Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/C6qLATPLKl4MQQZ_-DR1kAQ13f8.roa
File:                     C6qLATPLKl4MQQZ_-DR1kAQ13f8.roa (raw, json)
Hash identifier:          nfsUJ+c8HEqfJvKz0zcUzA5YygJHldw9MA6RalHoB+I=
Subject key identifier:   0B:AA:8B:01:33:CB:2A:5E:0C:41:06:7F:F8:34:75:90:04:35:DD:FF
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0E5C
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/C6qLATPLKl4MQQZ_-DR1kAQ13f8.roa
Signing time:             Wed 29 Sep 2021 02:43:30 +0000
ROA not before:           Wed 29 Sep 2021 02:43:30 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     4780
IP address blocks:        175.182.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3676 (0xe5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:30 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=0BAA8B0133CB2A5E0C41067FF83475900435DDFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d0:bf:45:63:2e:c7:c9:bd:7e:d7:9c:1d:08:
                    0c:fe:b6:f1:f6:41:8c:d6:b0:c7:b1:89:26:db:88:
                    d2:a5:0e:0f:0f:3b:b1:fb:5e:f8:d2:3b:6f:ca:fe:
                    27:a2:21:d6:29:aa:6d:b5:20:72:7f:a4:b7:f0:6c:
                    a1:c4:d6:47:be:75:4a:b7:96:2e:58:1f:9a:4e:f6:
                    2c:3f:c1:29:dd:3e:b6:5f:c7:4f:53:b1:25:19:ce:
                    94:da:f0:c5:5f:b5:0f:c9:d2:3d:79:dd:9d:39:ca:
                    bb:42:36:ae:ab:e7:6e:35:41:91:71:51:6f:88:a7:
                    e8:f1:62:24:d9:f5:22:e0:3c:5b:13:13:81:97:23:
                    8c:2c:52:02:43:d6:74:d5:31:74:61:09:09:f7:86:
                    60:97:02:a3:f5:17:74:60:4d:a1:61:8a:7d:83:ba:
                    06:39:d7:e5:e1:3d:3d:95:65:07:7a:a2:a7:05:bb:
                    71:b8:32:c6:b7:e2:56:7d:b9:1b:73:87:04:f7:3f:
                    ab:bc:94:a4:56:f3:be:46:d9:9c:cf:5c:d7:42:33:
                    25:19:ec:a5:38:27:6d:98:91:6b:d8:fc:21:7e:1c:
                    0f:e1:cf:e1:18:25:26:2e:4e:be:2a:63:3a:a7:50:
                    5b:0f:5c:25:02:b0:40:d3:e1:99:eb:bc:e8:3d:d3:
                    2e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AA:8B:01:33:CB:2A:5E:0C:41:06:7F:F8:34:75:90:04:35:DD:FF
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/C6qLATPLKl4MQQZ_-DR1kAQ13f8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.182.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7c:99:bd:18:bf:27:c6:b3:b3:83:23:a3:0d:00:5d:f6:68:24:
         84:91:44:68:00:c2:88:56:e6:bd:db:51:44:89:2d:7d:08:f3:
         35:47:55:04:31:c9:50:52:af:bb:24:3e:b8:2c:f2:70:98:3d:
         52:d8:8d:ab:93:24:c8:e5:0c:66:73:f8:b9:de:dd:c2:02:09:
         22:c0:72:0f:aa:25:87:a9:9b:4c:e7:06:53:9a:c6:35:41:6d:
         ae:70:56:3d:96:76:34:b2:a6:53:e2:4f:28:d1:30:02:48:40:
         af:ec:76:90:55:4a:b6:24:e8:78:81:d5:c4:bb:18:28:1b:c1:
         21:24:3e:29:ce:67:d6:f0:6e:02:39:10:a0:b8:26:a9:8d:e2:
         34:31:ac:83:75:f7:44:02:b5:b4:72:2b:c1:af:40:f8:f8:00:
         9b:d0:3c:a5:a7:f2:6b:77:6e:31:cb:c2:e4:5e:cd:05:be:8d:
         71:78:f9:d4:d8:4a:fc:ce:17:2a:f2:a2:ae:d0:b6:39:87:ec:
         4a:9e:f0:7d:f5:a2:b4:2f:01:8d:0d:d6:5d:fb:fa:69:84:41:
         7d:b7:54:d5:b9:9c:2b:ac:24:06:5e:28:89:47:8c:2b:1d:7c:
         c8:81:20:97:fb:8b:07:8e:bd:3e:b5:9b:83:de:29:76:14:d5:
         bf:60:c9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----