Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/AbeoWii9XP1rez_1SuGDuqq7Izo.roa
File:                     AbeoWii9XP1rez_1SuGDuqq7Izo.roa (raw, json)
Hash identifier:          l5eixf+SWDRrCHrWI2uBpyVvdr2k5KpH38kO5wkldSA=
Subject key identifier:   01:B7:A8:5A:28:BD:5C:FD:6B:7B:3F:F5:4A:E1:83:BA:AA:BB:23:3A
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0E69
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/AbeoWii9XP1rez_1SuGDuqq7Izo.roa
Signing time:             Wed 29 Sep 2021 02:43:33 +0000
ROA not before:           Wed 29 Sep 2021 02:43:33 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131584
IP address blocks:        106.105.178.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3689 (0xe69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:33 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=01B7A85A28BD5CFD6B7B3FF54AE183BAAABB233A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:1d:c2:6f:34:65:c7:fc:7e:b6:ca:a4:8a:ea:
                    eb:2f:ee:8f:3b:35:64:da:30:7f:3f:a7:49:2e:5b:
                    aa:8a:61:e9:97:3c:80:8d:f7:25:07:08:7a:db:0e:
                    5f:34:2e:1d:d9:09:c7:46:25:bc:e2:97:de:f9:e5:
                    e8:f3:b9:b5:79:98:fa:19:69:19:4d:c1:b0:87:73:
                    8f:a7:97:b1:1c:50:aa:cd:5c:5e:5d:59:1f:63:0c:
                    95:18:2b:ad:b2:21:06:53:42:34:7e:4a:36:e1:98:
                    fd:96:ec:4a:2e:ff:5c:6f:47:03:e5:f8:77:88:34:
                    bf:24:72:64:90:d2:80:3c:69:c9:3f:cb:7f:97:82:
                    b1:96:d7:fc:e5:14:1f:04:7e:fb:d8:02:1d:fa:16:
                    6f:0d:d0:39:70:f0:98:36:c9:00:c4:e4:76:66:a9:
                    d3:7b:ba:76:dc:eb:c4:c3:15:cf:2c:05:80:55:ee:
                    40:e5:36:2e:47:53:f1:ab:f4:94:1d:f3:22:52:f5:
                    73:50:c5:8b:42:18:db:33:87:c0:b6:d7:e2:5d:f3:
                    db:1c:bf:40:20:e8:27:f7:8f:89:35:b3:8b:d8:f1:
                    eb:45:a8:ee:e7:e8:4b:74:53:0c:56:6a:0b:31:72:
                    f1:85:fa:58:fb:2a:3c:ec:cc:29:f4:80:b9:c1:b3:
                    58:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B7:A8:5A:28:BD:5C:FD:6B:7B:3F:F5:4A:E1:83:BA:AA:BB:23:3A
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/AbeoWii9XP1rez_1SuGDuqq7Izo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.105.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:50:55:68:ee:f3:83:ee:48:6c:7d:f7:87:8a:f8:1b:5f:09:
         75:c8:cf:11:e3:4e:8a:f8:d1:b4:e6:2a:62:2a:e5:71:ba:a9:
         38:d9:f2:2f:d0:0c:dd:8c:1f:2b:a1:87:a2:11:11:b3:f7:75:
         d0:1f:2d:c8:54:15:01:e2:93:d5:56:8d:59:d4:13:8b:49:9e:
         7e:7b:26:ba:aa:69:7f:ce:48:69:8c:f6:71:6c:70:df:cf:3e:
         5e:1a:49:c3:b5:73:f5:31:6e:8f:e6:5e:df:8a:f1:97:62:50:
         ab:b9:da:2d:63:03:95:a7:05:1e:c8:8f:1a:2e:3b:dd:7c:95:
         e3:91:a5:88:3b:31:28:f8:0c:d6:e0:7b:f0:ef:e5:5e:11:c7:
         e7:bd:1f:96:8b:64:97:bd:54:b9:1a:38:14:b4:39:a9:99:bd:
         70:df:67:4e:f6:ea:17:b6:13:2e:95:b1:fb:5b:2c:9d:85:d0:
         55:27:80:f6:68:69:8e:68:6e:46:2d:18:59:58:fd:4e:85:f1:
         4f:21:f7:2a:ac:f0:a1:89:3c:1b:ff:ae:c6:86:67:f7:26:b0:
         ff:52:49:79:89:29:e1:f4:e4:42:57:bd:a2:b6:ba:6a:f9:57:
         97:79:25:e2:82:ba:9b:c1:5a:2f:8b:b7:9c:55:4f:f7:fd:2e:
         3b:1b:0b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----