Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/E-zcjAC8ReBrTCZT08T4VN_0ZDw.roa
File:                     E-zcjAC8ReBrTCZT08T4VN_0ZDw.roa (raw, json)
Hash identifier:          PCF87AR+xn/LL+eLuDjwNobS1vOWcPx9QubeoB+iSJE=
Subject key identifier:   13:EC:DC:8C:00:BC:45:E0:6B:4C:26:53:D3:C4:F8:54:DF:F4:64:3C
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0EB0
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/E-zcjAC8ReBrTCZT08T4VN_0ZDw.roa
Signing time:             Wed 29 Sep 2021 02:43:52 +0000
ROA not before:           Wed 29 Sep 2021 02:43:52 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     4780
IP address blocks:        123.205.15.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3760 (0xeb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:52 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=13ECDC8C00BC45E06B4C2653D3C4F854DFF4643C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d3:56:e2:09:a9:c3:46:d7:5b:cd:89:c9:47:
                    6c:30:7f:ad:f5:aa:8b:ee:97:9f:0e:7a:8d:f6:fa:
                    70:01:64:68:76:e5:1e:27:77:3d:2a:ac:c0:5d:6b:
                    1d:ba:f9:14:17:ba:a2:49:1f:e9:48:f3:b9:35:1d:
                    64:a1:ef:01:4d:c7:64:e9:ac:e7:2e:0f:97:13:b9:
                    ce:30:49:68:bb:08:03:78:b2:73:1a:e7:14:b8:9b:
                    e1:7f:e6:c4:8b:ae:15:34:ce:9c:7e:c2:11:56:c9:
                    79:d8:91:61:d8:08:e1:22:5c:ec:ea:8f:6f:47:d3:
                    8a:7c:92:70:3a:62:07:f1:39:e3:2d:bb:8b:6a:cc:
                    36:66:86:89:06:89:da:cd:a5:f7:9f:b7:56:8e:c5:
                    f7:c0:45:16:a5:8a:c1:c7:a6:08:32:c3:2a:06:d4:
                    9b:63:ce:7c:27:8d:3c:74:70:ba:14:2f:9c:1b:3a:
                    61:ad:bf:92:e0:9e:1c:7d:75:70:f5:cd:25:7d:7f:
                    f5:2b:c9:b3:a1:c2:7c:98:56:db:c3:da:9a:96:10:
                    26:44:05:60:d9:08:1b:8c:11:4e:12:b2:99:16:bd:
                    1c:5c:d5:2b:04:73:c6:aa:65:3a:0e:3e:24:71:ca:
                    3d:ae:7f:3f:65:32:eb:46:b0:3d:f5:bd:9a:91:cd:
                    dd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:EC:DC:8C:00:BC:45:E0:6B:4C:26:53:D3:C4:F8:54:DF:F4:64:3C
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/E-zcjAC8ReBrTCZT08T4VN_0ZDw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.205.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:c5:76:36:14:78:41:a7:71:ff:03:91:56:3d:41:79:d9:b8:
         d6:a4:05:2f:0b:df:86:3b:30:90:bb:05:b0:8a:bc:dd:ab:d6:
         60:0e:88:22:6d:68:a0:a8:db:25:6b:71:6e:4e:a3:13:1e:60:
         c0:89:d3:25:b4:4c:4f:b9:5b:96:ce:05:03:44:1e:73:48:5d:
         2a:ed:b8:18:8b:2a:01:73:a4:f6:41:71:de:2b:c6:8f:aa:f6:
         04:af:9d:b4:e1:cf:1f:3f:78:b0:ef:7c:a9:ab:b2:41:44:cd:
         2f:96:7b:72:4f:ff:33:7f:08:98:8d:db:7b:be:c9:a9:88:78:
         ea:fa:7c:79:79:11:db:97:ff:05:b0:86:c4:d9:aa:fe:cd:65:
         38:a4:62:d2:84:55:eb:bf:32:c2:20:33:f4:b8:fc:a8:fb:6e:
         d5:b5:20:e6:2a:08:de:f5:86:a5:49:b8:a7:3a:89:0e:a1:e8:
         a1:26:4e:67:6b:20:c2:db:73:fc:92:67:52:7d:74:84:6f:a5:
         28:09:c1:51:be:ae:a4:4f:61:72:c3:f5:d0:e1:0e:c0:5e:c0:
         68:f3:30:04:70:08:90:43:b8:d9:35:5d:aa:6f:d7:38:8c:5b:
         56:a8:22:98:33:af:00:dc:c8:f5:69:3b:6f:fe:fb:b1:04:1c:
         96:51:02:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----