Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/a5f4rkhZkKFGWWoeXQQDyi3zURs.roa
File:                     a5f4rkhZkKFGWWoeXQQDyi3zURs.roa (raw, json)
Hash identifier:          jXYAhVt1gWY039ETcyHIZmNH/MF3cU1FXxDDksqUhdg=
Subject key identifier:   6B:97:F8:AE:48:59:90:A1:46:59:6A:1E:5D:04:03:CA:2D:F3:51:1B
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0E32
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/a5f4rkhZkKFGWWoeXQQDyi3zURs.roa
Signing time:             Wed 29 Sep 2021 02:43:17 +0000
ROA not before:           Wed 29 Sep 2021 02:43:17 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9919
IP address blocks:        218.210.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3634 (0xe32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:17 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=6B97F8AE485990A146596A1E5D0403CA2DF3511B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:50:4b:ab:3f:26:f6:70:68:08:cb:87:0b:bb:
                    b0:70:d0:2d:68:71:fa:fa:3f:30:14:54:86:cf:f9:
                    d8:8e:cc:0a:f0:a0:89:e1:37:f0:4b:b1:a0:8d:9e:
                    b2:91:60:6c:39:67:81:c6:f0:a3:71:b7:36:7a:ac:
                    34:50:9b:8b:1f:b1:c7:06:01:87:b2:64:19:b6:20:
                    73:bf:50:e6:f2:14:7c:12:f1:49:30:f5:f7:97:dc:
                    36:4f:36:c7:eb:03:61:f7:2b:d8:a3:60:5e:17:e7:
                    3b:21:ef:49:3a:32:f4:b9:c0:d3:a2:fa:e0:3a:21:
                    f7:4d:d1:3d:fc:66:65:90:10:de:51:84:a9:6a:22:
                    c1:ef:8b:b6:f8:f7:f1:b0:b7:7a:4c:79:f5:1f:25:
                    73:ab:93:fe:97:7c:f9:22:d3:54:cc:92:2e:0c:e4:
                    35:6a:8a:f9:5e:25:70:4c:13:b8:8a:c3:fd:dd:bb:
                    64:01:f8:a5:ab:63:04:79:bc:f8:c6:7c:ae:fd:bd:
                    4a:c5:bd:8a:cc:26:65:dc:bd:e5:6d:42:93:e5:39:
                    dc:65:b0:fa:78:3a:5f:13:d7:15:8e:cb:a6:9f:75:
                    fb:b2:ee:ef:00:5f:d0:3a:ce:a7:9f:f5:2e:ce:ea:
                    48:e6:75:63:d7:7a:1e:29:84:72:7a:d9:8d:f1:d3:
                    19:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:97:F8:AE:48:59:90:A1:46:59:6A:1E:5D:04:03:CA:2D:F3:51:1B
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/a5f4rkhZkKFGWWoeXQQDyi3zURs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.210.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         90:c9:e5:04:90:6e:7d:a6:97:60:d0:f4:e8:7a:22:86:87:e5:
         04:f6:fb:3e:fc:06:79:2e:c9:b9:cb:c3:92:a5:6c:1c:89:b6:
         70:d8:e1:02:dd:b3:ac:eb:33:73:04:b1:2e:61:eb:36:5d:94:
         c5:c0:1a:78:88:78:8c:ef:bc:a5:53:43:ab:1d:72:66:57:a8:
         e1:f8:f2:47:11:ee:5a:e0:c6:82:d9:03:fb:f9:ae:3a:78:9b:
         47:0a:fe:18:e9:b4:f2:da:38:1b:50:95:61:98:17:37:6b:b4:
         55:ee:f7:60:e3:bb:d8:54:2e:a7:ad:e2:b0:54:3c:49:be:4c:
         13:41:94:32:6f:1a:8d:2b:06:ea:cf:5f:45:f7:7c:c3:27:43:
         87:58:58:0f:91:87:91:4e:56:c7:68:84:ab:9c:f1:ee:fa:44:
         52:b7:a4:c1:56:e2:d0:37:89:1d:72:71:3f:d4:44:fe:ba:c1:
         d6:ae:f8:c4:9d:0a:24:30:59:f8:03:a9:83:25:7b:7f:7f:0f:
         2f:71:2c:0c:b9:46:d3:25:d0:4a:ef:2f:e7:4e:0b:b7:e5:8a:
         76:15:31:e1:23:db:26:6d:24:f7:cc:67:fd:a7:da:2d:2e:62:
         98:36:59:18:71:46:df:e1:19:a0:80:13:21:f1:ce:8f:c8:69:
         9f:26:38:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----