Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/ccG1-_SQtw72ALK3I4FzW_NRMHo.roa
File:                     ccG1-_SQtw72ALK3I4FzW_NRMHo.roa (raw, json)
Hash identifier:          xa55fhpn3cMt9kB3xxXRIpamylpPjib2ReiKePTpMgM=
Subject key identifier:   71:C1:B5:FB:F4:90:B7:0E:F6:00:B2:B7:23:81:73:5B:F3:51:30:7A
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       08B5
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ccG1-_SQtw72ALK3I4FzW_NRMHo.roa
Signing time:             Tue 29 Sep 2020 09:52:21 +0000
ROA not before:           Tue 29 Sep 2020 09:52:21 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        115.30.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2229 (0x8b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:21 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=71C1B5FBF490B70EF600B2B72381735BF351307A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f8:fe:a2:d2:a7:7a:2a:6e:8a:3e:56:02:1b:
                    62:32:64:81:e7:33:ba:e9:36:3e:25:56:ba:fd:54:
                    b9:70:0a:80:5d:0f:6c:d8:b9:4c:0b:5b:d4:7c:9d:
                    60:c1:03:55:4a:48:1d:21:ea:3c:74:b8:56:8a:9c:
                    a3:c6:f3:89:bf:ae:f2:7c:7b:83:b3:b0:85:1b:80:
                    5a:a8:6e:31:12:60:6c:93:5c:5f:9d:6a:f3:b1:ab:
                    b0:67:28:8d:b5:42:a6:db:95:c7:d3:8e:48:fb:44:
                    f3:19:20:88:80:98:9b:ef:35:8b:e9:31:ff:32:b7:
                    e4:9a:e3:19:31:5a:61:e7:9a:1c:16:fe:1f:96:07:
                    41:43:70:1e:75:05:05:39:e6:cd:51:1d:38:52:bc:
                    2a:60:8f:bb:4d:36:4d:13:f5:e3:59:d6:00:eb:eb:
                    1d:e0:ab:52:92:7e:ad:db:39:88:85:8f:95:a1:e5:
                    a8:06:b7:c7:ae:d5:3d:47:79:e2:c8:65:6c:ae:e3:
                    89:df:4d:f4:4e:81:f4:db:78:8d:3b:c0:3a:1c:76:
                    c7:28:bb:88:28:b6:f1:c7:45:33:3f:0e:d1:6e:18:
                    72:74:7c:38:b2:c7:9f:5b:ce:f4:51:56:71:4d:97:
                    1d:69:a2:e1:64:e8:a5:75:2d:5f:44:f6:16:12:a9:
                    0e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C1:B5:FB:F4:90:B7:0E:F6:00:B2:B7:23:81:73:5B:F3:51:30:7A
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ccG1-_SQtw72ALK3I4FzW_NRMHo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.30.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c7:c0:03:95:54:c3:05:8d:84:cc:e0:21:df:1c:71:c4:90:c8:
         85:6c:a1:64:c4:d8:fd:0f:ff:f3:b8:bf:80:83:c1:52:7a:54:
         27:34:45:f7:22:51:9c:0d:ff:46:1c:13:28:ab:6c:5b:e4:c7:
         5d:a2:bc:80:2e:35:52:19:a5:98:48:20:c2:1f:aa:e4:cd:15:
         05:1c:1c:1f:96:04:ce:ca:e0:54:17:c4:47:09:86:22:3c:7d:
         fb:0e:aa:29:bf:0e:1c:8a:98:e0:5d:6f:bd:1f:27:91:22:19:
         d9:ce:25:7d:84:bd:28:29:6a:a2:1c:e0:97:a0:02:ed:09:fb:
         99:33:ce:1c:f0:88:01:75:1e:5c:5d:79:f2:1b:65:96:2b:52:
         a2:76:e1:57:46:1f:27:9f:98:9d:7b:53:6d:d2:a0:e8:0b:e5:
         69:26:4e:d2:e8:25:16:c2:2b:5e:42:50:2a:bf:9e:4e:68:7a:
         77:af:ea:41:2a:61:c5:21:73:dd:d5:4e:27:b0:2c:cf:27:bd:
         2f:ba:58:6f:03:17:89:f9:7c:b0:bb:2a:23:32:f0:29:2c:55:
         fb:cd:a4:61:6d:80:ff:c1:fa:9f:ed:b8:f1:8d:83:9e:21:4c:
         07:34:92:dc:ec:0c:60:ac:0e:90:3a:ea:13:9f:39:59:ec:06:
         1d:62:1e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----