Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/BnqWvziUwhbRZ6tAOrYmpqfC1oo.roa
File:                     BnqWvziUwhbRZ6tAOrYmpqfC1oo.roa (raw, json)
Hash identifier:          DplLZB3PPuw7RPtUvpNN4Eew9/x0ylopozRYMGFhrSw=
Subject key identifier:   06:7A:96:BF:38:94:C2:16:D1:67:AB:40:3A:B6:26:A6:A7:C2:D6:8A
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0E0C
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/BnqWvziUwhbRZ6tAOrYmpqfC1oo.roa
Signing time:             Wed 29 Sep 2021 02:43:08 +0000
ROA not before:           Wed 29 Sep 2021 02:43:08 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9919
IP address blocks:        175.180.0.0/14 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3596 (0xe0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:08 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=067A96BF3894C216D167AB403AB626A6A7C2D68A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fb:20:e1:57:bb:f5:14:d0:cd:8a:af:88:91:
                    80:cc:a8:b5:9d:af:58:87:30:fc:6a:ac:e5:b2:c7:
                    13:8b:80:76:3c:fb:31:6c:df:ab:76:31:12:3d:e0:
                    cd:f3:93:9b:c8:ef:9c:29:fe:1a:ed:b7:b5:98:3a:
                    0e:cd:84:1d:e8:aa:c1:f9:97:e3:df:f5:f6:3d:6f:
                    d8:10:b0:2f:ad:14:ff:0e:c1:da:d2:85:3d:50:30:
                    93:2a:b1:16:c0:7d:21:da:ed:48:82:2c:c4:2b:b4:
                    6f:2c:f7:a9:18:f1:1c:a0:46:79:1f:46:d7:67:90:
                    fd:8a:a6:b9:bd:c8:59:9f:ff:94:b0:63:f0:00:5b:
                    ba:d1:32:c5:da:b7:73:46:57:18:a3:88:ef:24:b5:
                    fc:ab:50:d8:7c:12:b9:11:0e:f1:6a:24:71:b4:21:
                    15:35:a9:ce:1c:c6:c9:89:e4:db:6e:14:53:6f:db:
                    3e:5b:dc:e5:04:56:31:c1:3f:51:91:b9:30:47:1d:
                    85:5a:7a:3b:a8:a9:a6:54:31:46:6c:8c:0e:00:fe:
                    d8:78:8e:a8:15:c9:e3:d5:95:51:6c:79:31:fa:a0:
                    52:4b:cd:cc:1c:44:a7:25:93:5f:1a:b4:df:f4:d5:
                    37:65:42:e3:8e:26:06:9d:ee:1e:68:44:f3:59:f9:
                    fd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7A:96:BF:38:94:C2:16:D1:67:AB:40:3A:B6:26:A6:A7:C2:D6:8A
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/BnqWvziUwhbRZ6tAOrYmpqfC1oo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.180.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         3c:2b:1f:0c:df:8c:ca:e7:ac:a0:21:09:e5:6e:18:0b:09:d4:
         6c:93:96:0a:23:a2:29:14:9c:fd:28:6e:bc:bf:20:ac:22:4d:
         f7:47:63:d7:0a:1c:1d:e4:c3:88:e2:24:6b:ea:9b:f5:a8:8c:
         4e:df:1d:63:5a:9a:e1:dc:40:62:eb:92:b4:23:93:53:1a:38:
         c9:d2:74:4b:48:90:8e:6c:d7:e1:60:90:58:85:3f:70:43:b9:
         c0:a3:27:b8:bd:ca:df:fb:a3:39:fe:aa:b4:b4:64:d7:62:7b:
         b1:c4:e9:3b:a6:85:15:6e:2c:bb:bf:bc:07:c8:e0:d2:84:c1:
         9e:cf:34:a4:97:94:fe:47:35:5c:0f:15:51:c9:95:c6:41:6a:
         9e:c4:14:09:99:24:24:1b:07:10:f5:52:ca:a5:1e:fc:9a:4d:
         43:df:c1:e4:66:27:25:6a:71:69:a4:86:07:f7:c2:c2:b5:35:
         26:e8:2b:c3:bd:89:b0:b9:7d:4e:5f:56:e3:01:6f:a3:84:19:
         d6:70:60:22:0b:23:c5:96:d8:82:11:59:3c:46:94:ce:29:e7:
         ef:2b:e2:e4:5e:8d:be:50:14:1d:4b:85:d4:c4:15:1b:6c:57:
         ff:4e:60:a1:d3:cc:17:b0:65:9e:32:78:10:c5:ef:70:38:a9:
         60:04:c6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----