Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/gv88rr2BhWchN8Lc0OqAd94BsVE.roa
File:                     gv88rr2BhWchN8Lc0OqAd94BsVE.roa (raw, json)
Hash identifier:          k21UV2f7npRuQMP8v4yqN+9ZiaXBRwuOypFm397ytms=
Subject key identifier:   82:FF:3C:AE:BD:81:85:67:21:37:C2:DC:D0:EA:80:77:DE:01:B1:51
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0C23
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/gv88rr2BhWchN8Lc0OqAd94BsVE.roa
Signing time:             Sun 07 Feb 2021 07:04:34 +0000
ROA not before:           Sun 07 Feb 2021 07:04:34 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18049
IP address blocks:        175.183.0.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3107 (0xc23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Feb  7 07:04:34 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=82FF3CAEBD8185672137C2DCD0EA8077DE01B151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e5:4e:4e:37:73:c6:8f:dc:0c:37:7b:3f:7c:
                    79:3b:89:7b:03:4f:77:70:fc:a7:5e:3a:70:2c:a2:
                    bd:45:8e:04:5b:76:7b:18:f4:fe:ee:a4:a2:5d:ec:
                    cd:ae:39:e7:4c:c3:df:75:d0:b3:b6:e9:33:40:0b:
                    4a:61:15:d9:99:e4:34:05:12:1f:e6:0c:ad:b5:c1:
                    cd:d8:3c:bc:c1:23:8f:dd:48:ae:8f:8c:2d:5b:02:
                    e5:d6:d8:87:27:0c:98:57:58:25:b1:5c:e0:bc:62:
                    9f:d7:77:8a:72:e6:9e:b4:1e:39:37:28:58:41:e0:
                    e5:9c:08:e0:7e:56:3c:6e:a8:41:3a:21:24:48:d6:
                    e8:f4:20:e4:09:80:ad:85:d5:da:65:8d:57:33:1f:
                    91:d8:f2:3e:73:a2:d0:8f:ae:31:dc:7f:b7:9f:36:
                    7c:7d:ab:56:75:3a:a3:73:ce:10:9c:53:e3:ea:f5:
                    3c:45:18:9b:fc:43:24:6a:2f:e5:cc:4b:eb:fe:36:
                    b7:85:39:68:49:ed:de:1c:04:e0:c3:00:75:dd:dd:
                    31:83:61:2a:60:60:2f:98:9a:3f:18:51:2e:e8:1a:
                    43:13:49:22:65:b7:20:39:81:eb:59:3b:96:81:c8:
                    c1:78:45:37:3d:ac:fb:7e:38:7f:43:d6:7b:69:c6:
                    b2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:FF:3C:AE:BD:81:85:67:21:37:C2:DC:D0:EA:80:77:DE:01:B1:51
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/gv88rr2BhWchN8Lc0OqAd94BsVE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.183.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1c:37:0e:e7:8e:f1:b1:35:63:6a:62:66:eb:72:53:7d:37:3b:
         62:77:5b:32:d9:09:5a:c3:6b:eb:f9:b2:6e:16:5e:8f:23:7f:
         c8:2e:c3:41:3e:76:27:78:b8:cb:2d:82:2c:fb:54:7c:0a:92:
         2a:1d:54:33:b5:b1:d1:de:12:20:00:5d:ce:59:14:59:65:1a:
         46:38:40:21:80:6d:c9:a5:ba:c2:34:ed:17:6c:ac:6a:fa:20:
         f3:5c:f4:a0:51:52:51:f8:06:c1:60:6f:a9:1f:75:e2:43:a9:
         ff:cc:02:2d:98:d5:9e:52:37:58:1b:b4:e1:91:d0:cd:67:28:
         41:91:4c:e6:aa:a9:02:70:a9:50:58:a1:8c:b3:75:13:4b:22:
         59:b4:ab:c5:f5:84:e4:62:bd:c4:d9:ce:73:7f:37:ab:d7:a7:
         d1:57:e9:ec:4e:59:38:4e:42:12:7b:87:50:a5:d0:29:a3:64:
         ff:31:90:94:e0:c3:25:53:8f:4e:81:b4:05:54:03:41:f4:8c:
         0a:06:b0:b9:99:00:ef:f5:da:46:5b:ef:ea:9c:d6:ff:33:29:
         d5:9a:db:3b:25:d7:d4:28:e8:d4:8f:d1:4d:c8:af:e4:37:20:
         64:9d:11:a7:fc:0b:15:b5:b6:a1:e6:7b:05:3f:38:70:1d:fa:
         4a:4a:cc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----