Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/EnGIeKk7weS4kTNCaXzZVXc8CaE.roa
File:                     EnGIeKk7weS4kTNCaXzZVXc8CaE.roa (raw, json)
Hash identifier:          sHPCzx97OUHlmvd6xfEQ8y49I6Z0aLHY61HeoV7EX6U=
Subject key identifier:   12:71:88:78:A9:3B:C1:E4:B8:91:33:42:69:7C:D9:55:77:3C:09:A1
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0863
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/EnGIeKk7weS4kTNCaXzZVXc8CaE.roa
Signing time:             Tue 29 Sep 2020 09:51:59 +0000
ROA not before:           Tue 29 Sep 2020 09:51:59 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18049
IP address blocks:        106.107.175.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2147 (0x863)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:51:59 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=12718878A93BC1E4B8913342697CD955773C09A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:77:9f:12:6c:d4:29:ec:f6:36:2a:98:00:72:
                    54:80:2e:2d:d6:d1:ab:59:5e:42:82:d6:b1:ad:38:
                    2f:b1:07:0f:38:37:36:5b:ae:af:0b:ff:e3:bf:c2:
                    e9:4c:eb:14:d4:53:8a:7e:07:fe:f3:bf:c5:02:75:
                    c4:b1:86:36:fe:67:4e:cd:96:84:a4:e5:9a:b3:fa:
                    91:e1:c2:b3:4f:09:cc:1d:95:6d:9b:ad:91:b5:8b:
                    6a:5e:45:89:84:b0:be:16:8c:17:31:7f:c5:f8:cd:
                    02:dc:49:6e:54:f8:87:57:92:dc:98:09:f6:9c:35:
                    83:cc:09:27:bd:22:93:b1:93:37:23:91:5e:56:12:
                    1a:45:b0:2c:e6:d7:ea:3f:80:db:9e:65:fb:a2:81:
                    54:50:42:b5:c0:f5:60:37:6c:c0:90:97:d0:5c:2a:
                    aa:83:3f:e1:2f:5c:56:5a:cd:7d:d2:2a:95:e7:4f:
                    91:1d:01:99:54:6e:0b:4d:fb:e2:26:8c:1f:7d:fb:
                    c4:ab:8a:90:a4:ff:f5:10:89:80:73:df:cf:12:46:
                    c5:8a:c6:87:97:32:31:89:20:e8:5c:0b:d6:2c:29:
                    b0:cd:b9:d5:e4:f6:22:e9:43:82:38:e5:97:9e:b8:
                    c8:b7:28:74:7c:c8:8f:b9:76:35:1e:39:29:75:6f:
                    f5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:71:88:78:A9:3B:C1:E4:B8:91:33:42:69:7C:D9:55:77:3C:09:A1
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/EnGIeKk7weS4kTNCaXzZVXc8CaE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.107.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:bf:b5:d6:20:ce:ae:d9:f3:e8:b2:d2:d1:18:ef:47:31:b8:
         2c:d9:18:0e:59:57:86:45:6b:8a:8f:c4:d8:d9:ef:47:02:27:
         ac:72:18:3f:09:13:7d:b3:e5:8a:01:3c:a7:53:0c:39:32:a7:
         44:e2:0d:d4:55:5b:84:9f:26:58:c9:fe:b7:4f:1d:df:dc:45:
         57:b1:f9:02:51:73:3c:37:3f:42:e8:9c:b2:6a:bb:66:a0:7f:
         42:02:21:c3:98:97:a2:e1:6f:89:d7:b9:ee:55:c3:7c:60:36:
         3d:00:df:99:d2:27:63:11:f3:59:e7:ab:9c:be:47:fa:f0:76:
         bb:40:98:32:1c:67:58:47:cd:4f:39:c5:84:41:2a:b7:85:f4:
         83:3b:7c:02:b3:88:8f:a9:6d:62:28:ae:59:e9:6a:8e:fb:a6:
         31:5f:72:c0:b4:9c:de:82:38:95:9b:2e:e8:71:de:6a:97:74:
         5d:fd:bf:6c:a6:21:87:13:21:11:92:49:95:7a:0a:57:6c:26:
         8d:36:6e:60:57:7d:be:d9:68:b7:c8:19:0e:49:4e:48:c0:d1:
         e3:e9:56:16:47:20:7f:3c:84:bb:7f:6f:b5:fb:4a:1a:9c:80:
         80:cb:40:f8:fa:f5:d4:5e:84:ae:d8:c2:bc:5f:86:6f:50:46:
         ee:d1:56:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----