Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/sCYU7CaYU2ZhrlADxDz9D4wtgyI.roa
File:                     sCYU7CaYU2ZhrlADxDz9D4wtgyI.roa (raw, json)
Hash identifier:          nhGI1gS83b7gE7LQmquZI703Ku53OUQkasxzk8HtV3A=
Subject key identifier:   B0:26:14:EC:26:98:53:66:61:AE:50:03:C4:3C:FD:0F:8C:2D:83:22
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0C21
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/sCYU7CaYU2ZhrlADxDz9D4wtgyI.roa
Signing time:             Sun 07 Feb 2021 07:04:13 +0000
ROA not before:           Sun 07 Feb 2021 07:04:13 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18049
IP address blocks:        175.183.80.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3105 (0xc21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Feb  7 07:04:13 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B02614EC2698536661AE5003C43CFD0F8C2D8322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:db:98:dc:ec:32:13:a6:10:24:2c:c4:a1:79:
                    4a:3f:63:14:8c:bf:ba:91:ab:3b:48:92:fd:e7:30:
                    98:a8:3e:96:c8:26:fa:78:42:84:b4:42:9a:28:03:
                    d0:64:ed:53:44:a7:28:24:c1:24:d0:23:42:5f:0e:
                    04:43:2f:d8:b1:40:fe:59:d4:97:93:38:4c:1e:fc:
                    fd:5a:14:75:92:e6:67:f4:5a:b4:f7:c1:d7:ad:1b:
                    2d:08:99:49:fd:78:a3:3c:ed:66:f9:2f:b9:03:9b:
                    67:48:5a:e8:66:40:ce:cc:92:dc:da:25:9c:35:10:
                    6f:d1:33:a9:cf:6c:8e:7e:6e:03:38:dc:71:9d:f4:
                    52:f9:6f:d8:f8:ad:6b:0d:20:16:e0:71:83:04:e6:
                    25:a5:58:7b:29:cc:93:01:03:12:3b:3e:d8:15:51:
                    a1:f2:4f:6e:8a:34:e7:31:32:fa:88:9d:04:4c:48:
                    1f:2c:5c:e4:9b:57:7d:ff:55:f1:00:81:5c:84:a4:
                    01:ff:d5:ac:ba:4b:9f:79:74:31:83:90:d2:84:85:
                    7c:fb:5a:53:88:d2:e3:a2:08:40:9a:9c:a1:39:61:
                    c0:18:56:73:d6:01:c6:21:34:cc:ba:7c:a0:d5:e3:
                    3b:ab:10:a4:bb:b6:a7:c2:d3:db:4e:83:84:77:2e:
                    d4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:26:14:EC:26:98:53:66:61:AE:50:03:C4:3C:FD:0F:8C:2D:83:22
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/sCYU7CaYU2ZhrlADxDz9D4wtgyI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.183.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         86:c8:b4:2d:98:31:5f:82:67:81:65:ac:01:43:d3:a9:3f:74:
         c7:fc:d2:ce:e5:22:4d:8d:f4:67:9b:01:a4:0a:81:ac:4e:50:
         8b:03:c8:4c:ae:33:fb:0a:ca:32:d4:e9:f1:6d:b4:8e:55:1e:
         a3:e5:c9:4f:87:5c:12:fa:a0:66:e5:b7:3f:1c:67:10:1b:08:
         6f:94:3f:d6:f0:a4:13:11:5c:f7:d2:8c:42:31:80:fc:69:6d:
         54:4e:d6:ca:ee:88:57:d9:61:d3:55:ff:09:e8:df:42:e8:36:
         19:22:a3:2f:25:20:09:de:bf:51:e3:4d:5b:95:f5:92:02:88:
         1c:ed:9c:be:a5:7a:17:43:5f:51:e0:3d:eb:63:16:04:4a:0f:
         f3:46:f4:e6:c1:3d:7e:78:5f:1e:6b:8c:7a:b9:15:a5:94:c4:
         7a:cf:35:47:e1:63:0e:84:41:5c:b9:b6:50:a4:46:77:0b:06:
         96:f3:f9:33:17:10:18:92:ff:81:c1:11:c4:50:2d:95:0d:d8:
         da:cf:31:a5:fb:4a:bb:35:84:9c:69:4d:aa:ee:bb:31:9d:b3:
         fb:b7:c6:45:fe:e3:f4:a1:b4:c5:a3:91:d2:a4:ab:1a:a8:e4:
         7f:c4:e3:5a:59:dd:36:75:28:af:ba:fd:ec:ae:87:d0:5e:2f:
         90:f5:59:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----