Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/EQDdq9ggYevWxvSdIG4XzIO2ymk.roa
File:                     EQDdq9ggYevWxvSdIG4XzIO2ymk.roa (raw, json)
Hash identifier:          9sV2/XsYVPzvTEDanaLpXxqrd4ZMiow4QcJSo21ajF0=
Subject key identifier:   11:00:DD:AB:D8:20:61:EB:D6:C6:F4:9D:20:6E:17:CC:83:B6:CA:69
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0EC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/EQDdq9ggYevWxvSdIG4XzIO2ymk.roa
Signing time:             Wed 29 Sep 2021 02:43:57 +0000
ROA not before:           Wed 29 Sep 2021 02:43:57 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     4780
IP address blocks:        112.105.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3780 (0xec4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:57 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=1100DDABD82061EBD6C6F49D206E17CC83B6CA69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ca:5a:33:82:0e:4c:86:58:f3:5d:25:4e:f9:
                    26:51:c0:a4:7c:0f:31:cb:7d:7a:d4:d3:2a:cb:c7:
                    2a:18:d1:8d:85:3a:41:25:ef:ba:46:dd:4e:4e:51:
                    34:8e:b0:ec:40:cb:42:16:b5:a4:dd:5a:0f:38:08:
                    83:71:d2:81:e9:58:42:60:57:e0:71:2d:fc:0e:77:
                    26:60:6e:c1:05:c2:a0:06:2c:23:66:9c:86:4e:98:
                    99:0b:87:d7:a2:d7:1a:ba:6b:64:87:dd:ba:4b:2f:
                    7a:2b:41:86:c2:5d:ca:27:cf:86:78:d1:ac:71:54:
                    c1:8d:a3:ca:43:e9:86:e9:97:f2:4c:3e:59:ba:2d:
                    71:bc:d4:a4:29:1b:74:e4:de:07:d4:d8:39:79:e4:
                    99:f5:df:99:11:47:7b:e0:75:70:b3:ad:e3:bb:5b:
                    b3:01:be:b4:7b:86:22:bb:af:51:7e:cb:69:ce:ae:
                    41:c9:88:75:82:07:66:32:7a:59:be:04:bc:83:c4:
                    2a:da:d4:19:81:cb:d2:2b:9f:b2:22:8a:75:c0:66:
                    b5:64:ab:92:57:ec:2f:c0:ad:52:f4:9f:1b:cc:52:
                    a6:b5:6e:fc:bb:8e:07:4f:60:81:a9:8d:b0:09:e1:
                    08:3c:01:70:85:5c:97:05:bb:71:7a:75:bd:cd:e4:
                    59:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:00:DD:AB:D8:20:61:EB:D6:C6:F4:9D:20:6E:17:CC:83:B6:CA:69
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/EQDdq9ggYevWxvSdIG4XzIO2ymk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.105.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         29:9f:14:4c:4b:fe:4b:7b:6a:81:35:21:b5:2c:79:a9:0e:b0:
         82:11:86:2a:a8:db:cf:79:57:42:9c:5e:ba:b7:6c:dd:ee:58:
         12:92:a0:4d:b3:04:a0:9b:d6:11:08:6e:5d:d5:4d:e8:9b:6e:
         8d:fd:6e:d0:49:7b:1f:65:88:e8:2f:db:72:1c:8b:af:d7:d3:
         cd:bf:c3:1f:d8:f2:56:7e:1f:e4:95:fb:74:4e:10:57:32:c7:
         b6:65:5e:10:5c:67:71:0f:8a:7f:6d:47:e3:9a:b4:e1:08:e1:
         b3:73:b4:b0:8a:d4:22:c4:7e:37:97:aa:65:bb:c5:af:6b:e4:
         e6:14:03:fe:1e:6d:fc:00:75:cf:cd:d2:18:16:55:b6:57:51:
         8b:a7:8a:fc:aa:e5:18:f0:0b:6f:39:07:bf:d2:b7:15:2e:b3:
         01:ba:5e:65:8b:3c:e6:b3:2c:ab:0c:76:dc:82:64:a9:b1:a6:
         60:57:4f:08:60:84:d3:2e:8d:f7:06:f6:0c:db:a2:17:27:4c:
         99:96:28:f9:21:1f:36:9f:a8:3e:ec:f0:04:4a:29:ce:98:61:
         c6:51:43:fb:45:3c:d1:53:b8:c7:90:18:6f:67:3e:aa:f9:31:
         70:8c:6d:7b:57:ed:0b:8e:af:83:06:65:ad:6e:6d:9e:2d:35:
         3a:b6:1a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----