Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/YBUeL7SMLfPbi9xoNktq3q3zDLw.roa
File:                     YBUeL7SMLfPbi9xoNktq3q3zDLw.roa (raw, json)
Hash identifier:          aSa2L2yOjdPmZ2pl/DgC6Z69SLZJeXzRZ63nhTGfz8E=
Subject key identifier:   60:15:1E:2F:B4:8C:2D:F3:DB:8B:DC:68:36:4B:6A:DE:AD:F3:0C:BC
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0CCD
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/YBUeL7SMLfPbi9xoNktq3q3zDLw.roa
Signing time:             Sun 07 Feb 2021 11:45:18 +0000
ROA not before:           Sun 07 Feb 2021 11:45:18 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9919
IP address blocks:        113.196.192.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3277 (0xccd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Feb  7 11:45:18 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=60151E2FB48C2DF3DB8BDC68364B6ADEADF30CBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:81:2a:19:32:f9:5a:74:57:26:14:49:e7:7a:
                    de:28:b1:3c:a7:7e:3b:ee:24:fd:97:d4:07:64:b8:
                    a6:d5:a1:c3:76:69:01:6a:68:3b:f1:f8:31:77:d4:
                    00:54:ed:6e:7b:c6:66:42:d0:26:8b:14:2d:4f:9d:
                    70:32:ee:63:fc:06:41:66:61:fd:c5:03:a8:be:24:
                    1c:7c:df:16:86:52:66:6e:52:cb:c7:44:35:4f:3e:
                    05:52:b9:19:9b:a4:8e:a3:83:aa:e1:69:45:a8:9e:
                    f6:9a:c5:a6:9c:3c:f9:ed:ae:50:94:50:f0:98:12:
                    3d:cb:85:c6:80:52:92:f4:15:dd:e1:03:9f:4e:24:
                    b9:26:ec:0c:9a:ab:10:a9:3a:5b:98:cd:3b:a2:3c:
                    2a:5c:9b:9c:bb:07:e2:a7:ba:5d:6a:aa:81:55:2d:
                    0b:dd:72:7e:ea:a3:d2:15:c5:35:e8:9c:79:05:6a:
                    2e:74:5d:ac:03:7c:5c:af:8b:9a:01:5b:ec:da:e4:
                    15:15:cb:66:ab:de:8c:b0:e8:89:b2:3b:af:b4:e4:
                    04:31:05:e3:13:13:7f:72:17:5c:f1:61:73:58:64:
                    4d:d9:0b:8e:67:22:8e:65:11:f2:67:4d:51:16:76:
                    16:02:e0:83:cf:30:84:33:fa:e7:b1:84:d9:1e:c6:
                    f6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:15:1E:2F:B4:8C:2D:F3:DB:8B:DC:68:36:4B:6A:DE:AD:F3:0C:BC
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/YBUeL7SMLfPbi9xoNktq3q3zDLw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.196.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7b:e0:ff:f6:87:3d:23:8d:4a:52:c1:b1:8c:e5:76:4d:1b:77:
         ae:3b:19:01:8e:16:c4:36:b0:7d:5f:d0:45:00:39:18:04:05:
         7b:9b:64:39:b8:92:b9:56:80:25:a0:a3:00:b9:c6:f8:5d:f2:
         66:a8:61:c1:fc:98:7e:cb:c3:dc:95:ac:dc:84:e5:9d:77:b6:
         7f:b3:37:56:a7:d8:f7:28:ff:76:ed:06:fa:c7:d7:a9:a5:4b:
         6f:b8:91:ba:89:f8:f8:f6:1d:94:57:a7:42:60:f8:51:e7:39:
         25:5f:b7:b9:c9:ab:d4:c3:29:97:4c:65:45:7a:2e:53:cc:5f:
         91:44:eb:94:f0:10:04:5d:9d:ee:46:65:48:27:21:3b:b0:fb:
         21:95:9e:8e:94:16:8d:56:49:c0:16:61:43:b9:5f:76:c2:dc:
         af:41:e6:e9:14:29:19:9a:8e:85:d1:c3:cb:04:0b:d7:6a:99:
         b6:7c:36:22:7f:dc:85:d3:06:f8:db:97:e8:ce:48:22:94:de:
         ed:2c:f3:d6:0f:c2:31:c8:13:94:67:45:4d:cd:88:e3:54:8a:
         ea:48:13:09:a6:81:b8:83:c3:56:7e:83:63:0a:98:18:56:aa:
         b2:0d:35:79:f0:2b:e2:07:c6:e8:3f:76:e6:e8:a7:63:75:27:
         4b:d2:79:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----