Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/q_ZR5chKxGdB8Vx8HrM0jGjSsYw.roa
File:                     q_ZR5chKxGdB8Vx8HrM0jGjSsYw.roa (raw, json)
Hash identifier:          +ivbLCUduojAbrwA5grpflq5Bfua3t5qnjrJPwhgmzA=
Subject key identifier:   AB:F6:51:E5:C8:4A:C4:67:41:F1:5C:7C:1E:B3:34:8C:68:D2:B1:8C
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       08D2
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/q_ZR5chKxGdB8Vx8HrM0jGjSsYw.roa
Signing time:             Tue 29 Sep 2020 09:52:29 +0000
ROA not before:           Tue 29 Sep 2020 09:52:29 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9919
IP address blocks:        220.229.0.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2258 (0x8d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:29 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=ABF651E5C84AC46741F15C7C1EB3348C68D2B18C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:84:77:17:b5:28:32:d2:2c:6e:0f:43:4a:dd:
                    64:08:e5:85:dc:cb:f8:26:19:e5:3f:89:28:f4:b3:
                    8d:6b:92:7d:bd:80:57:9c:34:41:df:6f:e3:65:cf:
                    ae:6c:98:af:d1:e1:2a:e2:77:27:a3:c1:df:d3:b4:
                    ea:43:66:6a:54:16:7d:50:e8:6d:7d:ef:58:e4:9f:
                    b3:b0:0f:6e:fe:b7:3e:6d:cc:81:26:f0:05:7b:e1:
                    52:b7:bc:ba:a3:da:3d:3a:4f:7c:8f:c4:66:af:9e:
                    87:53:88:b5:9e:eb:2d:14:54:f8:8f:cd:36:56:49:
                    ab:3e:b5:60:6d:3c:d6:7a:df:06:91:82:86:44:a7:
                    8a:c0:41:b9:d0:78:57:fd:54:50:a1:f6:f4:dc:0d:
                    b7:f6:1d:db:f9:72:9a:45:8b:51:f5:ba:46:a1:a5:
                    d9:4b:62:0e:cd:66:19:ac:e4:f3:e7:d3:6c:81:ac:
                    12:bc:25:04:0a:ee:0b:f2:fd:14:c0:d8:56:f3:48:
                    09:d8:bc:4e:ba:92:a0:55:94:da:6a:fc:10:b5:9e:
                    73:6d:23:33:e1:08:04:42:dc:ed:b1:7e:3c:a4:db:
                    00:97:91:93:c9:00:3b:35:37:5a:b6:f5:e5:60:97:
                    8c:a2:2c:88:2d:7a:e4:ee:de:19:e3:cc:36:38:58:
                    43:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F6:51:E5:C8:4A:C4:67:41:F1:5C:7C:1E:B3:34:8C:68:D2:B1:8C
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/q_ZR5chKxGdB8Vx8HrM0jGjSsYw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.229.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         59:56:d5:2f:90:f0:cc:7b:98:27:41:5b:b7:5e:87:cf:3e:52:
         12:ab:49:94:19:7a:1f:77:79:b3:d3:d3:be:41:54:e9:25:1b:
         d4:bf:ef:43:6f:cf:d0:c7:8e:b7:06:3e:b2:2e:45:d7:08:84:
         af:a5:98:ba:06:09:51:cc:ed:bf:2f:87:9a:8a:27:01:d3:a4:
         bd:ae:f7:99:db:9d:52:1d:07:02:f0:3a:a1:a8:0f:d8:2d:ad:
         1f:a0:54:02:ee:64:15:c9:56:b8:ba:d3:2c:6d:f4:c9:22:4a:
         7d:4b:87:a4:07:a9:56:2a:25:c1:4d:0b:64:86:51:d5:9e:10:
         c6:f1:56:d2:e2:94:12:5d:48:35:0d:24:30:60:97:0d:77:c7:
         33:95:34:d6:bc:c3:b8:f0:09:c1:4b:b5:69:85:9d:cc:b3:f5:
         2a:18:c9:75:2a:df:e5:a4:14:20:f6:6b:13:99:b6:88:29:fd:
         32:04:96:13:3d:e3:e3:5b:9e:c3:de:cd:10:1e:c0:3e:5a:7d:
         b6:f9:77:02:c6:c4:75:38:58:04:e2:1b:32:d2:2a:b9:e7:81:
         37:8c:f0:4e:9e:74:57:cf:05:f0:a1:66:f0:7e:d6:6e:07:61:
         90:ff:c4:cf:04:fc:be:90:3e:2e:18:1f:11:c0:c4:07:72:bb:
         a0:7c:f5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----