Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ofp6Wb_n6bhZWkIzRb3gQgbT6f0.roa
File:                     Ofp6Wb_n6bhZWkIzRb3gQgbT6f0.roa (raw, json)
Hash identifier:          47xA1EeKROAHW2taQdNnm9WDAoZo3ORqJT8PpZVManM=
Subject key identifier:   39:FA:7A:59:BF:E7:E9:B8:59:5A:42:33:45:BD:E0:42:06:D3:E9:FD
Certificate issuer:       /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial:       078C
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ofp6Wb_n6bhZWkIzRb3gQgbT6f0.roa
Signing time:             Tue 29 Sep 2020 09:52:51 +0000
ROA not before:           Tue 29 Sep 2020 09:52:51 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        192.72.32.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1932 (0x78c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
        Validity
            Not Before: Sep 29 09:52:51 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=39FA7A59BFE7E9B8595A423345BDE04206D3E9FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a0:fe:b5:a9:a3:90:ca:a5:d4:72:d0:fc:85:
                    21:3b:99:b5:f9:0e:43:ed:15:40:14:39:1d:d1:b2:
                    3e:b6:a6:3a:8c:f1:83:77:5e:32:b7:94:e8:02:0c:
                    91:68:43:d9:e7:f0:98:00:69:0a:e1:e1:4f:ad:df:
                    38:36:7b:e7:3d:ae:41:03:15:f9:b4:83:7e:34:1f:
                    bb:63:3a:30:bd:b4:f8:37:f3:71:12:3c:c2:d4:e6:
                    ff:d6:f2:67:36:15:3a:a9:ea:48:2f:a4:56:c4:60:
                    64:25:15:a5:e1:48:6a:37:66:95:4a:c6:ea:27:5f:
                    7b:db:8c:6a:02:6f:3b:33:94:fd:07:06:bd:47:5e:
                    e4:22:26:3a:f0:d2:fa:2c:c0:38:f3:42:0a:a8:4a:
                    3a:10:b8:5d:fb:f1:72:b3:3c:ce:0e:70:54:97:a4:
                    06:4f:ca:da:8e:aa:80:e0:3f:75:a4:97:94:6b:a4:
                    dd:91:19:c1:a7:f4:41:72:4d:2a:46:6a:90:69:f3:
                    6b:f3:3c:a2:37:0f:9e:44:0e:c5:5f:a0:85:9e:59:
                    03:92:f4:db:b7:eb:da:00:8e:b2:f0:b5:b6:02:7d:
                    e5:f8:c8:05:51:9d:0c:e9:e1:c2:b6:e4:a2:21:bc:
                    11:cc:a2:c5:92:97:d2:1f:0d:0c:18:e2:ed:fe:99:
                    ec:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:FA:7A:59:BF:E7:E9:B8:59:5A:42:33:45:BD:E0:42:06:D3:E9:FD
            X509v3 Authority Key Identifier:
                keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ofp6Wb_n6bhZWkIzRb3gQgbT6f0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.72.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         49:e8:0b:71:27:09:8c:f0:ba:23:6e:fd:af:42:05:90:7f:9c:
         02:69:01:77:e2:81:c8:e9:57:e1:21:5b:bb:ab:34:eb:4d:53:
         06:34:0e:c5:7e:0d:ae:bc:15:2f:32:73:a8:e3:aa:b9:34:9b:
         f2:f5:18:6d:04:65:58:47:82:4e:3c:09:a9:ce:91:73:ba:cf:
         66:4c:9c:11:ab:04:99:b1:ef:bf:b8:7f:36:91:52:78:a3:fb:
         93:48:02:e5:de:46:eb:d8:5a:7d:a0:18:d2:7f:81:ed:23:d2:
         e5:2d:b3:20:6b:00:f0:d1:a5:0c:21:47:b5:ab:e9:33:3b:e8:
         2b:28:52:ca:8a:8d:3a:84:2c:ac:1b:b3:62:cf:1f:62:c7:a0:
         e4:95:98:be:b9:b1:15:11:3b:07:24:d6:77:74:a7:38:8f:77:
         e1:00:e1:d5:ac:07:4d:be:46:7b:52:4b:8d:2f:a1:24:0f:36:
         22:ff:40:46:d9:5e:e1:a5:47:d4:ba:3f:37:09:c0:66:b5:76:
         df:b0:c7:72:45:51:0d:8b:8c:6c:91:5a:ce:d2:14:58:db:9c:
         cb:d2:05:cd:2a:fe:5d:0c:b7:40:89:6b:e6:81:9d:ca:a1:5e:
         af:33:6f:b1:a2:ee:36:80:a7:a1:1b:81:87:f4:0b:6f:30:bb:
         6a:79:cb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----