Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/PyPGuZpeirNEiB7w_iM3nRTuiuQ.roa
File:                     PyPGuZpeirNEiB7w_iM3nRTuiuQ.roa (raw, json)
Hash identifier:          RHo3fENo6ejNJ3fKAp8T6WbyE3wMfAu/7+SMcGHhkQw=
Subject key identifier:   3F:23:C6:B9:9A:5E:8A:B3:44:88:1E:F0:FE:23:37:9D:14:EE:8A:E4
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0E8C
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/PyPGuZpeirNEiB7w_iM3nRTuiuQ.roa
Signing time:             Wed 29 Sep 2021 02:43:44 +0000
ROA not before:           Wed 29 Sep 2021 02:43:44 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9919
IP address blocks:        218.210.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3724 (0xe8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:44 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=3F23C6B99A5E8AB344881EF0FE23379D14EE8AE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e1:14:0d:9f:49:3a:ef:40:3f:66:fa:1d:75:
                    c2:6e:d9:5e:24:94:2f:84:e0:39:9c:4d:08:62:44:
                    1a:55:c6:75:1f:c2:3b:83:96:d4:1d:71:54:12:e3:
                    03:be:14:1c:8f:ab:ca:8d:51:2a:17:e5:0e:4d:42:
                    2e:af:00:09:d4:17:fe:6a:09:89:4a:25:ed:c0:a1:
                    60:73:09:9a:57:ae:6c:af:d0:fa:c8:2f:af:df:cc:
                    b3:31:9e:cc:66:fd:64:14:18:2f:90:76:eb:bf:a0:
                    cd:73:7b:be:1e:ab:f7:ca:4e:36:2c:45:99:d8:91:
                    e0:a9:9d:ae:6a:aa:4f:56:35:8b:18:b1:7e:f0:18:
                    6a:42:b5:9e:5e:a5:5d:2f:30:10:86:2a:31:19:05:
                    1a:7c:60:34:1b:23:86:a2:46:5a:4c:b7:94:6c:ed:
                    91:ca:e0:31:78:14:de:a3:3c:c6:da:48:de:43:56:
                    e5:19:e0:bd:20:ad:38:e6:f9:ba:5e:2a:4b:11:c0:
                    da:ac:6d:53:49:a9:74:d0:1f:4d:a8:ae:83:16:9e:
                    ba:d4:5c:90:c9:62:36:3d:6d:fa:ed:4c:0b:9a:7a:
                    ac:d3:91:37:06:96:be:32:e9:96:2e:34:2d:10:44:
                    1d:79:73:59:1a:e3:ef:5a:0e:79:6e:38:77:a1:66:
                    ac:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:23:C6:B9:9A:5E:8A:B3:44:88:1E:F0:FE:23:37:9D:14:EE:8A:E4
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/PyPGuZpeirNEiB7w_iM3nRTuiuQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.210.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         88:72:30:05:fd:23:70:fd:e8:66:7c:a6:8a:09:04:2e:76:58:
         88:14:a4:a8:d6:86:2f:a6:94:5c:94:79:70:36:c9:7f:6d:40:
         67:ae:10:3f:3e:48:22:97:88:ef:35:98:f3:39:62:d7:fc:0c:
         d3:98:1b:d9:03:fd:b9:c8:92:8d:9b:3f:1a:84:cf:b5:ac:c3:
         73:1c:9d:6f:19:d7:5e:c9:c2:f0:0a:e3:79:22:6a:fc:30:f5:
         ea:3f:c2:35:0e:2b:74:66:3b:30:e3:ab:7c:af:0f:57:4e:e6:
         95:76:a6:17:f3:be:83:fc:a3:c0:a8:84:8e:4d:0f:3f:1b:64:
         f9:2f:3a:be:43:c2:7b:f0:9e:21:b3:b0:46:90:16:bc:0d:3b:
         de:d3:b8:3e:16:d0:20:7a:66:4f:b3:81:6b:3f:c6:fb:7e:e7:
         d8:4f:3d:88:3b:89:52:95:0b:c1:34:0e:4f:7a:af:2a:47:d3:
         7b:4b:0b:11:2c:78:85:17:8d:12:6c:68:c5:35:ef:c8:69:92:
         5a:47:1d:4c:67:64:d6:3c:f6:23:85:a4:bf:e6:c0:46:45:41:
         73:6a:91:1f:86:10:e5:cf:78:0e:24:6c:e9:22:18:9a:7c:f1:
         5d:7d:2d:54:72:21:fd:37:a1:df:85:9b:37:dc:68:34:9e:70:
         35:ff:f6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----