Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/UykAoa5Ct5h3Vk0YXJeG26YRXbM.roa
File:                     UykAoa5Ct5h3Vk0YXJeG26YRXbM.roa (raw, json)
Hash identifier:          hj45uyOBKM1qhkwacS3111tYLpSOebNIz+yQLDiYWYU=
Subject key identifier:   53:29:00:A1:AE:42:B7:98:77:56:4D:18:5C:97:86:DB:A6:11:5D:B3
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0EB9
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/UykAoa5Ct5h3Vk0YXJeG26YRXbM.roa
Signing time:             Wed 29 Sep 2021 02:43:54 +0000
ROA not before:           Wed 29 Sep 2021 02:43:54 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     4780
IP address blocks:        123.51.180.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3769 (0xeb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:54 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=532900A1AE42B79877564D185C9786DBA6115DB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0f:fc:2d:df:b3:44:17:5f:1a:8d:40:48:9d:
                    a5:48:51:ea:94:e3:b9:7b:97:3b:45:1a:3e:48:33:
                    35:2b:f8:07:8b:45:ac:fc:18:91:14:29:32:49:4a:
                    29:80:62:a5:d9:8a:e4:9d:d5:e3:47:66:98:e9:e2:
                    70:4f:af:1a:84:06:2e:a2:d6:2b:db:12:00:e9:62:
                    3d:88:dd:10:7f:e0:a8:aa:c7:7b:2f:51:88:b1:01:
                    46:51:1c:16:d7:25:35:d0:03:42:80:12:34:43:cc:
                    19:90:5d:58:30:d1:94:cc:81:f6:59:ed:87:b1:9f:
                    f4:4a:87:3e:9a:ee:06:09:98:f6:0a:61:86:20:61:
                    a9:52:5a:87:23:2e:9c:20:46:1d:23:67:15:1d:87:
                    1c:e5:e7:fd:b4:19:a0:68:eb:5c:74:8e:67:79:a8:
                    ef:f2:7e:40:31:c6:05:63:a0:41:81:9a:a9:23:d5:
                    24:07:51:80:9a:82:5e:8a:ab:7b:9e:3f:0c:5b:55:
                    50:a8:7c:92:23:82:05:61:b9:f5:b1:b5:05:e5:c7:
                    c9:9b:e0:d3:43:ff:8c:8e:3a:dd:aa:63:ac:6b:75:
                    44:ae:c5:f3:44:1a:cb:f2:fb:a3:76:28:b2:8b:f6:
                    e1:92:9a:a3:bd:2d:d3:0c:c8:f8:74:2b:9e:6f:5a:
                    9a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:29:00:A1:AE:42:B7:98:77:56:4D:18:5C:97:86:DB:A6:11:5D:B3
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/UykAoa5Ct5h3Vk0YXJeG26YRXbM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.51.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:ac:dc:b0:00:e1:f6:14:5d:3d:b9:29:52:e2:ba:ee:e7:6e:
         b8:f8:3c:e3:cb:44:70:d5:02:35:34:9a:9f:57:e8:99:c7:03:
         ec:9c:79:01:df:9f:59:c7:63:e6:f4:2c:d5:8e:00:30:ab:5b:
         9e:ee:ee:e9:2d:b0:77:81:e6:b2:3f:9c:b6:1e:78:6d:0b:c6:
         27:0c:d7:21:67:2a:65:75:09:b5:eb:a2:78:c5:c3:28:34:9d:
         e1:64:a0:db:75:92:4a:d3:f8:d0:28:83:96:21:c6:ef:52:f9:
         75:0a:1d:b6:25:a8:e3:07:b0:ad:4f:94:8b:4a:be:55:17:fb:
         c6:dc:37:5a:a1:85:03:be:3d:cd:ba:41:2a:14:91:f3:97:59:
         4c:b9:7e:7d:80:61:6b:66:3d:54:0b:a9:96:18:29:c2:70:47:
         13:47:d9:ec:f8:57:59:31:04:49:1b:3b:6b:11:93:48:81:2f:
         a4:0a:d0:a2:6a:e7:8b:bd:fb:e5:10:fb:75:50:b2:b0:83:c5:
         35:80:83:91:6c:ab:45:24:20:d8:4a:5d:30:bd:e7:c3:05:bd:
         76:ef:7b:3e:8f:ed:e9:23:d8:65:2e:19:78:da:7c:76:64:db:
         4a:f4:49:29:10:7a:8f:30:73:9e:2e:2e:b6:0b:09:46:f7:9b:
         fc:4e:22:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----