Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/mY8kEvG7-pjTHAaXHbrvNegacXg.roa
File:                     mY8kEvG7-pjTHAaXHbrvNegacXg.roa (raw, json)
Hash identifier:          ECR6UbigTewtByqPaKVQvr6oEtVBtZ0hLMqDlb9cA8g=
Subject key identifier:   99:8F:24:12:F1:BB:FA:98:D3:1C:06:97:1D:BA:EF:35:E8:1A:71:78
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0E0A
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/mY8kEvG7-pjTHAaXHbrvNegacXg.roa
Signing time:             Wed 29 Sep 2021 02:43:08 +0000
ROA not before:           Wed 29 Sep 2021 02:43:08 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9919
IP address blocks:        220.228.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3594 (0xe0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:08 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=998F2412F1BBFA98D31C06971DBAEF35E81A7178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1b:1b:f6:e6:9b:8c:b6:fe:cf:fc:e8:10:4a:
                    f1:07:b1:15:f5:1f:e3:fd:c2:15:61:4c:ef:95:0b:
                    6d:54:8e:0c:4b:e4:47:8f:39:4c:e7:40:95:2e:7c:
                    76:85:b4:88:2e:90:4f:f7:02:0a:1e:b4:a6:d3:9e:
                    e2:96:7e:4c:18:a6:d2:d6:ff:d9:df:0f:80:4a:5b:
                    d9:97:03:3c:06:53:d0:af:27:2d:34:69:28:02:a4:
                    07:bc:5f:03:a6:45:37:16:1d:de:6d:0b:f2:03:00:
                    21:6a:4e:43:bd:90:f9:b2:26:93:4a:c9:7d:0c:0f:
                    85:dd:f1:6c:bb:99:f9:10:d0:b8:b7:6a:0b:28:1d:
                    3d:3d:84:b4:72:15:04:26:16:a1:d5:4f:0a:1b:fa:
                    38:61:8b:9a:66:e3:6b:a1:fc:4f:9f:bb:3c:0e:df:
                    25:50:27:b2:90:89:d7:6b:f1:02:d1:f2:97:9a:39:
                    fd:39:e3:ba:59:23:dc:3d:1a:df:e9:9c:e0:ee:84:
                    79:c0:0c:c2:9e:c4:6b:f7:a8:fe:a1:7e:19:5a:e2:
                    8c:c5:cf:7d:9c:c0:b5:8d:72:1f:b2:db:5a:fd:db:
                    81:72:25:66:78:00:bf:bd:b5:fe:a7:09:d6:4c:12:
                    c2:bd:16:26:18:06:95:55:ab:9b:2a:52:00:c6:8b:
                    63:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:8F:24:12:F1:BB:FA:98:D3:1C:06:97:1D:BA:EF:35:E8:1A:71:78
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/mY8kEvG7-pjTHAaXHbrvNegacXg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.228.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         9f:0a:b9:4e:2c:79:ad:7f:d7:d6:c3:52:f8:11:0a:37:77:3e:
         39:07:2c:0a:bf:30:ca:72:b6:a6:0b:25:92:c8:c2:03:bc:0f:
         e9:85:ae:a5:42:5c:ce:72:b7:0a:03:11:60:c4:a7:9a:ed:4f:
         cb:f8:76:a6:a8:07:6b:a6:27:da:c2:1e:85:e9:c9:c3:35:ca:
         8c:bf:48:3a:29:38:ba:11:82:a4:87:d6:ee:1a:0f:83:4d:e5:
         9c:ce:95:2b:01:e4:4b:d0:aa:10:e7:1f:bb:d5:72:81:0f:09:
         de:24:05:37:e6:41:7f:12:dd:ce:b1:18:29:e5:bb:b0:b0:59:
         d4:da:25:ce:73:32:b8:9a:d9:36:62:df:fc:1c:0a:f7:c0:7f:
         f8:4b:d3:01:ec:85:26:7a:ea:3d:7f:61:8c:36:40:97:c2:b2:
         17:5a:d3:05:0c:84:57:df:1d:2f:1b:ab:f3:13:a1:4d:e1:36:
         01:1c:2c:c4:c2:9c:a1:a0:f0:b3:06:68:87:2c:dd:98:ba:f2:
         3b:94:9b:17:fb:16:20:7d:34:00:fc:64:1c:5b:1c:db:8e:87:
         fd:35:66:ef:dc:de:72:8e:27:a6:70:61:2b:8c:1e:53:dc:73:
         4b:fe:d9:b7:e8:51:d0:0b:e0:fb:55:5e:09:f3:8f:da:67:ce:
         f5:29:e7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----