Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/aVGyvEWAGynQcMnOnw7h36XnGLU.roa
File:                     aVGyvEWAGynQcMnOnw7h36XnGLU.roa (raw, json)
Hash identifier:          4mWTBHFyhAqDLhq9gnuQJXviFgpV95DoJTj1SEKKaas=
Subject key identifier:   69:51:B2:BC:45:80:1B:29:D0:70:C9:CE:9F:0E:E1:DF:A5:E7:18:B5
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0877
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/aVGyvEWAGynQcMnOnw7h36XnGLU.roa
Signing time:             Tue 29 Sep 2020 09:52:03 +0000
ROA not before:           Tue 29 Sep 2020 09:52:03 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18049
IP address blocks:        106.107.144.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2167 (0x877)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:03 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6951B2BC45801B29D070C9CE9F0EE1DFA5E718B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:db:e7:c3:26:90:c3:78:f7:0e:b9:a6:f4:b3:
                    45:4b:c1:ed:95:91:04:82:1c:2b:a1:2c:85:a8:4a:
                    86:3f:0f:9b:40:4b:ed:be:f0:a9:1e:23:ac:bf:e0:
                    c1:c6:20:ba:d2:3a:74:f4:d9:10:a1:4f:ec:ff:6f:
                    16:9e:50:18:8c:65:e2:ab:b1:35:c0:79:cc:ec:93:
                    a7:6d:1d:47:a2:b8:09:7b:b4:a3:80:41:b9:8c:1b:
                    39:04:fd:f5:c0:57:af:60:f4:bd:a8:7a:ba:70:42:
                    ec:65:ac:4d:3e:63:00:93:b4:90:29:7b:43:ed:18:
                    70:2b:11:d6:46:4b:02:a2:eb:fa:78:37:6e:1b:be:
                    d3:d3:f8:a5:75:85:de:4e:b6:71:6c:18:07:e1:82:
                    cb:68:d7:66:77:ce:a1:82:6a:b6:de:20:15:e1:58:
                    ff:d5:c1:67:e4:0c:de:6a:91:72:6d:d8:fd:f4:2b:
                    17:5c:47:18:08:35:c1:b6:66:bb:3c:1a:89:51:46:
                    8e:87:bc:2e:3e:1b:87:15:c9:2f:40:d6:ac:0a:8f:
                    4b:83:4e:ee:f6:9b:65:79:08:eb:87:9d:02:a8:9f:
                    52:9c:7a:10:93:c0:a1:89:e9:2d:00:35:7b:1c:e4:
                    de:db:ab:e6:a5:ff:80:c5:8f:22:24:38:a5:26:61:
                    8c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:51:B2:BC:45:80:1B:29:D0:70:C9:CE:9F:0E:E1:DF:A5:E7:18:B5
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/aVGyvEWAGynQcMnOnw7h36XnGLU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.107.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5e:ae:05:46:e8:61:09:2b:26:d8:6d:c7:53:08:bd:46:c6:4e:
         d5:94:f3:78:7b:00:4f:9b:84:55:a7:81:c9:49:cc:02:6e:6c:
         4d:26:3e:4a:d5:7b:59:a5:1c:1d:6c:3f:8c:26:a7:f6:f6:c0:
         82:7f:2f:25:cf:0e:b3:dc:a7:ad:70:12:d4:57:04:4b:51:6d:
         5a:d1:7e:81:e5:56:a3:af:af:24:0a:7e:dc:ec:0b:09:44:48:
         cc:63:83:a2:31:41:1e:0f:25:b0:42:a5:57:95:c8:25:59:24:
         40:d8:c2:14:e9:03:ca:ee:3f:b1:b0:b1:d6:84:79:49:eb:88:
         c2:02:fc:32:ab:4e:ed:21:15:20:74:e4:d2:c2:ef:1b:d9:2c:
         4d:b1:5c:72:0b:ba:10:e8:53:39:dc:d3:ab:d8:63:17:71:f3:
         c2:17:c2:69:1f:9b:4f:31:3b:21:bd:4c:27:df:29:61:bf:8e:
         95:27:90:35:04:1f:aa:68:49:77:c6:bb:2c:63:3b:a3:cc:c7:
         8d:28:66:0c:a3:a9:f9:c7:f9:fa:8d:b7:59:a5:0c:f4:38:01:
         2f:49:c4:06:44:0e:69:95:ab:8c:b4:8b:1b:84:9d:15:1e:b3:
         c8:e8:49:e5:08:e2:f8:0c:37:a9:59:4b:fb:d6:16:32:1b:9e:
         96:74:c9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----