Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/P4BKk_5xpmGXiq9jAhPC-Y5aNAU.roa
File:                     P4BKk_5xpmGXiq9jAhPC-Y5aNAU.roa (raw, json)
Hash identifier:          KmxFxnTXiqU8JhXe9i/XXRcQCsfGYlHcVOgW5RvocDM=
Subject key identifier:   3F:80:4A:93:FE:71:A6:61:97:8A:AF:63:02:13:C2:F9:8E:5A:34:05
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       08E9
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/P4BKk_5xpmGXiq9jAhPC-Y5aNAU.roa
Signing time:             Tue 29 Sep 2020 09:52:35 +0000
ROA not before:           Tue 29 Sep 2020 09:52:35 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        123.204.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2281 (0x8e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:35 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=3F804A93FE71A661978AAF630213C2F98E5A3405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:47:f3:ae:3d:92:04:3a:21:66:93:67:92:55:
                    24:d4:db:1d:c7:f2:0e:59:b7:c5:3f:c8:c0:39:06:
                    24:37:86:9e:2f:bc:f4:33:1a:e4:0f:4d:52:3f:12:
                    3d:34:8d:04:ea:ba:fd:ca:e8:fd:5c:65:65:4d:41:
                    07:82:95:8f:dc:ed:4e:3a:6f:c9:b4:ca:b8:a1:95:
                    d2:7a:bb:e0:27:62:3b:6f:9c:80:73:ba:a4:ce:8f:
                    20:82:7d:0f:2d:86:d9:26:f6:4b:42:a3:86:86:cf:
                    10:87:e0:44:c4:37:47:5e:6d:6d:d0:48:be:4c:b1:
                    a5:f6:4c:09:ca:68:de:a4:e5:f1:c3:33:63:30:ed:
                    11:4d:64:eb:4b:7d:91:d5:b2:cc:86:91:18:2f:0b:
                    9e:7b:b8:27:23:30:87:0b:9f:e7:1b:7f:a2:79:cc:
                    92:a0:49:f7:16:3c:3f:29:1b:49:25:ae:60:a7:85:
                    89:ac:e6:bb:1a:a2:9a:af:04:95:b7:a7:42:e7:4a:
                    c6:af:97:ac:d3:86:bd:db:96:a3:39:33:a8:19:8c:
                    87:50:53:6e:43:ee:7d:95:c4:73:9d:55:d8:5f:47:
                    f3:78:95:1f:9e:04:71:79:39:99:11:2f:ee:02:62:
                    6f:b3:c5:36:d8:4b:a2:52:dd:2e:5c:6e:b6:fa:c9:
                    05:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:80:4A:93:FE:71:A6:61:97:8A:AF:63:02:13:C2:F9:8E:5A:34:05
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/P4BKk_5xpmGXiq9jAhPC-Y5aNAU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.204.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         89:eb:d5:5d:1d:f6:30:bf:18:c9:e9:77:45:86:22:0b:89:18:
         c7:cb:20:fb:54:89:39:a2:ae:c6:66:cf:5b:4f:63:ad:74:c4:
         3b:83:bd:0d:cc:df:a6:70:b2:00:9f:9e:69:06:ea:5e:dd:e1:
         1f:8b:ce:3b:d4:bc:a7:34:0b:4a:b0:04:67:bf:a3:8c:a8:27:
         b4:20:19:09:00:eb:b9:67:85:7c:60:ad:fc:a1:a4:0d:26:6c:
         6d:db:73:d7:91:b3:60:8d:48:e5:32:d7:7e:60:2d:c0:ad:b1:
         67:f3:5d:73:74:4e:e1:76:8e:e4:e4:bb:3c:a2:34:5f:b1:5d:
         a8:29:a7:48:c7:32:14:c7:35:f9:81:33:e7:8b:cf:18:7e:8d:
         9d:ad:7c:d6:34:04:8a:e8:c5:c3:1d:81:42:14:f9:44:46:12:
         75:03:09:8f:a6:67:1d:58:6b:08:6b:ea:ec:99:3d:86:07:06:
         bc:9b:5d:a9:1a:f7:e4:5c:8d:e6:d8:6e:d2:66:5f:43:5c:c8:
         b4:cc:8e:56:50:98:41:e1:74:49:5d:27:f4:85:bf:01:c8:10:
         10:ca:72:cb:71:a6:ae:75:c3:72:49:4f:f2:f9:f4:c2:69:7f:
         32:27:1d:0c:57:cb:fe:6a:fa:b2:c2:21:4f:14:e7:ef:ed:23:
         f8:72:bc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----