Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/pIOxIYovrhMa6XXUPtfPp5z4R7s.roa
File:                     pIOxIYovrhMa6XXUPtfPp5z4R7s.roa (raw, json)
Hash identifier:          Qbmln1ggD2fomPHnwgQ8EHKhr8A7SzOAt4hFv6aRsnY=
Subject key identifier:   A4:83:B1:21:8A:2F:AE:13:1A:E9:75:D4:3E:D7:CF:A7:9C:F8:47:BB
Certificate issuer:       /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial:       0788
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/pIOxIYovrhMa6XXUPtfPp5z4R7s.roa
Signing time:             Tue 29 Sep 2020 09:52:50 +0000
ROA not before:           Tue 29 Sep 2020 09:52:50 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        192.72.4.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1928 (0x788)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
        Validity
            Not Before: Sep 29 09:52:50 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A483B1218A2FAE131AE975D43ED7CFA79CF847BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4c:a1:8d:80:00:d5:4b:55:fe:f0:c4:09:84:
                    df:3f:d1:e7:ba:c0:08:dc:ee:96:80:49:f9:d6:b9:
                    90:a9:f5:86:49:1b:b7:73:ff:ee:b6:0d:5f:01:b0:
                    9c:db:d0:54:30:38:64:ce:8d:c0:59:f2:1f:36:d4:
                    af:32:a4:b5:4d:0e:5e:1e:a5:92:fa:1b:07:6c:f8:
                    46:6e:22:2c:da:f8:8f:e4:0a:fc:76:48:95:38:ac:
                    c2:10:26:4c:ce:11:a4:5d:2c:e2:c1:57:dd:6d:26:
                    89:16:98:08:bc:93:17:9a:4e:2e:43:2d:06:e4:3f:
                    3b:0e:c0:85:84:f4:d3:f8:cc:2f:bc:fe:27:0d:fd:
                    7c:ce:63:89:b1:f8:30:52:88:28:79:df:57:74:47:
                    b8:55:b5:c4:e2:1d:fc:a7:fb:65:77:3e:a2:93:95:
                    f7:88:8c:4c:53:55:c0:d8:fd:62:14:54:e3:65:78:
                    db:db:fa:d8:71:a2:13:6d:f4:99:a2:ce:08:b0:e5:
                    a5:15:27:b0:79:9b:cf:d1:23:40:8b:12:88:30:2d:
                    62:f0:8b:1a:50:99:38:c7:b1:b5:ef:51:bd:43:b0:
                    f6:dd:ca:15:a2:38:42:a3:a0:35:a0:f0:30:b4:89:
                    6b:8e:85:0e:9e:8e:45:09:fe:52:17:96:ff:0e:22:
                    01:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:83:B1:21:8A:2F:AE:13:1A:E9:75:D4:3E:D7:CF:A7:9C:F8:47:BB
            X509v3 Authority Key Identifier:
                keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/pIOxIYovrhMa6XXUPtfPp5z4R7s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.72.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:53:78:62:72:e1:26:41:db:4a:fc:ef:eb:52:25:5d:bb:15:
         e7:53:54:34:83:05:15:0a:a2:f0:a9:ca:25:28:dc:c3:c4:e4:
         a1:a4:0b:00:89:c2:89:b4:40:6c:f1:44:e7:cb:fb:e6:da:53:
         71:ca:21:99:14:f0:39:12:18:6c:fa:94:f2:66:0c:9c:be:33:
         24:3e:66:fd:97:69:2b:de:12:52:6e:74:0a:fe:2e:8c:82:1f:
         b7:b6:f7:28:50:d9:2e:70:bc:4e:e3:48:91:e6:56:d5:ea:c6:
         96:52:21:0b:f0:6a:22:cb:90:8d:bf:3a:92:af:11:37:b2:92:
         b6:3a:8e:25:0f:12:55:08:22:98:43:a3:b9:8c:82:ae:36:1d:
         f3:1e:67:26:7c:36:52:dd:bc:2b:28:1d:31:d0:05:10:20:be:
         e4:22:cc:ad:5c:ba:8c:14:b1:78:ab:47:2a:c9:66:7c:14:b5:
         79:82:54:79:6d:16:66:71:19:bc:4e:cf:7c:52:f7:44:72:81:
         18:d5:a7:db:ca:e2:8e:cb:97:8d:a5:91:98:14:cd:6d:87:96:
         54:20:7f:c9:0c:f6:5e:0c:9f:1a:34:09:bf:09:89:d1:2a:71:
         9e:8c:91:f6:d7:cc:96:2f:3b:4a:f4:d1:ab:bc:6f:2d:b3:f1:
         33:56:58:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----