Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Epy4Va_sQezCU9M_GlHg84qM6NU.roa
File:                     Epy4Va_sQezCU9M_GlHg84qM6NU.roa (raw, json)
Hash identifier:          rOs391BraWHhg2kkUQ/syp9n1Dg4himrHZUx/yP48TA=
Subject key identifier:   12:9C:B8:55:AF:EC:41:EC:C2:53:D3:3F:1A:51:E0:F3:8A:8C:E8:D5
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       08A5
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Epy4Va_sQezCU9M_GlHg84qM6NU.roa
Signing time:             Tue 29 Sep 2020 09:52:16 +0000
ROA not before:           Tue 29 Sep 2020 09:52:16 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        210.66.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2213 (0x8a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:16 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=129CB855AFEC41ECC253D33F1A51E0F38A8CE8D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d1:ce:96:00:ab:29:f0:76:db:45:80:7a:97:
                    dd:52:a1:0c:fc:70:08:e5:e6:4a:70:1a:f4:ae:58:
                    c9:ef:42:dd:65:54:10:51:a2:71:46:70:37:25:f0:
                    cd:cb:48:59:77:43:da:45:e4:87:3a:ed:e8:75:8c:
                    97:66:97:5b:1b:f8:39:03:e5:88:26:a2:33:fd:ed:
                    fc:11:c2:9a:59:0c:be:8a:02:27:5d:61:07:6a:46:
                    a3:ab:ea:aa:01:aa:1a:21:df:e4:1b:db:67:57:8c:
                    55:e4:40:b5:a2:e4:1f:00:3a:7f:ad:f7:0c:e9:d7:
                    8d:f3:59:6f:61:e0:21:45:a9:f8:6c:53:a0:22:4f:
                    75:b0:50:a2:48:e3:9d:46:0b:c1:21:80:a3:ac:d0:
                    ce:50:56:c3:5e:c4:7f:8a:07:8f:25:b6:a8:8c:99:
                    bb:34:13:35:98:f1:e7:c9:77:d3:8c:e8:48:ac:0f:
                    c2:fc:6e:ea:a5:e9:83:20:73:1b:e2:a3:91:e9:da:
                    79:44:83:5e:1d:df:30:77:8a:81:01:4a:5d:13:a1:
                    8b:43:1a:ac:2f:33:b2:ea:00:e7:78:9b:a7:c4:64:
                    97:15:3f:7e:c3:d4:91:56:5e:96:f8:9c:06:84:ee:
                    e4:fc:87:3d:3f:85:a1:51:20:a3:95:0c:b2:7d:7d:
                    8d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:9C:B8:55:AF:EC:41:EC:C2:53:D3:3F:1A:51:E0:F3:8A:8C:E8:D5
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Epy4Va_sQezCU9M_GlHg84qM6NU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.66.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         32:3f:fc:e8:44:a7:ba:ae:42:63:4a:e5:26:90:d0:53:6a:79:
         85:94:64:ba:71:30:4c:08:73:77:9e:f0:36:0d:7a:01:fa:56:
         d7:17:10:64:03:a7:f6:ed:84:ae:a9:c5:2d:38:a0:d3:e9:0f:
         c6:a2:da:3b:3a:e8:3d:be:c4:9b:a9:6d:d1:e8:37:50:64:25:
         25:cc:a0:40:09:8f:de:f2:c8:9a:db:a9:27:46:12:73:d6:a0:
         a9:78:8e:0e:df:76:1d:d9:3b:2d:4b:8a:a3:38:ff:2a:dc:68:
         eb:62:db:fe:47:a6:99:04:62:f1:89:92:e3:bd:68:bd:51:e0:
         6e:f5:33:50:2c:53:1b:15:5b:57:82:cc:f0:1d:f2:5c:a8:6e:
         9b:db:8c:95:6f:37:ae:18:26:32:1e:dc:f7:15:1c:9c:e0:b6:
         4d:1a:6b:d0:bd:3a:c2:3c:30:bc:19:a0:ac:9a:db:15:49:ff:
         82:74:7e:a0:ff:49:ea:a7:7d:0b:fd:f6:f4:f7:9a:ee:bc:58:
         d4:fd:fd:87:75:44:16:38:fa:8c:0b:e1:7e:1d:ef:36:71:7f:
         c3:27:04:79:41:47:36:92:b9:43:dc:cc:7b:85:f8:b4:3a:ce:
         74:d5:fa:1c:c3:e6:b8:dd:d6:eb:fb:13:0f:0c:4b:c3:09:03:
         f9:e6:69:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----