Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/D_QfnKnaxwbISPIAhRQCKEZvvFM.roa
File:                     D_QfnKnaxwbISPIAhRQCKEZvvFM.roa (raw, json)
Hash identifier:          QjfS9xqAPqcUsRA0SHsW97vnzdb44sjSZGKM8CNZ/os=
Subject key identifier:   0F:F4:1F:9C:A9:DA:C7:06:C8:48:F2:00:85:14:02:28:46:6F:BC:53
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0CAF
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/D_QfnKnaxwbISPIAhRQCKEZvvFM.roa
Signing time:             Sun 07 Feb 2021 11:44:35 +0000
ROA not before:           Sun 07 Feb 2021 11:44:35 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        112.105.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3247 (0xcaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Feb  7 11:44:35 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=0FF41F9CA9DAC706C848F20085140228466FBC53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:15:bb:4b:3e:f5:c0:1b:68:5a:f9:f2:5f:0c:
                    fc:6e:11:c9:19:33:bc:09:c5:52:27:f8:41:01:c4:
                    bc:0a:77:5f:17:18:6b:85:80:2a:9e:96:87:1f:c2:
                    1b:03:26:63:02:d6:5a:27:1b:91:bd:ba:3c:0f:9d:
                    41:b8:1e:cd:c3:7b:55:67:87:49:34:20:59:19:4c:
                    2f:8a:4c:a3:f9:b4:ec:23:1d:0c:b7:0b:54:99:dc:
                    b1:4a:a5:17:46:b6:c6:86:16:e4:b2:86:e2:93:74:
                    2e:1b:67:27:8e:91:3d:68:e3:97:74:1b:7c:59:74:
                    f4:3f:bb:57:4c:6f:58:82:c5:26:cc:8f:fd:cc:c2:
                    bd:d3:f0:96:7c:4f:b4:a8:b8:df:e7:35:8a:2e:45:
                    5e:94:0a:ac:19:8c:0f:1e:52:12:74:1b:fd:0e:28:
                    87:74:c7:60:06:a8:a6:95:fd:1c:58:99:77:68:08:
                    0c:3b:05:ed:37:98:e9:ac:cc:8e:57:44:88:1a:0b:
                    19:48:c5:eb:58:37:da:8d:bd:d6:9e:54:90:8d:62:
                    e0:55:c4:84:1f:e6:63:0f:ad:3c:cc:ba:28:7a:28:
                    0f:42:f3:c0:7b:4c:b2:69:74:f6:5e:b7:7b:76:d9:
                    d3:c8:5d:16:59:01:9e:bd:e2:fb:65:fb:7e:be:58:
                    3c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F4:1F:9C:A9:DA:C7:06:C8:48:F2:00:85:14:02:28:46:6F:BC:53
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/D_QfnKnaxwbISPIAhRQCKEZvvFM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.105.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a2:2a:e3:97:db:25:d4:7f:e1:48:f2:cb:49:5c:45:20:ff:26:
         3e:99:f1:94:b2:70:7a:c8:a1:89:2d:31:2a:ca:b7:66:47:67:
         4c:f1:f1:51:6e:f8:4f:31:f5:77:b2:c1:33:dc:74:0b:87:08:
         bc:d1:43:f0:df:41:d8:ee:b5:05:99:fa:f7:80:d7:84:16:17:
         0f:6d:ae:ee:82:fc:1e:f1:ef:78:27:e6:ee:10:ad:ba:1b:18:
         fe:b0:61:0f:98:a7:44:c4:3e:08:eb:01:e3:6d:60:bd:94:81:
         6a:e8:10:51:dd:49:46:c1:ee:8d:4d:1c:06:c1:1c:67:11:14:
         14:83:d9:9f:44:1f:98:f9:40:00:04:42:d2:1b:ec:43:60:ae:
         52:99:83:99:af:82:89:d3:12:2c:51:86:32:0d:12:ac:ca:28:
         71:4e:d6:2c:0e:34:bc:ef:79:c4:e7:c8:df:78:f3:63:01:ba:
         69:8d:dd:b2:71:e3:d6:06:70:ca:19:2f:59:e5:d8:c2:8e:3d:
         6f:d4:e0:7b:45:e3:b2:89:51:6c:cd:06:79:f2:db:b7:f5:9f:
         6b:d8:19:99:e5:88:b6:f7:e6:8e:19:c0:61:58:31:9a:61:42:
         92:e4:ce:8d:0c:7c:1d:4d:e5:1e:9b:1f:7c:14:73:60:93:67:
         4f:f2:b9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----