Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/l62CIIsUOiz4-GQxKfOVwDKlksY.roa
File:                     l62CIIsUOiz4-GQxKfOVwDKlksY.roa (raw, json)
Hash identifier:          Sez6YFxan78gZRCMOgYcgFmXHw1Dz/YkCK3mepNHO6s=
Subject key identifier:   97:AD:82:20:8B:14:3A:2C:F8:F8:64:31:29:F3:95:C0:32:A5:92:C6
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       08D4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/l62CIIsUOiz4-GQxKfOVwDKlksY.roa
Signing time:             Tue 29 Sep 2020 09:52:30 +0000
ROA not before:           Tue 29 Sep 2020 09:52:30 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9919
IP address blocks:        122.147.166.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2260 (0x8d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:30 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=97AD82208B143A2CF8F8643129F395C032A592C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:43:0b:ba:bb:8d:7e:09:86:e3:7d:a0:34:d4:
                    15:7e:04:7b:69:51:4b:f4:0c:37:8e:53:f1:c4:5d:
                    64:38:0f:65:77:3a:2b:7f:9a:ba:d2:e5:22:68:b8:
                    25:60:e3:b5:06:c0:0a:e0:54:72:0a:83:d0:be:07:
                    4c:b0:67:0c:ef:f7:e2:ce:a3:7c:ca:e5:0a:0f:a4:
                    62:6e:bc:73:05:b5:4a:0d:ab:15:28:c9:fe:05:4b:
                    4b:9a:68:a0:aa:a3:47:11:09:f4:77:3c:62:24:15:
                    27:f5:fe:2f:2e:37:5e:79:d0:41:2f:0b:47:2c:c2:
                    2f:2d:99:b2:7f:b6:12:75:5a:1c:27:54:6a:a2:82:
                    de:b7:de:5b:41:60:0d:32:11:23:bd:4b:f8:1d:9a:
                    d8:14:6f:0d:af:54:15:36:a4:12:4f:67:68:44:3b:
                    b0:04:6d:62:6e:c3:b5:d9:ee:67:d0:f1:d9:bf:0e:
                    56:7d:12:d2:f8:dc:e9:93:84:f6:7d:6d:aa:e4:94:
                    e7:df:80:5c:44:7f:82:6d:c4:79:e0:67:8c:a7:05:
                    5a:36:e0:36:59:98:d2:64:45:7b:57:9a:8f:23:c2:
                    55:44:71:fd:a4:09:4e:bd:38:4e:7c:34:1c:ad:02:
                    b4:06:45:d9:37:f3:2a:f7:8d:23:99:a2:97:b7:2c:
                    80:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AD:82:20:8B:14:3A:2C:F8:F8:64:31:29:F3:95:C0:32:A5:92:C6
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/l62CIIsUOiz4-GQxKfOVwDKlksY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.147.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:2a:63:f8:c3:4b:91:2b:10:85:be:6e:e9:7c:f4:42:90:c8:
         7d:b7:db:48:9b:d1:61:95:7f:e9:b4:c0:c9:35:49:a9:6f:ab:
         9e:a7:78:91:00:8f:ef:02:62:8e:db:c7:54:8a:94:30:cd:59:
         73:7e:9f:76:27:36:0f:0d:f0:e5:95:1d:cf:e6:74:1a:8f:e3:
         8c:e7:77:65:fb:db:67:69:3c:30:b4:7c:b3:61:a8:6f:95:b9:
         83:21:02:10:51:19:fb:33:16:4b:18:3e:87:98:12:01:9d:52:
         91:70:24:2f:76:04:a4:27:75:10:ae:52:8a:05:ee:6c:85:46:
         3f:c7:9f:9c:74:03:63:8e:b2:87:f3:d5:09:80:aa:80:5b:82:
         c2:05:09:73:1e:b3:4c:2f:4b:0f:03:0b:6c:c4:b6:0c:ce:ab:
         84:83:be:5c:6f:ab:85:ac:fd:48:74:5f:15:95:b9:7d:ac:13:
         f9:40:57:39:8b:d5:3c:0e:d3:9b:85:2d:ed:aa:78:b1:84:78:
         a1:9f:bb:1c:92:3e:70:d6:4f:d1:20:e0:61:fb:c0:10:ef:cb:
         d7:f3:d5:f8:da:92:16:dd:09:ce:80:8f:64:17:8a:ce:8a:3f:
         76:87:11:62:25:32:c1:b5:ad:fd:9f:75:4b:f1:8f:da:c7:b0:
         2f:8c:45:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----