Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/G6Wnz1VPuMNAzb0JiVzq3qkJP2k.roa
File:                     G6Wnz1VPuMNAzb0JiVzq3qkJP2k.roa (raw, json)
Hash identifier:          Jm0qyU3r954rtMcCzI48PUTHqUFEekXZsH2KRwIc58c=
Subject key identifier:   1B:A5:A7:CF:55:4F:B8:C3:40:CD:BD:09:89:5C:EA:DE:A9:09:3F:69
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0886
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/G6Wnz1VPuMNAzb0JiVzq3qkJP2k.roa
Signing time:             Tue 29 Sep 2020 09:52:07 +0000
ROA not before:           Tue 29 Sep 2020 09:52:07 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        106.104.0.0/14 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2182 (0x886)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:07 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=1BA5A7CF554FB8C340CDBD09895CEADEA9093F69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b8:fc:ab:37:aa:21:d6:e5:5c:e0:ff:8e:a3:
                    02:24:5b:70:c0:05:fa:6a:c6:4e:47:2b:81:0f:76:
                    30:1d:4f:b1:71:41:52:9a:df:5a:19:aa:94:f4:54:
                    bf:48:c2:2a:54:6d:21:11:e5:78:3e:dd:03:6e:3b:
                    43:88:94:a8:b2:5b:52:9b:29:c1:87:b2:85:08:14:
                    ae:89:5f:85:fe:55:44:85:d9:2b:96:c5:d9:15:97:
                    73:a7:a2:b7:bf:a5:13:66:78:d5:79:8a:41:1b:a1:
                    6e:d8:3a:c5:d9:a2:f6:3f:10:fb:be:12:28:88:24:
                    08:db:d9:5b:78:4e:fa:b6:09:d0:00:ee:e8:a7:5f:
                    af:47:46:9a:52:1d:e9:0c:ea:b8:32:19:e3:fc:57:
                    c7:6b:2f:5f:22:55:8c:77:06:7a:08:60:22:f5:25:
                    0d:35:55:18:50:31:61:e9:99:3c:ff:34:3a:18:5b:
                    38:b1:81:dd:4c:1d:9e:0c:b8:ea:8f:bd:55:2e:9a:
                    c1:a7:a2:27:67:46:98:80:2f:37:ba:3c:53:a0:7c:
                    ca:dc:35:6d:71:30:c4:6c:ed:04:41:70:eb:95:80:
                    ba:20:2f:ed:35:f9:e1:a2:e3:e5:6d:e0:a7:82:e6:
                    8b:4a:13:34:c5:81:60:8d:70:2e:36:db:b5:85:ec:
                    71:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A5:A7:CF:55:4F:B8:C3:40:CD:BD:09:89:5C:EA:DE:A9:09:3F:69
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/G6Wnz1VPuMNAzb0JiVzq3qkJP2k.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.104.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         b0:93:d7:64:ed:2e:26:72:73:a8:c2:59:34:72:70:0a:91:8f:
         8d:ec:21:e7:44:65:cb:43:0f:8e:89:cd:27:2c:35:c8:b5:39:
         82:63:f2:03:cc:2f:88:9c:71:da:aa:2f:2d:5f:2f:2d:69:f3:
         69:17:b4:fb:04:03:21:3f:de:c0:09:1b:6a:09:7a:46:2f:b4:
         67:60:4f:17:55:41:11:6a:70:48:cc:9a:78:ab:c2:0b:84:c7:
         ac:1a:bb:88:07:1c:1f:ac:21:85:5d:ef:9c:06:26:b7:1f:de:
         e4:c8:02:fe:7c:94:c8:19:af:2c:d4:77:c8:a4:0b:48:77:14:
         de:10:60:9c:ea:df:be:b4:c6:7a:c3:34:18:91:5b:fb:12:f3:
         e9:fd:4e:a1:eb:82:06:7b:6b:46:03:90:54:c3:f9:a1:ba:ea:
         11:4c:95:b8:dd:34:48:b4:93:3a:a5:b4:4e:39:2a:ef:6f:32:
         f5:c8:f0:65:79:45:f4:e8:0b:b4:40:99:58:5b:26:49:e9:85:
         39:3e:e2:4c:ee:70:65:b9:a1:48:71:45:f2:32:85:2f:9f:1a:
         ce:99:f4:f2:16:26:68:0a:11:c2:ef:be:10:00:22:d6:8a:04:
         85:ea:f1:ff:5b:da:25:fb:63:ec:70:8b:62:03:50:f2:2a:4e:
         0a:cf:5e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----