Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/8UZDhLIRxLvShjeowXEgkXJ71L8.roa
File:                     8UZDhLIRxLvShjeowXEgkXJ71L8.roa (raw, json)
Hash identifier:          0jOEwJ1lVf0dtyaGJco7uhRKWqCdFB5VBfYTk0GZ0kM=
Subject key identifier:   F1:46:43:84:B2:11:C4:BB:D2:86:37:A8:C1:71:20:91:72:7B:D4:BF
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0E3B
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8UZDhLIRxLvShjeowXEgkXJ71L8.roa
Signing time:             Wed 29 Sep 2021 02:43:20 +0000
ROA not before:           Wed 29 Sep 2021 02:43:20 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18049
IP address blocks:        175.183.64.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3643 (0xe3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:20 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=F1464384B211C4BBD28637A8C1712091727BD4BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e0:3f:3e:ad:77:a5:da:5b:6d:e7:0f:9f:e4:
                    d1:f2:54:96:f6:e8:63:c9:44:27:99:2a:8e:54:12:
                    cd:3f:ce:c2:eb:e1:8a:e3:47:ee:99:2b:3e:86:c3:
                    17:de:27:1f:24:00:9d:39:f3:73:f9:f6:af:f5:92:
                    5c:a2:1a:00:18:14:92:bb:f1:59:77:37:6b:d3:b8:
                    a4:7d:77:c8:6a:c2:c8:71:26:57:3d:05:c2:fe:a5:
                    9c:fc:38:b0:de:89:36:af:42:ab:27:a6:42:0f:5e:
                    d4:84:8c:32:23:fc:da:2f:d5:aa:ad:21:81:02:61:
                    29:50:d9:44:5d:c1:06:6f:c5:6a:54:82:41:fc:3f:
                    58:42:1d:bd:16:8c:29:b4:19:44:4d:fb:92:f0:0e:
                    92:17:2a:1d:69:37:c1:4b:8f:cb:2b:d1:f0:d1:b3:
                    f2:0e:2a:e1:7c:b4:a5:d6:bd:74:bb:2c:d9:87:f0:
                    85:87:7a:f1:bd:3d:88:a7:4b:84:4e:58:3e:94:99:
                    6d:25:87:b5:e5:3f:0f:fb:45:24:50:3c:bb:50:43:
                    f1:9d:e6:a5:a0:03:8f:cd:be:fb:d8:44:44:e6:05:
                    a1:e3:94:55:17:ad:0e:af:77:28:89:33:d1:28:28:
                    b3:e7:83:88:c1:02:53:71:3b:32:5a:33:b4:94:32:
                    52:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:46:43:84:B2:11:C4:BB:D2:86:37:A8:C1:71:20:91:72:7B:D4:BF
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8UZDhLIRxLvShjeowXEgkXJ71L8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.183.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4f:90:f4:26:c7:a4:a0:fd:ed:28:30:11:ff:4c:8b:fb:57:13:
         9b:fb:b2:e7:00:44:ff:a3:b3:6a:61:e4:84:98:ab:fd:d2:df:
         92:eb:b1:6c:b9:7f:0f:b3:6d:eb:b8:cf:d8:d0:b8:e3:4f:3a:
         25:db:fe:39:41:e0:d6:14:b9:d3:14:c3:9c:7d:3e:63:71:16:
         73:15:66:f2:8b:7f:aa:0a:ef:ac:35:7d:95:66:25:ec:19:8d:
         28:7d:88:ea:8c:99:57:26:59:b1:a5:c9:df:74:15:61:97:9b:
         59:8a:cd:65:8b:7f:ef:f9:e9:78:47:1b:9a:a2:fc:19:d7:07:
         6a:5e:fe:b8:54:db:c7:8f:1d:8d:7b:3d:4b:4d:ac:f2:e2:65:
         ca:c6:d7:92:f1:d9:01:77:c3:bb:df:52:81:bd:a9:16:70:89:
         a5:ee:0b:d7:30:13:af:b7:bd:31:11:a1:fb:f0:95:2e:6e:05:
         d5:61:0d:09:54:ac:78:80:a3:63:c5:f9:bb:a6:49:26:52:3b:
         10:26:c1:27:13:81:23:47:26:8c:b2:f7:aa:24:97:0b:cb:71:
         f0:6b:7a:47:8b:d5:9b:41:81:24:7d:b3:78:a6:6d:4e:1a:ff:
         67:63:47:27:30:6d:e9:bd:10:69:d1:cc:4c:f6:69:36:e0:f5:
         6c:b3:de:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----