Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/UUs2Adk9tUNfvgbgvd-g02N551Y.roa
File:                     UUs2Adk9tUNfvgbgvd-g02N551Y.roa (raw, json)
Hash identifier:          Ti4AxviOcSs4Gyj4lov975/YyjQIyfsh5eOCj2ceLcE=
Subject key identifier:   51:4B:36:01:D9:3D:B5:43:5F:BE:06:E0:BD:DF:A0:D3:63:79:E7:56
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       08D3
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/UUs2Adk9tUNfvgbgvd-g02N551Y.roa
Signing time:             Tue 29 Sep 2020 09:52:30 +0000
ROA not before:           Tue 29 Sep 2020 09:52:30 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        218.32.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2259 (0x8d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:30 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=514B3601D93DB5435FBE06E0BDDFA0D36379E756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:04:52:28:5e:3e:ce:ef:3d:f7:de:a1:b5:9f:
                    91:c9:7b:29:27:31:1e:f3:c7:50:0f:9d:92:59:bd:
                    ab:03:0a:3d:6f:15:47:1c:6b:a4:ad:72:78:21:79:
                    3c:ac:f0:52:07:42:70:de:f7:e1:e1:9c:c2:19:c7:
                    fb:06:e0:92:f1:71:09:66:bd:23:9b:2b:26:c5:8b:
                    5f:f3:97:41:7f:69:0f:a1:72:44:07:e8:82:11:30:
                    0c:9b:d5:ef:f5:4d:72:9d:b5:1d:fe:18:10:aa:db:
                    e4:84:d9:80:ed:ec:f9:87:89:93:f6:32:c9:dc:49:
                    49:19:2b:52:3d:d4:2e:26:19:76:6c:38:27:e3:06:
                    c5:0a:1b:de:e2:35:dc:92:52:4d:23:2d:38:38:36:
                    3d:28:b0:24:f3:31:f2:c0:0a:0a:e0:ea:ee:6b:4a:
                    0a:cd:88:18:a4:09:47:ed:21:5c:ee:ef:64:91:d4:
                    0a:5b:62:7f:05:82:72:d3:82:70:72:b5:85:61:35:
                    69:ed:8d:b2:ce:fa:82:aa:c6:03:07:54:f1:b7:80:
                    2f:bf:c0:33:c2:3e:57:ad:80:49:12:79:76:0a:e1:
                    f3:e8:35:0c:b4:d3:45:fd:4b:1c:40:31:a0:24:f5:
                    9b:17:be:4f:58:ca:2d:41:6d:14:71:95:43:56:28:
                    08:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4B:36:01:D9:3D:B5:43:5F:BE:06:E0:BD:DF:A0:D3:63:79:E7:56
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/UUs2Adk9tUNfvgbgvd-g02N551Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.32.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b0:22:4e:35:30:ff:57:93:6e:37:53:a7:d3:8a:c4:0d:9e:d2:
         e0:0e:28:ef:79:a3:c1:a7:0f:18:10:fe:48:0c:5a:c7:33:3d:
         41:3b:12:93:e0:a7:6d:73:21:5e:a1:fa:d9:fb:eb:82:9f:92:
         e4:ec:1b:c9:db:69:0d:70:60:d5:3d:75:78:d9:dc:0e:d4:ee:
         ed:db:22:aa:dd:8e:49:a9:fb:38:bc:92:36:fb:1d:93:80:ce:
         3a:2b:14:ed:da:fc:15:6b:47:70:db:b0:9a:a3:f5:91:be:43:
         9a:d5:61:3e:f5:4d:f2:26:98:8e:37:27:2f:f2:ff:79:b8:96:
         e7:53:72:06:5c:06:31:ce:1a:f9:23:f5:c8:5c:10:c8:9e:0c:
         6e:80:31:7c:c3:63:26:41:dd:a9:ee:7c:74:64:72:43:4f:43:
         f4:29:fd:bd:f2:82:ca:15:7b:4b:25:42:66:06:e7:e8:1c:25:
         35:9a:e7:f7:8e:65:28:e6:d9:a7:5c:e7:34:e8:0f:a2:f6:20:
         c9:4b:af:d0:fa:b8:f8:b9:d3:74:43:d9:a7:15:ee:75:e5:57:
         e1:8a:9d:e5:74:aa:58:19:da:ea:5d:1f:b7:1c:29:85:00:3b:
         fe:d4:44:9c:dd:8d:c9:13:95:1c:46:88:25:4e:80:3e:ac:24:
         29:e1:e5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----