Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/IHCtV8_X6wIVeANcxY-7igqQu2I.roa
File:                     IHCtV8_X6wIVeANcxY-7igqQu2I.roa (raw, json)
Hash identifier:          stuLkL1SOQlL+7XJPfsFAkiHKIOAhaZMBwdeuggUqiw=
Subject key identifier:   20:70:AD:57:CF:D7:EB:02:15:78:03:5C:C5:8F:BB:8A:0A:90:BB:62
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0E15
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/IHCtV8_X6wIVeANcxY-7igqQu2I.roa
Signing time:             Wed 29 Sep 2021 02:43:11 +0000
ROA not before:           Wed 29 Sep 2021 02:43:11 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9919
IP address blocks:        115.30.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3605 (0xe15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:11 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=2070AD57CFD7EB021578035CC58FBB8A0A90BB62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:bf:bb:4d:16:87:8d:4a:43:99:57:28:e6:b9:
                    43:22:fe:a6:45:81:6d:22:ed:96:c5:9b:1e:3e:60:
                    2f:85:fe:d3:f6:ba:32:68:7a:c2:e3:bf:58:c2:73:
                    fa:eb:ea:ff:1b:f7:b8:cd:c4:4b:84:91:f2:15:f9:
                    67:a9:cd:c5:68:92:db:56:21:f1:9a:45:a1:aa:6f:
                    55:00:a8:39:16:03:ac:32:5f:d0:2d:1a:16:ba:cf:
                    1b:a7:1d:9c:23:de:4a:d9:51:22:1b:71:8b:d8:5f:
                    28:1d:75:2d:58:83:73:e9:51:b2:c3:5c:fc:d3:c7:
                    3f:33:71:84:51:cc:f8:9b:fc:51:ec:7c:05:9b:1d:
                    51:88:de:13:bc:7c:8d:d3:e1:fb:c8:6e:c3:e8:0d:
                    f7:52:50:6e:06:87:6b:dd:78:b2:de:55:69:6e:d9:
                    5d:7e:96:62:99:a2:2d:a0:2f:77:08:dd:c5:df:d6:
                    77:4e:c3:fe:d7:c4:d2:33:d6:14:00:ce:c9:f2:27:
                    74:e7:00:c7:ee:5a:93:3d:2f:b2:d9:4e:3e:13:b2:
                    c7:23:df:8e:68:81:00:ea:43:e8:bf:21:0d:59:2b:
                    50:f7:d0:ba:08:fc:b7:57:76:da:46:6b:ce:73:1f:
                    b7:ab:e8:4e:b1:56:e1:3d:89:9e:5d:be:68:bc:33:
                    f8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:70:AD:57:CF:D7:EB:02:15:78:03:5C:C5:8F:BB:8A:0A:90:BB:62
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/IHCtV8_X6wIVeANcxY-7igqQu2I.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.30.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2a:e0:4c:8f:62:59:36:50:c0:c7:94:8f:cc:51:47:29:25:b7:
         2c:eb:bb:63:80:ff:0b:dc:a1:7c:96:0d:1b:2a:51:11:76:2b:
         94:f3:67:93:32:0a:91:a0:dc:8f:aa:da:4f:31:7c:b1:ed:46:
         52:77:06:77:ae:63:36:dd:d7:13:b2:1b:7d:73:3c:a3:64:13:
         e7:a0:12:bb:c6:80:cf:90:2c:9a:99:40:40:f3:a3:97:7f:90:
         4c:9e:f1:09:04:08:67:8e:3b:95:e8:29:81:69:4b:23:35:a5:
         ce:f3:a9:d3:a6:62:c9:26:e4:68:f6:d2:05:83:74:72:bd:e4:
         7b:bd:8a:27:6c:20:b7:a4:5c:7a:95:78:fa:73:3d:8b:3d:59:
         18:a3:23:b2:d5:d0:8e:bc:a1:80:06:a9:6e:44:77:02:f6:fd:
         cc:dd:af:89:17:25:41:3b:63:c0:53:3d:58:e5:2f:2f:5d:64:
         5a:4a:a1:48:09:4f:c5:d5:13:ee:c7:a2:cc:06:55:65:b3:8c:
         a7:79:23:ba:91:f6:74:2d:67:02:50:1d:64:91:9e:85:61:f1:
         52:9b:23:cf:09:9b:a1:ed:bb:0c:57:62:67:63:6b:11:b1:ad:
         e8:3e:9e:cd:fc:64:51:10:98:92:41:91:52:2e:28:16:96:6e:
         b9:d3:9b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----