Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/BvgcIS9H_dDGj2HoEOw545vCVhw.roa
File:                     BvgcIS9H_dDGj2HoEOw545vCVhw.roa (raw, json)
Hash identifier:          RJt3YJ6qn46QOXNWSrpXkuADt7l1IDoyXIRBsalOwSA=
Subject key identifier:   06:F8:1C:21:2F:47:FD:D0:C6:8F:61:E8:10:EC:39:E3:9B:C2:56:1C
Certificate issuer:       /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial:       0786
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/BvgcIS9H_dDGj2HoEOw545vCVhw.roa
Signing time:             Tue 29 Sep 2020 09:52:50 +0000
ROA not before:           Tue 29 Sep 2020 09:52:50 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        192.72.128.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1926 (0x786)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
        Validity
            Not Before: Sep 29 09:52:50 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=06F81C212F47FDD0C68F61E810EC39E39BC2561C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ee:7a:63:fd:62:35:62:59:86:45:d8:a5:65:
                    e5:1c:27:b6:23:ad:0d:55:a2:65:08:96:58:23:7e:
                    b4:b5:a7:10:3c:a3:33:c0:65:69:28:b6:b2:4a:76:
                    ec:15:36:c7:32:1a:f6:4b:b0:6d:d7:75:77:2d:f4:
                    92:43:9a:5d:27:23:01:21:c7:6f:35:02:1e:c7:08:
                    a0:0d:38:14:96:f9:7b:44:8a:3d:b7:1b:47:d5:5b:
                    2a:67:9a:85:c2:47:22:84:5e:9a:d8:06:d4:6d:3e:
                    63:41:04:2a:14:80:3e:03:8f:7e:e7:da:3f:29:f9:
                    48:b4:8d:d2:3d:a5:eb:a9:4d:fe:5e:37:59:da:27:
                    fd:81:6e:08:da:e4:79:1e:b5:47:86:af:64:67:25:
                    d0:6d:d0:93:b6:03:39:12:5d:6e:e4:6a:b2:bb:dc:
                    4b:b9:c7:18:98:f4:f9:68:34:7f:16:d7:22:37:48:
                    96:f1:aa:2c:9a:f8:ee:a3:8c:5d:90:bb:58:aa:81:
                    ce:d1:af:d2:fe:6f:18:e4:5c:ad:04:f6:c4:79:72:
                    8b:96:75:a7:7f:a6:6c:58:a4:63:3a:28:7a:54:8e:
                    b9:14:2b:bb:67:0c:de:da:21:38:93:dc:69:df:04:
                    0d:89:0f:99:01:5c:0a:15:03:ed:cf:81:02:ae:df:
                    76:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F8:1C:21:2F:47:FD:D0:C6:8F:61:E8:10:EC:39:E3:9B:C2:56:1C
            X509v3 Authority Key Identifier:
                keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/BvgcIS9H_dDGj2HoEOw545vCVhw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.72.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         97:d2:42:7a:8a:52:4a:ea:8b:1c:e6:e3:46:e2:89:f3:59:8c:
         26:49:62:19:df:6c:00:ed:ac:c5:cd:37:16:8f:aa:e5:99:ed:
         6e:d5:8b:c3:8e:50:7d:51:ee:bb:e3:9f:f0:e5:a5:0c:d5:33:
         8f:17:f8:8c:62:8d:0a:c9:07:87:25:2a:8d:f2:25:b5:f0:48:
         f6:8f:58:3b:65:73:cf:d6:c5:46:ab:49:56:7a:f1:e8:84:dc:
         19:b1:8c:da:2b:2e:09:2d:b7:19:4b:4a:47:b1:df:8d:e0:a6:
         a9:46:0e:ac:0b:85:73:7f:e7:22:8c:46:d2:19:26:98:b9:dc:
         8b:9c:18:49:f2:cc:55:1a:ff:3b:36:57:0b:99:5d:15:7c:7a:
         04:93:18:17:66:cd:cd:64:b1:64:a2:f4:5f:23:e8:e4:2c:5e:
         ca:87:5a:86:30:19:b2:a7:6c:2c:7d:e7:4f:58:02:7e:57:ac:
         72:cf:11:a2:a4:ba:6c:ee:d6:22:a0:ac:9c:ef:85:ba:45:49:
         0f:b9:b5:ee:01:cb:ae:2f:f6:96:ca:b1:81:21:f4:41:52:3d:
         a1:3c:78:91:55:93:c3:16:c4:03:fb:92:c2:ce:5d:a7:ed:8a:
         63:29:a5:d1:54:b0:7b:9f:95:c4:c1:49:b6:e6:25:14:1a:9d:
         79:32:06:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----