Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/NItcM69mZ7W7gCEi7LHx7zoUVbM.roa
File:                     NItcM69mZ7W7gCEi7LHx7zoUVbM.roa (raw, json)
Hash identifier:          HGBQgKenOMdhZlKx297U2Le2b+UCUIhPvlROhfIC8EY=
Subject key identifier:   34:8B:5C:33:AF:66:67:B5:BB:80:21:22:EC:B1:F1:EF:3A:14:55:B3
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0E6F
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/NItcM69mZ7W7gCEi7LHx7zoUVbM.roa
Signing time:             Wed 29 Sep 2021 02:43:35 +0000
ROA not before:           Wed 29 Sep 2021 02:43:35 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131584
IP address blocks:        106.105.183.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3695 (0xe6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:35 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=348B5C33AF6667B5BB802122ECB1F1EF3A1455B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:22:af:8e:12:e2:ae:71:e6:c7:ea:3f:d2:ad:
                    3b:f5:f4:70:9b:e7:70:a7:49:66:a0:d7:02:5a:e2:
                    39:36:ef:34:e7:a9:b4:3c:61:8e:3d:c9:1e:93:d2:
                    f3:eb:81:7b:28:dc:96:8d:63:98:6e:33:31:6c:9f:
                    ee:9a:6f:e3:1d:a7:90:08:a7:c8:da:3c:7e:b6:2d:
                    26:f1:f1:b6:4a:b1:67:39:3a:4a:c6:f7:de:ad:92:
                    9d:3b:e0:01:d1:fd:c6:cf:4a:59:74:b3:a1:8f:a4:
                    f6:42:ac:3b:18:c9:1a:f3:fe:f1:96:d7:04:ae:11:
                    80:6c:08:86:79:21:55:7d:c4:b1:e2:da:1c:3a:98:
                    67:cd:a4:b6:d2:76:85:0c:96:7b:1b:80:af:c0:d0:
                    80:f0:3b:be:3b:3f:7f:46:cd:34:4d:1b:ae:ad:1c:
                    63:39:7f:e6:eb:99:01:eb:52:7d:8a:ff:78:64:16:
                    c1:68:1b:30:58:d9:b5:05:c6:b7:ae:23:31:32:31:
                    84:53:5a:0d:e9:ed:49:f5:58:49:7f:e2:d2:00:95:
                    ec:f9:77:c8:74:1e:d5:c2:ff:2f:6a:66:e3:5f:39:
                    22:ff:83:98:cc:fd:f1:d3:6c:70:6a:5c:8e:5d:f8:
                    84:fc:b0:6c:b3:32:8e:64:b1:19:16:58:a2:67:5a:
                    95:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8B:5C:33:AF:66:67:B5:BB:80:21:22:EC:B1:F1:EF:3A:14:55:B3
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/NItcM69mZ7W7gCEi7LHx7zoUVbM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.105.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:05:a3:07:a7:0f:c3:3d:0d:a8:1d:f0:3f:c0:4c:01:de:d8:
         4d:10:a1:9b:05:f4:81:57:63:d7:91:df:bc:4d:11:32:db:d7:
         92:1f:ad:e7:ac:63:c3:61:50:35:3f:85:b5:e3:f1:ef:33:96:
         7b:a9:28:7e:fa:a2:4b:85:89:d0:7b:60:74:5b:b7:13:a2:9c:
         06:b6:57:a2:52:1f:0d:b6:93:89:60:40:6e:eb:7a:27:15:87:
         1b:11:91:e9:ae:f1:e2:74:f8:31:f5:e7:1d:cc:c1:ee:61:23:
         37:8f:d3:96:f0:e9:0c:ce:65:6a:da:ac:f6:51:ab:d5:cb:41:
         6f:5c:0b:95:f0:9a:53:01:9f:b0:e2:35:e5:26:19:a3:ea:b4:
         02:70:ee:5c:ac:4e:bb:fd:3e:cb:bb:5f:6d:0f:d2:12:1f:47:
         eb:9a:07:8f:f7:3b:f3:f3:9c:2d:5f:41:0f:d0:59:1e:9c:4e:
         e8:a2:8c:be:c1:20:24:31:e0:b4:ce:5f:79:14:35:c1:97:16:
         99:29:24:e1:6e:41:ab:e9:2d:44:20:79:2d:90:19:82:e4:99:
         47:a6:2f:ed:43:22:47:4e:6e:0b:74:59:50:60:82:75:9f:45:
         c4:cc:40:f4:64:1f:6c:69:59:db:37:b9:6a:23:87:5e:89:8a:
         66:87:e0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----