Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/PhrqbFAoszvBkFgdeGbxHbqcytg.roa
File:                     PhrqbFAoszvBkFgdeGbxHbqcytg.roa (raw, json)
Hash identifier:          BEbMMGLyhIF0k1aDsDdcl/HWrhyxgIvkHR1sGlDXPYg=
Subject key identifier:   3E:1A:EA:6C:50:28:B3:3B:C1:90:58:1D:78:66:F1:1D:BA:9C:CA:D8
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0850
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/PhrqbFAoszvBkFgdeGbxHbqcytg.roa
Signing time:             Tue 29 Sep 2020 09:51:54 +0000
ROA not before:           Tue 29 Sep 2020 09:51:54 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        123.205.32.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2128 (0x850)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:51:54 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=3E1AEA6C5028B33BC190581D7866F11DBA9CCAD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:48:21:72:04:1a:03:28:87:fc:7c:23:96:f1:
                    94:0b:3f:39:d1:22:fe:ed:06:8b:05:3e:bf:72:42:
                    3f:8d:4b:07:f8:81:43:c7:61:28:c8:21:81:d8:35:
                    8a:31:01:62:bb:19:a1:5d:67:b9:f5:b3:22:fa:35:
                    16:74:70:9e:9d:bc:ac:85:71:87:09:cb:0f:d6:42:
                    99:07:ae:3e:67:15:cb:1d:45:0c:b9:ab:19:f3:27:
                    25:b2:e0:33:84:6e:92:f5:c8:f7:d2:33:6c:5a:2f:
                    ae:ab:d8:31:9a:96:50:cf:8b:b2:67:88:1b:92:76:
                    89:47:35:36:e0:e4:1a:f1:99:6c:8c:71:ea:d7:6d:
                    90:ee:3b:5c:bc:5d:d1:29:e0:60:9b:ac:72:96:cd:
                    4e:24:6a:1c:33:d9:35:28:ca:61:66:d2:19:00:b4:
                    73:fc:2a:75:0c:ea:fc:66:5d:39:13:03:4a:c9:64:
                    65:96:6f:35:2b:93:8f:01:77:55:9b:68:a8:93:ab:
                    36:65:1d:fe:4d:37:97:69:22:0b:0c:33:4d:c4:33:
                    77:94:84:75:1e:66:24:cf:40:b3:79:3a:7b:37:a2:
                    97:47:f3:66:a7:bd:15:ca:78:39:bf:d1:e3:85:f2:
                    47:1e:58:a1:3d:62:8d:76:dc:93:e6:5a:49:c2:9a:
                    a8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:1A:EA:6C:50:28:B3:3B:C1:90:58:1D:78:66:F1:1D:BA:9C:CA:D8
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/PhrqbFAoszvBkFgdeGbxHbqcytg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.205.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         19:c5:40:68:05:37:55:f7:bd:25:dc:3d:ed:f9:3f:8f:58:a5:
         24:78:4d:9f:d8:2b:e2:82:5f:e1:33:28:51:96:57:0e:c8:ea:
         04:80:f3:f1:0e:fa:6d:1b:4c:9a:08:45:df:f6:02:c2:be:b1:
         7e:8e:c0:a1:e7:16:38:ae:88:ec:07:85:47:42:3a:74:b4:1f:
         4b:97:7d:3c:c4:ef:32:aa:f0:98:eb:a7:a2:35:40:d2:5a:49:
         7d:63:84:50:7e:f2:e0:74:13:68:20:18:45:d1:6d:c8:3b:92:
         cb:36:6c:5d:30:57:46:0b:13:7c:73:4c:3a:55:7a:ac:e5:47:
         fe:ee:19:6e:75:e2:26:21:0a:3c:3e:da:25:ec:9a:82:d6:28:
         3e:2a:06:17:45:76:20:2e:71:a4:d5:cd:16:a1:53:a5:1b:d2:
         d3:33:f6:2c:84:28:80:ad:ab:b7:93:fb:eb:81:0b:0d:4e:a7:
         c2:99:8e:f0:2d:71:e1:bf:47:63:e0:f8:7b:bf:ee:78:5b:13:
         37:dc:41:0c:3c:3a:75:5f:a9:4e:da:e8:7b:3f:fd:9c:65:ef:
         54:d2:e2:23:4a:cf:5c:59:cd:3b:71:f2:d9:90:bd:b0:86:a3:
         0a:c3:66:cc:e2:ac:75:40:7a:0a:bd:c9:ba:e3:d1:fb:8c:30:
         33:e3:e2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----