Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/ZAsluutMK0-2N3ht4ET3OtXHofE.roa
File:                     ZAsluutMK0-2N3ht4ET3OtXHofE.roa (raw, json)
Hash identifier:          h66OiRklJ7iRqR1tgdryb0xz6dalAAyeQ+eYhbMITrA=
Subject key identifier:   64:0B:25:BA:EB:4C:2B:4F:B6:37:78:6D:E0:44:F7:3A:D5:C7:A1:F1
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       08BF
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ZAsluutMK0-2N3ht4ET3OtXHofE.roa
Signing time:             Tue 29 Sep 2020 09:52:24 +0000
ROA not before:           Tue 29 Sep 2020 09:52:24 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9919
IP address blocks:        60.245.96.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2239 (0x8bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:24 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=640B25BAEB4C2B4FB637786DE044F73AD5C7A1F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5a:31:9b:de:c4:de:11:95:d3:64:61:4f:68:
                    0c:a6:8f:69:81:e1:50:14:07:a7:2a:31:a0:b2:f2:
                    4e:18:a7:36:66:10:e0:9f:04:af:e7:15:84:8f:50:
                    4f:dc:e2:3e:59:bc:c7:e8:a8:42:65:35:14:94:50:
                    cf:2a:e5:3f:51:f4:0c:a4:05:cd:4a:11:db:10:00:
                    72:4d:49:1e:a4:cd:4f:6f:41:91:a6:50:5a:49:c5:
                    27:a8:9b:67:49:5c:b9:6f:b3:ec:fa:24:e6:6b:b7:
                    b1:7b:6a:30:75:ba:e9:a8:00:bf:f9:ca:ad:e5:7e:
                    6e:f2:7a:ab:42:1e:31:6e:a3:59:49:43:f1:9c:af:
                    06:30:19:d4:b1:03:3f:a4:e9:be:c9:70:fc:ac:d8:
                    d9:4e:dc:00:d6:40:d3:a8:d0:e9:97:58:6f:f5:f2:
                    a4:00:5d:37:c3:c7:f1:b9:cc:d7:82:97:74:09:b8:
                    55:06:7e:2f:9d:21:56:5d:2e:ed:8c:c7:1a:0d:e4:
                    38:bf:19:52:e2:a9:8e:b3:dc:b3:f5:26:84:5e:db:
                    13:8e:d6:c0:83:a6:0c:ea:4f:6b:a1:1a:92:77:6b:
                    4b:a8:b5:82:a7:da:71:73:1b:00:c8:27:1a:51:a0:
                    50:b0:10:d4:b5:bf:cc:cf:89:43:76:62:72:ff:6c:
                    af:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0B:25:BA:EB:4C:2B:4F:B6:37:78:6D:E0:44:F7:3A:D5:C7:A1:F1
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ZAsluutMK0-2N3ht4ET3OtXHofE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.245.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         31:03:7b:a0:e1:33:58:53:d0:3f:e1:ef:63:2a:43:3c:c3:0d:
         2c:89:28:02:53:0d:08:b0:0d:23:32:15:77:3d:ef:d2:ba:9d:
         01:a3:86:ca:90:80:1f:c1:14:cd:df:79:7a:5a:3f:e4:6f:9e:
         46:8e:2d:2c:7f:93:a1:07:7c:56:db:06:b4:63:c3:65:3f:4b:
         9d:b4:4b:3c:17:ce:87:4f:7f:cd:8a:27:47:db:04:1b:aa:d8:
         f5:58:93:41:2d:da:82:d0:52:ae:20:f0:2f:ca:87:14:1a:1b:
         90:33:ad:12:93:f4:a0:67:9d:98:e5:02:16:1e:64:85:67:89:
         be:a9:3a:bd:3a:0e:f0:d1:f8:4c:99:68:54:14:4a:ea:72:23:
         af:f0:78:2c:5c:02:9a:98:84:a4:b5:71:57:75:ad:b4:0d:50:
         65:00:06:d5:ac:8b:c9:bf:33:bb:e6:d3:a6:43:50:e3:25:9c:
         54:a1:93:25:56:59:86:e1:af:2b:98:72:3b:0e:31:fe:a5:ff:
         f6:7d:49:c5:f3:74:7f:20:7c:6c:d9:5d:94:17:93:bd:b1:1d:
         a5:1e:91:49:2a:50:3d:63:1b:01:a7:7c:69:90:13:28:7e:49:
         c0:1f:13:d0:1a:9a:1f:6f:19:8a:b7:2f:72:48:b8:a4:72:bd:
         c8:d8:85:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----