Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/_wYaqsY7rjPqfiphgbFC_fSY-ug.roa
File:                     _wYaqsY7rjPqfiphgbFC_fSY-ug.roa (raw, json)
Hash identifier:          +N6TYQFf0EvxoBwb8knX1S4XuOZjTmcZ9hKKfHlOauo=
Subject key identifier:   FF:06:1A:AA:C6:3B:AE:33:EA:7E:2A:61:81:B1:42:FD:F4:98:FA:E8
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0E62
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_wYaqsY7rjPqfiphgbFC_fSY-ug.roa
Signing time:             Wed 29 Sep 2021 02:43:31 +0000
ROA not before:           Wed 29 Sep 2021 02:43:31 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18049
IP address blocks:        106.105.72.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3682 (0xe62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:31 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=FF061AAAC63BAE33EA7E2A6181B142FDF498FAE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c6:99:cc:2f:40:56:ec:11:0b:ac:30:eb:f1:
                    9c:8d:5f:2e:f7:f7:9a:30:9f:bf:5c:7e:01:77:00:
                    3d:ed:20:f2:3a:50:7e:32:aa:a7:a3:5e:54:4d:79:
                    99:9e:94:2c:ba:e7:85:00:28:36:94:b0:6c:7f:81:
                    23:12:70:f0:01:0b:1e:c9:49:25:94:e6:93:0c:d8:
                    20:42:65:93:ea:0c:92:06:da:f1:79:3e:bd:d8:0c:
                    0f:1a:59:15:0a:b9:b2:69:1f:f5:ea:a0:69:c0:a0:
                    74:99:56:44:30:cc:34:41:6a:fa:e3:40:0f:14:82:
                    8e:bb:86:01:0f:72:76:43:e5:53:1f:81:d0:b5:ba:
                    3b:05:d9:73:ed:5d:ad:bf:00:5d:25:ef:6e:98:f3:
                    89:4d:7b:7b:8d:29:56:b5:d7:e7:10:2a:df:d2:a1:
                    6c:f4:5e:c2:d7:33:3e:08:19:27:eb:d0:4c:79:fd:
                    ff:ce:80:c0:9b:a4:79:b4:1b:47:dd:12:b8:40:e1:
                    dc:4e:23:90:ca:1c:14:b3:55:54:bc:b3:7d:b2:a1:
                    f8:fe:81:09:82:16:2e:ed:02:81:eb:6a:d5:31:31:
                    95:40:aa:73:3f:3c:a2:13:54:f8:9c:ab:05:c7:d4:
                    12:90:45:87:d1:35:83:e0:94:ba:e4:f0:ec:05:fc:
                    30:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:06:1A:AA:C6:3B:AE:33:EA:7E:2A:61:81:B1:42:FD:F4:98:FA:E8
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_wYaqsY7rjPqfiphgbFC_fSY-ug.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.105.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4c:0b:c5:a1:8a:c0:0d:8f:cc:1d:38:b9:0b:2d:a8:cb:fb:cb:
         9d:4b:a2:9d:9f:d6:0a:b8:bf:da:78:f1:83:81:a8:fb:38:a3:
         76:dd:9c:ef:a3:14:04:5b:6c:86:5b:0a:61:6b:49:cb:b2:fd:
         35:fe:52:2c:b5:f1:96:32:1d:dd:3f:04:51:3a:f0:a6:17:b1:
         a5:53:8b:db:bd:83:2c:e8:e3:42:df:ce:d7:42:d7:56:33:de:
         cc:22:64:7a:28:d4:ce:1f:93:be:43:3b:8e:46:e2:3d:64:b4:
         28:3e:54:18:b2:37:24:67:b2:a8:7a:9c:ed:f7:e2:13:fc:89:
         de:3a:17:4e:56:bf:2e:21:36:ff:55:87:7b:66:d7:45:31:71:
         30:02:e2:9e:e5:2d:f9:d1:70:b6:85:94:cd:80:dd:1a:97:62:
         07:30:a3:b8:1c:2b:ea:a5:ed:75:e3:da:b2:ec:a6:90:67:a3:
         1b:e5:1a:ee:28:94:9d:b4:68:38:05:a8:ed:6f:38:22:79:c4:
         e9:d3:c7:93:50:7f:e3:d5:de:e3:20:9a:42:56:1c:85:3f:50:
         46:12:be:b8:5e:48:31:b9:90:58:3a:59:cb:33:c2:67:1a:fc:
         5f:bc:c6:e8:d8:91:89:bb:41:e1:5e:c6:52:5d:1a:77:93:19:
         6b:63:92:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----