Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/ZsfP7sEy12HXyErP9jvLBjg88Qo.roa
File:                     ZsfP7sEy12HXyErP9jvLBjg88Qo.roa (raw, json)
Hash identifier:          vhNvQGCi2mz9RaKaM3xzYI95voMSc21lxiFkpmvkFLw=
Subject key identifier:   66:C7:CF:EE:C1:32:D7:61:D7:C8:4A:CF:F6:3B:CB:06:38:3C:F1:0A
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0CF5
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ZsfP7sEy12HXyErP9jvLBjg88Qo.roa
Signing time:             Sun 07 Feb 2021 11:46:07 +0000
ROA not before:           Sun 07 Feb 2021 11:46:07 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        175.183.254.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3317 (0xcf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Feb  7 11:46:07 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=66C7CFEEC132D761D7C84ACFF63BCB06383CF10A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c9:59:d0:00:60:5c:83:1a:55:fd:94:af:1e:
                    ae:27:7a:29:cb:de:43:50:0f:ea:1f:da:d0:60:56:
                    8a:b5:3c:a4:1c:e9:85:66:eb:6d:a1:ac:47:70:0c:
                    8d:4e:c0:da:a9:f6:e5:37:30:c8:5d:55:87:a9:f6:
                    52:0b:a7:52:2e:f0:02:e8:66:fc:98:97:89:fc:1a:
                    7e:7a:4f:e0:9e:10:23:b7:05:b7:c9:10:f0:d2:2a:
                    31:eb:da:90:7c:82:c3:8d:44:41:20:a3:5c:b4:e7:
                    83:aa:11:de:ad:99:47:f9:bd:0a:3b:f2:59:9d:7b:
                    8d:60:93:b5:ef:f6:21:4e:20:a9:9a:cf:c6:70:1d:
                    a5:23:2e:a8:17:cb:96:5b:a9:99:61:c5:a2:ab:f6:
                    cc:9e:ad:0c:73:27:52:19:82:5d:6a:3d:79:89:bd:
                    e6:fe:ab:d3:a6:26:8f:df:30:e0:b3:d1:c9:73:44:
                    91:77:23:47:ec:a4:f0:2a:af:61:7e:f1:91:3d:57:
                    93:03:ff:70:04:13:d5:c5:07:e3:e9:de:55:4f:a9:
                    5d:3c:d8:ed:0d:b7:0d:f8:b0:29:b0:03:56:5a:01:
                    3c:02:47:28:f3:f7:62:71:91:c4:0b:40:fe:11:71:
                    9f:1b:2b:86:69:08:3e:46:98:4f:26:6e:f6:04:e8:
                    70:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C7:CF:EE:C1:32:D7:61:D7:C8:4A:CF:F6:3B:CB:06:38:3C:F1:0A
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ZsfP7sEy12HXyErP9jvLBjg88Qo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.183.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:de:f7:2f:7c:f8:b4:18:71:97:55:07:e6:43:26:0b:36:f2:
         b6:42:15:c4:a2:9b:e8:6a:b1:a4:4d:af:a0:09:46:5b:24:9c:
         e8:db:57:fc:f7:10:f2:43:ef:ce:26:57:ab:33:24:9c:f9:c3:
         1a:eb:7b:31:ce:70:6d:e1:de:d0:4e:b6:bd:0a:09:90:d2:a6:
         f3:63:c4:aa:3e:d5:37:bb:9f:36:fd:e2:fd:50:a4:36:88:af:
         34:66:fd:f9:54:5f:69:db:18:ff:dc:8e:a6:6c:85:88:ca:8f:
         d1:26:f4:84:55:56:d3:e1:20:0a:f2:34:1a:78:89:e7:65:c1:
         34:d3:6c:e9:09:be:ca:16:18:34:2d:8d:68:7b:87:f8:ac:2a:
         61:3b:86:89:cd:0a:01:d9:c0:1f:84:cb:c0:24:56:da:08:bd:
         40:e5:09:f2:c4:11:ab:dc:62:29:5e:4f:08:3c:d2:f0:dd:1a:
         6c:8f:69:6b:c2:92:ca:85:14:d0:94:03:43:85:05:ce:2a:74:
         7d:a1:94:13:31:16:b7:61:b9:4e:ca:21:af:8e:56:be:a1:33:
         65:a8:e2:13:ba:8f:73:58:8c:6b:89:79:d3:ac:7d:7b:f1:36:
         66:17:fb:8f:2b:b6:f3:30:06:20:32:3e:e9:9f:e8:18:64:4c:
         1d:be:95:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----