Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/TQVi7mYrskmgC34s2l0z_mKT8Hc.roa
File:                     TQVi7mYrskmgC34s2l0z_mKT8Hc.roa (raw, json)
Hash identifier:          /JdoCQUbLO69yAibNkTQBWc9XZAa+T3jOvcif9sVDv8=
Subject key identifier:   4D:05:62:EE:66:2B:B2:49:A0:0B:7E:2C:DA:5D:33:FE:62:93:F0:77
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       08A1
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/TQVi7mYrskmgC34s2l0z_mKT8Hc.roa
Signing time:             Tue 29 Sep 2020 09:52:15 +0000
ROA not before:           Tue 29 Sep 2020 09:52:15 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131584
IP address blocks:        106.105.182.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2209 (0x8a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:15 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4D0562EE662BB249A00B7E2CDA5D33FE6293F077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a1:a3:ec:2c:b9:72:84:7c:5c:61:17:f6:96:
                    fe:4e:0b:70:87:72:d0:cd:a0:0c:36:63:44:30:d3:
                    a6:d1:6e:4b:e0:58:65:89:59:df:1a:70:a8:f8:a5:
                    c1:ae:26:6c:dc:9d:59:8e:5b:ce:e1:a9:8d:0d:7e:
                    15:eb:2d:4c:22:d2:16:d2:ec:9f:b5:62:04:34:26:
                    2f:e1:f3:c4:aa:4f:14:73:eb:ea:58:a0:23:d3:28:
                    4d:ef:65:0d:2e:b9:ce:13:f3:e1:c3:7e:b9:08:4f:
                    f0:3b:de:64:48:3a:d6:ea:97:73:08:9a:13:a2:24:
                    3c:08:91:b8:51:4c:a0:b5:a5:3b:ce:14:b9:8c:28:
                    29:9e:95:32:31:81:00:9b:64:08:60:c3:7d:4c:7d:
                    5f:24:7e:c1:a9:33:96:79:8e:89:2c:ca:ec:78:64:
                    91:83:42:c7:cc:6d:2c:e4:d6:5c:a4:9f:95:e8:e7:
                    a3:8b:a1:ca:c8:7c:66:74:69:b1:5e:74:44:c5:33:
                    19:63:37:54:b7:4b:d6:da:ca:c5:c3:e3:5f:34:93:
                    0d:56:b6:51:d2:9f:fd:2f:de:13:f3:42:6c:3c:e0:
                    26:76:ad:40:10:86:75:45:90:25:84:d2:57:b4:a4:
                    22:c5:fc:64:74:81:f9:a8:e0:ac:70:2b:de:fa:41:
                    c3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:05:62:EE:66:2B:B2:49:A0:0B:7E:2C:DA:5D:33:FE:62:93:F0:77
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/TQVi7mYrskmgC34s2l0z_mKT8Hc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.105.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:5a:40:6b:aa:d5:ba:f5:67:db:f0:04:ab:2d:db:f9:32:46:
         e6:c3:1f:e6:70:97:b2:15:57:a0:e5:80:09:b7:f3:8b:17:ee:
         f9:ce:96:78:a6:e9:f0:d0:9f:2f:b6:b4:95:ee:8c:fb:30:0b:
         91:8f:e9:ec:81:8d:d4:c1:25:4d:6a:5d:04:bd:2b:4a:55:f9:
         5c:99:3c:81:52:a5:0d:2e:02:12:7f:96:f6:91:48:ea:53:26:
         58:c8:16:06:72:d5:ea:c1:66:ec:60:04:86:dc:96:85:c4:62:
         42:1f:a7:0a:e4:11:4a:4b:cd:c5:97:d6:22:35:79:89:bb:cc:
         42:64:30:45:22:96:19:7d:aa:35:cd:31:13:c1:57:65:63:22:
         10:36:e3:42:86:52:97:78:0b:36:c1:ee:7f:cf:1e:05:55:df:
         15:c3:2c:d5:50:af:c5:a2:94:22:20:80:68:a7:4b:d4:18:05:
         17:1c:c0:1b:1e:d6:84:d5:77:94:90:20:0c:87:c1:9c:f0:67:
         95:2c:5c:77:e6:b6:54:49:61:05:8f:dd:ba:3e:fb:67:a5:83:
         e5:0b:ad:ad:75:25:07:94:4a:3c:3d:0d:8e:13:39:49:9f:1c:
         b4:ee:06:f7:98:6a:3b:00:dc:54:57:99:3a:b6:bc:b4:45:69:
         76:52:b4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----