Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/KsyVQ25VF5uc6w7UyT2D1jL2psY.roa
File:                     KsyVQ25VF5uc6w7UyT2D1jL2psY.roa (raw, json)
Hash identifier:          CB9kSNSe78quw5ksRERnDGHKAAuERG4SPSd7xDTErpc=
Subject key identifier:   2A:CC:95:43:6E:55:17:9B:9C:EB:0E:D4:C9:3D:83:D6:32:F6:A6:C6
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       08ED
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/KsyVQ25VF5uc6w7UyT2D1jL2psY.roa
Signing time:             Tue 29 Sep 2020 09:52:36 +0000
ROA not before:           Tue 29 Sep 2020 09:52:36 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        112.105.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2285 (0x8ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:36 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=2ACC95436E55179B9CEB0ED4C93D83D632F6A6C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:1c:d5:80:fa:79:c9:58:5c:09:15:f8:b3:d7:
                    4c:6c:cb:b4:fb:3c:ad:d0:13:a0:d9:5e:b5:5c:c8:
                    b8:df:55:fb:57:8e:87:0f:68:51:ca:6b:eb:06:8c:
                    20:e0:1b:a9:6c:da:d7:c4:ba:af:42:e5:87:63:f7:
                    bb:85:33:65:b8:c1:87:00:f0:40:49:fb:d9:2b:61:
                    a4:5e:90:1e:02:a8:e2:0d:94:cf:74:2a:0a:e7:f6:
                    20:66:d8:6d:4a:71:50:8f:46:21:e5:32:27:20:d6:
                    33:1c:74:7d:5a:bd:7a:43:7b:de:26:5a:d8:5a:f5:
                    d7:be:e0:cd:04:e5:a3:ef:98:44:67:fd:f7:f7:bb:
                    55:a4:4a:47:9d:8a:60:71:66:da:3d:70:14:0e:93:
                    82:94:be:ce:25:fe:59:03:1f:e5:be:29:ec:1c:47:
                    9d:03:93:92:b9:66:88:41:9e:6a:f1:1a:c1:63:53:
                    21:c7:12:86:40:17:f3:0b:2c:1d:00:c6:41:aa:08:
                    59:35:f0:70:83:7a:a6:07:23:e0:f5:2d:4f:b6:6f:
                    28:53:52:eb:eb:56:7b:09:3a:60:15:6f:a7:86:d4:
                    fa:02:a4:a8:e8:c2:60:a3:ac:ef:42:a0:b4:6e:d7:
                    a0:be:28:30:ca:cf:b5:71:25:6c:d2:2f:e8:fc:f7:
                    af:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CC:95:43:6E:55:17:9B:9C:EB:0E:D4:C9:3D:83:D6:32:F6:A6:C6
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/KsyVQ25VF5uc6w7UyT2D1jL2psY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.105.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         ae:3d:3d:df:71:80:16:2e:9e:54:1e:73:a8:7c:01:15:6b:47:
         26:62:ad:88:7f:1b:4a:c5:bf:ca:1d:ef:be:e2:3a:0a:64:7e:
         24:5c:6c:06:83:a2:d0:1b:0b:07:2d:3f:0d:e5:a2:a8:1a:7e:
         05:95:00:84:31:72:4b:e3:3c:5c:2b:cd:f1:cb:90:5d:2b:81:
         a0:90:88:88:17:2c:14:3e:8e:4e:a0:af:7b:c9:7a:14:c4:c4:
         29:94:7e:69:93:2f:d4:2e:9b:8e:33:25:3a:12:3f:77:45:9b:
         f9:d6:47:92:84:9f:6e:b3:ce:7b:ce:86:97:d0:88:d3:43:9c:
         6e:76:9a:1b:39:66:f6:8c:49:d8:c8:72:9a:97:39:a5:7d:0a:
         02:4b:ba:60:e3:33:2f:33:f4:da:bb:8c:30:0d:cd:c5:dc:0c:
         8b:db:93:92:a6:d1:42:e5:d6:0e:60:8f:7b:71:ab:c4:ac:6d:
         b7:a9:e8:8e:69:d0:6c:4f:51:9f:14:12:6d:82:ec:e6:2d:a4:
         25:77:d2:25:43:0d:9e:5e:51:1d:1c:da:15:4c:2e:34:d2:cf:
         f9:e8:92:74:88:de:62:ef:b5:90:e5:00:60:30:72:d7:91:95:
         ed:07:20:20:b3:78:ba:7a:c8:5d:ce:12:62:91:67:f7:da:28:
         5d:a9:db:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----