Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/bMaQHx4oTlXVHHIa4Ecei3-JFhI.roa
File:                     bMaQHx4oTlXVHHIa4Ecei3-JFhI.roa (raw, json)
Hash identifier:          LYVnsbWJQAMjZvm/KcaRpa0Qyay8lZA/Rb7MHUg+ekU=
Subject key identifier:   6C:C6:90:1F:1E:28:4E:55:D5:1C:72:1A:E0:47:1E:8B:7F:89:16:12
Certificate issuer:       /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial:       0789
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/bMaQHx4oTlXVHHIa4Ecei3-JFhI.roa
Signing time:             Tue 29 Sep 2020 09:52:50 +0000
ROA not before:           Tue 29 Sep 2020 09:52:50 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        139.175.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1929 (0x789)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
        Validity
            Not Before: Sep 29 09:52:50 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6CC6901F1E284E55D51C721AE0471E8B7F891612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:09:18:ec:75:c2:c1:1c:ce:2b:dd:e3:d4:77:
                    55:23:47:2c:ce:df:cc:b4:96:0e:e1:1b:7e:d0:54:
                    25:b6:9f:b0:b3:b9:be:d1:dd:ed:48:fc:f7:50:5f:
                    35:0a:76:10:65:53:75:7f:d0:6f:6d:d3:a3:90:b8:
                    2d:b0:be:1b:2d:58:2b:82:08:9c:bc:1b:33:a3:4e:
                    4f:c1:d4:c3:f6:b2:c0:00:0c:aa:c9:f0:f0:60:81:
                    e7:d0:14:9f:3b:de:1c:9c:5b:b1:fb:11:6f:23:bc:
                    bc:34:34:ed:aa:6c:d8:4f:27:ab:b1:76:b3:15:fd:
                    3f:a0:93:2a:16:c9:41:3e:4a:89:c3:d8:f9:6f:bf:
                    34:8d:15:f8:cb:34:a3:38:89:ed:af:08:3b:c6:c7:
                    5d:37:99:c0:f2:9e:69:43:b0:fa:8e:72:f4:9d:bb:
                    3b:65:fe:10:62:fd:6c:02:13:3e:04:dd:ca:3e:90:
                    65:bc:df:14:54:5c:bb:de:26:e0:01:29:45:ac:d4:
                    4d:66:2f:b1:d4:75:fb:c9:47:72:c3:ad:30:fc:66:
                    d4:2d:fa:9b:0b:b8:81:25:5c:49:fb:74:78:4f:0f:
                    f5:9e:c7:6c:4d:e1:69:26:73:a9:09:c8:dc:8c:46:
                    5d:c1:80:42:9d:6f:34:5c:f4:2c:04:05:46:70:6c:
                    82:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C6:90:1F:1E:28:4E:55:D5:1C:72:1A:E0:47:1E:8B:7F:89:16:12
            X509v3 Authority Key Identifier:
                keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/bMaQHx4oTlXVHHIa4Ecei3-JFhI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.175.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         32:66:8f:05:40:a6:a8:9a:4d:7d:1c:f8:6b:fe:95:63:fa:24:
         b1:5d:6d:d2:18:60:6a:f3:b3:92:82:ce:c6:3a:12:80:c3:ab:
         b9:b3:f0:0d:c7:28:74:ac:0f:3f:94:c0:62:61:07:55:30:d0:
         1b:b0:b3:bd:e0:b6:c4:8e:86:36:01:c5:b0:84:64:0d:34:02:
         61:a9:d8:72:ff:31:0b:9c:4c:3c:b6:fc:05:1e:b3:51:7c:d2:
         63:60:2d:cf:9d:61:b8:a4:70:2b:56:da:13:16:40:ea:d8:31:
         70:68:7f:22:30:6f:b3:15:a9:87:f9:06:9c:b6:c1:26:95:26:
         7a:d8:94:6e:e7:61:ac:44:38:9a:a8:cf:de:cc:03:ae:b3:38:
         cc:20:e8:b3:14:73:e2:ab:43:29:42:a7:3e:80:76:62:87:4a:
         75:6d:42:9c:98:9c:76:af:10:db:76:af:a4:b1:1d:ed:c6:09:
         61:1d:fe:13:d9:d5:b8:fb:95:ce:9e:45:19:4c:50:7e:9c:8a:
         15:98:1c:30:90:d6:f1:1f:b8:f7:64:31:9c:a0:99:dc:c9:57:
         65:a2:b3:64:5e:7a:c2:b4:9f:f0:56:8b:b3:f7:1d:b5:c5:14:
         19:77:7f:61:12:69:b0:e0:0f:36:9b:8c:4e:77:05:b8:55:c5:
         7f:8d:69:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----