Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/k5YMOHOu_-W_sWO5nSDcCCXJKOo.roa
File:                     k5YMOHOu_-W_sWO5nSDcCCXJKOo.roa (raw, json)
Hash identifier:          M5BSXs2nN/RNEH8lYL+72TToSCf9pUQpwMKDRmNkbko=
Subject key identifier:   93:96:0C:38:73:AE:FF:E5:BF:B1:63:B9:9D:20:DC:08:25:C9:28:EA
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0EB7
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/k5YMOHOu_-W_sWO5nSDcCCXJKOo.roa
Signing time:             Wed 29 Sep 2021 02:43:53 +0000
ROA not before:           Wed 29 Sep 2021 02:43:53 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     4780
IP address blocks:        123.205.105.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3767 (0xeb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:53 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=93960C3873AEFFE5BFB163B99D20DC0825C928EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fe:a7:e8:68:ea:9e:25:f9:60:a3:24:ea:cc:
                    44:d8:d8:d2:fb:13:4a:b0:6e:06:27:2a:ed:46:52:
                    ad:9d:ca:7e:54:7d:2f:35:70:67:27:34:bb:bc:2d:
                    47:bc:45:ab:ba:5c:4c:d6:dc:b9:fe:bc:44:c4:43:
                    8c:31:e1:46:1f:2b:31:2e:56:e7:40:e0:b5:70:1e:
                    24:a2:3e:42:f2:fb:1d:bb:9f:c8:22:a4:6f:42:3d:
                    73:37:89:2d:df:e6:46:aa:df:0e:e8:b1:ae:7d:7b:
                    ad:7d:6d:1c:63:b6:8e:47:34:0b:67:1e:cb:d4:6d:
                    b4:59:cd:c6:1f:be:a8:65:17:4f:5b:91:6b:4d:c2:
                    62:52:ae:b0:2d:b9:3d:64:9a:79:37:47:ae:8f:64:
                    2d:26:0e:24:5a:c8:31:29:af:8d:20:c7:61:f9:a6:
                    1a:ba:02:31:15:7e:45:32:32:42:34:26:42:c9:99:
                    ca:f1:36:bb:46:15:04:cb:61:d6:65:cb:11:67:12:
                    7c:1f:2b:75:b6:4a:90:e3:7d:61:21:a5:6a:06:86:
                    da:84:f9:b4:85:85:e4:00:03:2c:a5:9c:5c:98:fa:
                    b7:f4:a0:e4:9d:c4:e0:53:ef:7d:f6:68:24:48:4b:
                    d1:82:ad:30:c5:a8:bd:5d:07:ab:b0:35:9b:72:03:
                    82:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:96:0C:38:73:AE:FF:E5:BF:B1:63:B9:9D:20:DC:08:25:C9:28:EA
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/k5YMOHOu_-W_sWO5nSDcCCXJKOo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.205.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:3a:c2:2a:77:70:80:85:4c:4d:18:38:1e:9b:07:38:1c:4a:
         9d:93:d2:fe:fd:b7:88:ee:fe:54:25:aa:87:a9:98:a2:25:ce:
         76:b7:00:7a:70:6c:14:6b:e1:27:b2:82:ec:1e:10:a0:99:19:
         89:ea:4b:77:e0:c5:5e:c2:85:7d:d9:97:07:17:36:e0:0d:12:
         7a:66:48:3e:c3:5d:1b:e1:26:ee:49:14:4f:45:3b:74:70:a7:
         2e:ff:0b:52:9f:21:bd:b0:0f:d2:41:dd:55:6a:7e:e2:ee:a5:
         77:44:cc:d5:5c:f5:05:5f:1c:86:5d:f8:44:f9:94:7e:60:7a:
         59:97:61:0d:1b:99:fd:b0:78:e6:07:60:06:80:02:1e:ec:77:
         d1:d0:41:a4:3b:9e:6f:ec:d0:2e:9f:aa:64:3b:37:b6:13:53:
         70:ac:26:84:01:5a:ff:31:53:fe:da:d0:e6:73:7e:41:e9:16:
         4f:bb:45:d7:8d:55:28:41:3e:88:e4:1c:2a:6b:0b:29:8e:b1:
         9e:d6:de:c3:c5:a0:d6:25:e9:e9:34:09:3b:6b:13:d2:5d:d3:
         90:6b:80:a9:95:b0:0a:6f:d2:81:16:3a:e8:f9:83:6d:7b:91:
         82:e0:25:91:96:0f:e0:5b:dc:d2:c7:9f:25:35:c1:fa:27:a7:
         e1:90:fa:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----