=
Subject key identifier:   F0:B9:14:A1:D3:E5:8C:A7:34:B9:68:F9:00:7D:34:14:0D:86:54:69
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       087E
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8LkUodPljKc0uWj5AH00FA2GVGk.roa
Signing time:             Tue 29 Sep 2020 09:52:05 +0000
ROA not before:           Tue 29 Sep 2020 09:52:05 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9919
IP address blocks:        122.146.96.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2174 (0x87e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:05 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F0B914A1D3E58CA734B968F9007D34140D865469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2f:6a:6a:aa:a0:55:16:7e:0f:be:8e:f2:00:
                    39:88:31:d2:e6:da:a1:e0:c4:0e:7a:96:00:e9:85:
                    b1:f1:05:98:02:07:06:b0:ee:3b:bd:3c:67:33:61:
                    96:fb:93:f1:10:24:8b:e9:9d:c3:f3:49:75:7c:59:
                    41:e4:9c:f7:aa:22:b0:47:97:71:1c:7e:9f:c4:d7:
                    45:5d:ad:e6:11:a5:b1:a0:18:56:9e:5d:c7:18:fd:
                    4d:37:ce:67:4a:f6:82:16:93:55:5a:8c:93:51:d2:
                    40:90:fd:c5:0c:49:20:0e:4f:fe:26:dc:33:e3:87:
                    9c:96:5f:e9:79:71:9e:ab:4f:f1:56:e6:38:0b:0f:
                    aa:ca:1c:a1:10:ab:da:51:af:16:23:cc:44:f1:ba:
                    c5:8c:4b:6c:3c:7a:50:87:68:cf:c0:9b:48:38:37:
                    8f:01:b7:4e:68:ec:fe:17:6c:ce:7f:4e:10:2a:c4:
                    71:09:55:db:ee:e0:61:c4:f2:73:08:d6:23:60:83:
                    f3:17:6e:97:ed:73:af:1a:bc:0b:6b:ac:d1:9c:70:
                    41:d5:0a:c0:4d:f6:40:46:b7:c8:08:12:bc:58:2f:
                    9d:a5:63:73:dc:22:9c:a4:42:d3:67:a7:81:6d:ec:
                    fe:51:e0:bb:42:67:f1:a3:3e:00:a5:ea:e2:95:22:
                    bc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B9:14:A1:D3:E5:8C:A7:34:B9:68:F9:00:7D:34:14:0D:86:54:69
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8LkUodPljKc0uWj5AH00FA2GVGk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.146.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         79:eb:1b:2b:6f:77:d1:ff:d1:77:ee:0e:eb:99:44:4c:14:76:
         c7:94:b8:66:84:53:4d:9f:96:2d:f3:25:7b:a3:f3:48:c2:ab:
         35:c9:6e:32:05:91:c7:24:b7:c8:a5:56:36:67:f9:a8:2a:f0:
         06:7a:fe:37:df:f0:93:68:89:3e:8d:12:02:41:1f:3b:d2:e8:
         35:ca:4c:33:a1:48:44:c7:3c:2c:fe:c7:78:e4:b5:19:e1:6a:
         89:97:34:6f:ad:d0:aa:49:b0:1b:cf:4c:d0:6a:ce:26:a5:7f:
         90:4c:99:2a:a2:60:e3:fc:b8:92:7e:02:8a:d3:1f:03:89:0c:
         a1:09:34:6e:02:ac:fe:cc:af:dd:59:3e:25:e0:e1:62:51:77:
         89:e7:f3:ab:e6:f2:38:95:9f:ee:e2:d4:c1:a0:83:b7:66:15:
         fc:ef:35:a7:8e:e2:c7:da:3f:04:c2:0e:7e:f9:76:fe:5b:43:
         94:a1:db:7c:70:e5:73:17:3b:e5:ca:55:94:9b:29:49:09:3e:
         af:96:03:5e:62:7f:18:f7:c6:6c:2d:23:36:31:52:dc:70:69:
         d9:bb:cc:e9:ec:72:6c:2b:07:13:14:e3:e3:c3:78:4d:9b:65:
         d2:55:66:33:02:51:f0:90:0b:d7:67:ec:6d:26:ef:ea:2a:cc:
         0f:88:b3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----