Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/aOEJLLGGJFsvtmU2deQ1a7LjdAg.roa
File:                     aOEJLLGGJFsvtmU2deQ1a7LjdAg.roa (raw, json)
Hash identifier:          XIrkihW0pwLMc4RT1KaEiyYHZ244qN4v4PpUkfZjVCo=
Subject key identifier:   68:E1:09:2C:B1:86:24:5B:2F:B6:65:36:75:E4:35:6B:B2:E3:74:08
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0CCF
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/aOEJLLGGJFsvtmU2deQ1a7LjdAg.roa
Signing time:             Sun 07 Feb 2021 11:45:21 +0000
ROA not before:           Sun 07 Feb 2021 11:45:21 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9919
IP address blocks:        113.196.128.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3279 (0xccf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Feb  7 11:45:21 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=68E1092CB186245B2FB6653675E4356BB2E37408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:31:51:23:93:ff:c5:65:87:3e:74:25:ba:16:
                    9d:b0:c3:78:49:ef:07:5e:90:1c:d8:6a:c3:f9:1a:
                    6d:08:df:f7:a5:38:4b:ec:d4:4b:b4:86:b6:60:84:
                    09:f2:68:74:80:93:1e:35:26:77:61:39:32:3f:17:
                    40:4b:8c:06:e2:de:85:dc:6c:fa:df:e3:8d:e1:3c:
                    d9:dc:7c:c8:4f:83:f4:7a:0f:45:5a:c2:53:cd:db:
                    9b:2b:e1:46:63:50:0e:03:74:c7:79:3c:e8:c2:b3:
                    0c:45:4b:8a:db:8c:4b:8c:3d:42:68:0b:02:09:ed:
                    b5:5e:c5:6e:df:ee:34:39:5c:84:31:d3:37:45:61:
                    a8:7e:cb:7a:0f:a5:eb:6f:4a:92:37:a4:0f:14:58:
                    7d:3d:a9:2c:45:c8:38:92:51:18:84:18:88:e3:00:
                    ec:ba:a2:e3:c8:4f:a8:d5:2f:dd:26:6b:e5:5f:51:
                    e3:2f:e8:f8:48:66:86:f6:89:73:0b:02:88:0b:fc:
                    a7:3d:53:02:31:fe:b5:1f:19:75:9b:14:aa:74:97:
                    ed:3b:98:f8:92:c0:c8:8f:b7:3f:8e:da:68:be:99:
                    ef:58:d4:5a:38:23:e4:03:6c:13:0d:6e:89:44:d3:
                    06:8e:69:bf:06:7a:87:70:0e:33:f2:4e:19:92:a7:
                    9c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E1:09:2C:B1:86:24:5B:2F:B6:65:36:75:E4:35:6B:B2:E3:74:08
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/aOEJLLGGJFsvtmU2deQ1a7LjdAg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.196.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5a:87:b4:50:21:ef:b8:1a:86:b4:35:00:3d:6d:a9:30:d1:f4:
         91:39:0d:11:e8:b9:54:67:c9:83:f3:40:0b:5e:c6:68:3c:f3:
         ce:49:2c:47:b3:68:39:27:29:70:53:58:4f:39:38:e2:5d:82:
         c8:3d:c8:57:26:f2:0e:e7:a9:57:40:c8:0d:21:76:ab:e8:73:
         7a:13:9f:17:4e:60:d2:fd:48:8a:48:b4:9c:eb:ce:e1:06:64:
         ca:04:b8:a1:ce:24:b2:0b:d0:4a:35:65:d0:a3:b6:2a:9c:7c:
         de:24:6f:c2:31:59:47:33:a3:83:77:3d:22:1f:94:81:fa:1f:
         83:ec:c9:e2:90:cd:6c:b3:f2:f1:cc:f3:94:be:cc:87:a0:4a:
         17:33:64:74:26:b3:0d:d0:c6:79:11:88:e4:f6:48:eb:85:d0:
         62:d7:10:87:b7:1a:96:8a:e1:ad:ba:d6:80:e3:70:f0:6d:49:
         35:4f:17:e7:2b:26:bf:6d:d8:a2:29:5e:86:1d:54:58:68:07:
         22:29:97:e1:78:a2:1f:33:c7:63:23:1a:20:e6:39:7e:9a:50:
         bd:c1:d5:9c:1d:a5:3d:80:e0:5b:97:9e:4d:70:8e:bd:3b:64:
         09:e4:0a:b3:53:ce:49:6b:49:c1:dc:f7:ff:f1:2c:ef:e9:83:
         87:24:64:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----