Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/k8wS0-Xm8MWNae1sfyOKCAcGNvM.roa
File:                     k8wS0-Xm8MWNae1sfyOKCAcGNvM.roa (raw, json)
Hash identifier:          fqcMNLg8D8gthjvZGuPpSV2shWTUVU7/VUu5wRx8A3c=
Subject key identifier:   93:CC:12:D3:E5:E6:F0:C5:8D:69:ED:6C:7F:23:8A:08:07:06:36:F3
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0910
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/k8wS0-Xm8MWNae1sfyOKCAcGNvM.roa
Signing time:             Tue 29 Sep 2020 09:52:45 +0000
ROA not before:           Tue 29 Sep 2020 09:52:45 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9919
IP address blocks:        175.182.77.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2320 (0x910)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:45 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=93CC12D3E5E6F0C58D69ED6C7F238A08070636F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:88:2b:72:06:e7:4a:c4:72:a4:2f:73:2d:87:
                    ed:0f:d9:ec:b4:8a:a5:60:5f:86:e3:a1:05:9d:ef:
                    b2:d6:bb:54:4a:b7:ed:dc:0d:0f:60:8e:84:3d:f2:
                    2f:e2:64:38:7f:f5:12:4b:86:99:4c:86:2c:88:1d:
                    05:20:46:d1:d7:93:df:bc:86:bc:ba:ed:29:d2:55:
                    97:90:e3:39:ae:90:db:15:65:52:87:b4:a2:98:7f:
                    42:e0:fb:b6:bd:b1:c2:46:9c:dc:cb:40:70:f3:7c:
                    a9:19:ab:38:93:29:4c:be:1c:b8:53:3a:8c:7d:8a:
                    ae:70:cb:87:8d:6b:76:7a:09:96:1b:57:bb:6f:03:
                    da:b5:f3:d1:82:9e:d8:fb:ad:b5:7f:0b:b0:aa:3f:
                    68:e4:f6:9d:41:e7:52:8b:6c:a5:e0:8b:a9:c1:34:
                    75:6a:59:05:73:78:eb:7c:b5:a7:79:a7:14:09:23:
                    11:2e:d7:84:0c:04:b7:bc:f3:fa:1b:9a:30:2f:1b:
                    71:b3:af:33:ff:ac:56:c5:c0:c7:c7:4a:81:3f:67:
                    0d:0e:aa:e0:7c:d4:15:2f:bd:77:c9:ef:bc:27:29:
                    79:b8:e5:b6:05:9c:f2:00:83:39:09:d4:bd:d8:20:
                    ce:5d:b4:f7:1d:bf:64:fd:9d:98:01:ad:f5:71:a2:
                    f6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CC:12:D3:E5:E6:F0:C5:8D:69:ED:6C:7F:23:8A:08:07:06:36:F3
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/k8wS0-Xm8MWNae1sfyOKCAcGNvM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.182.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:b1:c1:f1:b4:ab:03:f6:97:34:01:f9:ac:ac:c7:09:57:20:
         2c:e9:a2:78:15:83:59:4e:0f:9f:47:50:fa:df:3e:17:ab:61:
         12:89:57:8e:24:7a:12:26:54:c0:5c:f3:6b:3c:6d:ed:9d:10:
         a1:d5:67:72:27:bd:c0:6b:82:17:aa:c3:d8:de:19:6a:2d:07:
         4a:11:2d:2c:70:d6:f5:8e:11:ef:db:ed:5e:6a:16:59:46:32:
         71:39:d6:6f:bc:cb:1b:6e:d6:57:66:36:fb:af:d1:f2:8c:6d:
         dd:3d:ab:5f:e1:72:68:7c:be:4c:c7:6b:31:8f:c1:35:4b:ee:
         17:ce:08:6b:b2:e0:a0:ea:8d:5e:68:53:f9:42:97:f9:a1:76:
         63:bd:ad:d7:11:7d:52:fd:cb:69:3c:87:1e:d7:80:03:27:a4:
         d9:ba:fb:87:c2:fc:74:71:63:1c:5a:5d:4f:bb:27:49:72:a9:
         e2:97:79:06:3a:29:f8:dd:a6:bc:a4:6f:e3:9e:b2:b5:83:8c:
         1d:2e:17:3c:ee:16:ec:3e:f4:8c:ac:87:eb:57:c6:85:61:3c:
         9f:48:63:36:30:b6:8a:89:55:b9:cf:3c:2b:73:a7:62:1e:ec:
         58:ab:4c:ab:c8:be:c0:f2:29:d0:63:e9:77:a1:97:04:cc:6a:
         fc:a8:26:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----