Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/_WlFcNMjG1ADHHPppS05FGcIW7M.roa
File:                     _WlFcNMjG1ADHHPppS05FGcIW7M.roa (raw, json)
Hash identifier:          Bl5fZu7FqfLhQxWRUCrlVy0zvwF8HMVPIe0V2AJxThQ=
Subject key identifier:   FD:69:45:70:D3:23:1B:50:03:1C:73:E9:A5:2D:39:14:67:08:5B:B3
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0D13
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_WlFcNMjG1ADHHPppS05FGcIW7M.roa
Signing time:             Sun 07 Feb 2021 11:48:11 +0000
ROA not before:           Sun 07 Feb 2021 11:48:11 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        122.147.160.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3347 (0xd13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Feb  7 11:48:11 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=FD694570D3231B50031C73E9A52D391467085BB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2a:6e:4b:8f:d6:50:5e:d9:14:a4:82:85:47:
                    da:41:db:19:1b:4f:7c:f6:7b:d4:ce:ff:52:e0:1f:
                    1d:36:44:46:01:81:39:bb:dd:18:8e:eb:a3:5a:d4:
                    0c:6b:ea:26:fc:8e:d6:fa:ad:d0:da:bc:72:5f:8d:
                    b7:a7:46:2a:31:09:cd:bf:0d:ff:1e:03:04:07:cf:
                    df:64:65:b0:91:a5:2b:f9:42:5f:f3:bb:c1:e2:bf:
                    3b:66:89:ba:b7:76:40:8b:26:e1:b0:40:2f:e9:0c:
                    1e:24:45:8f:92:64:7a:c6:e6:87:77:b3:bf:11:a1:
                    05:62:ca:f6:aa:2b:75:bc:65:7f:48:ff:ac:e5:3a:
                    06:c9:e4:e4:15:b8:81:e0:b4:8d:ef:02:d7:93:8a:
                    44:dd:86:dd:b5:0a:af:a9:1f:b1:a2:1d:3c:69:88:
                    50:d7:85:4d:df:0b:4a:34:98:53:4c:4a:79:00:06:
                    57:c5:f4:09:a5:65:48:88:b7:75:d4:da:05:36:1b:
                    e7:92:6f:95:c7:1d:80:85:01:60:3c:6b:12:ed:ff:
                    95:20:75:2d:39:25:12:18:18:9f:64:3a:0c:ef:0b:
                    b5:81:f6:c1:00:3f:59:a9:3d:76:58:8f:25:a7:c6:
                    75:87:4d:73:e1:d3:d8:9c:ee:a5:c6:e4:2f:1e:af:
                    c5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:69:45:70:D3:23:1B:50:03:1C:73:E9:A5:2D:39:14:67:08:5B:B3
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_WlFcNMjG1ADHHPppS05FGcIW7M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.147.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ac:04:84:87:2e:e8:00:61:74:cf:16:e3:af:c9:9a:23:2b:8e:
         04:aa:ed:c4:a6:8b:98:d6:c6:ae:25:bb:f7:f9:d8:64:b4:cb:
         bc:82:3c:af:9f:89:e9:02:13:c7:d9:f1:a1:eb:ae:74:e8:af:
         5a:a0:b9:9d:80:50:44:f3:3a:a2:47:db:c3:fc:e2:83:f7:53:
         d8:87:84:54:7d:04:b9:f8:cb:d7:b0:14:1b:86:45:e9:ad:44:
         5e:b5:77:9d:75:01:3b:ff:cc:b7:1f:47:37:d8:83:ec:f5:fb:
         49:a7:a4:ac:1c:dd:5e:e0:6f:19:a4:06:f5:48:4e:66:50:04:
         ca:00:da:73:0d:7c:65:44:d0:dc:e1:9d:6a:ee:50:a2:01:19:
         92:02:82:c4:83:0b:5a:19:51:83:7f:28:88:4f:f5:bc:8a:cf:
         0e:38:9b:9e:74:58:76:77:fb:77:17:6b:04:6a:5a:56:3b:25:
         42:77:e4:96:11:d1:05:5d:f0:26:22:94:99:64:c8:55:c8:26:
         53:c3:d5:94:e0:66:7b:5d:9a:8a:01:5f:08:2b:54:50:a7:ff:
         6a:56:c5:fb:c6:cc:ad:78:69:c3:9d:cd:ec:6d:99:e6:d0:76:
         ac:94:a9:77:37:4d:c3:94:41:dd:c9:34:d4:3d:a7:90:ec:5c:
         89:53:58:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----