Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Yzc8hRbHWgl-jFW0p7W6T94KSt8.roa
File:                     Yzc8hRbHWgl-jFW0p7W6T94KSt8.roa (raw, json)
Hash identifier:          TmSeWjd4bM4o3c8ga1Oh1T20/QAukieOj107GtX0Hm8=
Subject key identifier:   63:37:3C:85:16:C7:5A:09:7E:8C:55:B4:A7:B5:BA:4F:DE:0A:4A:DF
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       08F8
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Yzc8hRbHWgl-jFW0p7W6T94KSt8.roa
Signing time:             Tue 29 Sep 2020 09:52:39 +0000
ROA not before:           Tue 29 Sep 2020 09:52:39 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        122.147.16.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2296 (0x8f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:39 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=63373C8516C75A097E8C55B4A7B5BA4FDE0A4ADF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:78:33:b8:b2:69:df:35:be:7b:b9:9a:52:2b:
                    e7:c9:f1:3e:29:9b:87:83:0e:21:a6:ee:be:91:db:
                    69:15:55:2e:64:a7:05:1c:4b:33:5b:9c:36:55:6c:
                    4b:6e:ae:25:ab:dd:a6:ae:34:ec:29:e7:bd:23:92:
                    9b:14:22:52:4c:4e:d1:ef:86:8d:4e:23:19:06:55:
                    3b:8c:ea:f7:d7:0e:77:96:50:4b:a1:65:d2:ca:cf:
                    11:ea:dc:0e:12:29:a7:4e:cc:8a:13:51:25:42:05:
                    4a:6e:47:41:76:31:a3:f5:8d:e1:32:bd:d7:c7:ab:
                    12:5c:bd:0f:bf:bd:1c:74:8f:2e:02:d0:6a:64:d7:
                    f3:c7:f8:4f:e6:6a:2a:0b:8d:03:0d:cd:a9:16:b2:
                    65:e2:ce:bf:0b:5d:cb:6e:5c:a6:68:1d:b6:96:c5:
                    4c:70:a2:03:44:6a:d2:40:eb:4c:0b:70:88:c7:12:
                    e0:1f:8c:1e:86:46:66:1d:e4:26:15:ba:2a:2c:93:
                    6e:3f:26:36:cb:18:0b:eb:41:54:14:3a:2c:54:c0:
                    41:b8:72:31:da:e1:9a:e8:bf:f3:69:f6:cb:09:83:
                    87:bc:dc:ad:87:42:3f:e8:31:82:b3:17:f3:41:ee:
                    18:ba:9c:eb:02:52:d3:3c:4a:05:0a:56:70:7a:d7:
                    b6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:37:3C:85:16:C7:5A:09:7E:8C:55:B4:A7:B5:BA:4F:DE:0A:4A:DF
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Yzc8hRbHWgl-jFW0p7W6T94KSt8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.147.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         30:3f:13:23:04:84:f1:56:89:a1:73:46:ee:0d:c3:a1:0c:b2:
         32:a9:7c:57:0e:2d:0f:16:a3:e2:a0:38:a6:bf:08:91:e6:89:
         1d:68:da:63:32:bd:9c:b6:f2:83:5a:6c:40:0a:8c:93:53:e2:
         55:4e:50:19:61:39:1f:24:24:c0:e2:73:cf:20:5e:37:7d:c8:
         d9:f2:be:23:8d:27:96:49:95:dd:ef:44:93:4c:8f:57:a3:36:
         43:ba:3b:1e:4b:35:b1:3a:70:84:08:6b:1e:f2:c1:48:54:03:
         ae:04:52:c8:5d:1e:4e:37:c5:5e:b9:df:34:15:dc:24:10:4e:
         78:c7:e2:d2:cc:dc:02:98:0e:ac:1d:67:13:97:01:1f:22:e6:
         51:2e:4b:8a:77:50:fb:e4:64:70:8c:82:56:db:db:5d:12:73:
         c8:8b:0e:4e:91:8e:fe:b7:c1:cd:73:aa:87:f9:dc:47:6a:d9:
         e7:ef:84:26:99:37:85:b1:f9:52:d6:69:b7:c8:f3:b3:6a:a5:
         95:5e:5e:0e:b3:b7:9e:56:fc:13:91:f7:37:37:4e:b0:b4:38:
         51:50:d3:16:7e:72:ba:5a:bd:e2:db:a4:41:15:42:ed:77:82:
         2e:9e:12:9e:ea:e8:2d:94:5d:26:f8:1c:00:17:41:b5:f0:2d:
         a5:8f:4e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----