Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/sfmDl8phAg_ViUx5NrpLlZcm6hw.roa
File:                     sfmDl8phAg_ViUx5NrpLlZcm6hw.roa (raw, json)
Hash identifier:          CbcGlpNiN9c7J6tPslalBpancD8LNC77S7uhu3MwkFQ=
Subject key identifier:   B1:F9:83:97:CA:61:02:0F:D5:89:4C:79:36:BA:4B:95:97:26:EA:1C
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       08E0
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/sfmDl8phAg_ViUx5NrpLlZcm6hw.roa
Signing time:             Tue 29 Sep 2020 09:52:33 +0000
ROA not before:           Tue 29 Sep 2020 09:52:33 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9919
IP address blocks:        103.234.40.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2272 (0x8e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:33 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B1F98397CA61020FD5894C7936BA4B959726EA1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4f:d4:86:26:11:b0:9a:5c:e8:56:73:bc:a3:
                    42:fd:7c:31:79:cd:f5:5d:c9:91:e1:d5:02:9f:b0:
                    27:6d:dd:79:33:54:f7:f5:c1:32:38:96:c4:35:f9:
                    eb:90:ec:c7:65:17:0e:ef:8a:ef:38:a5:32:c4:56:
                    ca:19:c4:e1:c5:3c:a8:9d:ff:60:5e:e9:16:0f:2d:
                    d7:0e:fd:4a:c8:ff:7e:37:c9:78:0e:28:94:28:ec:
                    2c:2e:3b:98:a0:f3:e3:7c:26:62:d5:51:a0:12:c4:
                    1d:43:94:d7:ea:50:53:b5:21:60:38:3c:43:b1:28:
                    73:2e:52:1b:e8:59:04:ab:c7:4d:e0:10:85:08:21:
                    a5:a5:ef:bf:be:c2:0a:d4:57:6b:8f:f6:e5:0d:d4:
                    10:af:69:76:e1:0a:3d:68:71:44:1d:52:9f:fc:ae:
                    6c:4d:81:96:46:f9:61:a7:fb:be:83:e8:21:8d:b0:
                    c6:27:a6:23:10:bc:1f:c9:13:0e:37:d7:63:f2:66:
                    47:53:9e:f9:b8:b5:b4:1b:10:70:91:78:b2:df:d1:
                    ce:1f:e0:47:c7:6e:da:6e:c5:51:cd:f6:fb:cd:ba:
                    31:6c:2f:00:01:ad:57:15:fe:19:74:0e:f5:86:57:
                    8b:40:0f:d1:a9:a3:55:9e:c8:6e:a1:49:27:0c:4e:
                    d2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F9:83:97:CA:61:02:0F:D5:89:4C:79:36:BA:4B:95:97:26:EA:1C
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/sfmDl8phAg_ViUx5NrpLlZcm6hw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:3d:b2:93:23:47:d5:9a:69:b4:0c:11:51:ea:8c:20:11:6a:
         d3:dc:b1:29:ea:1b:37:83:15:a0:9a:82:f4:12:ff:86:ef:a5:
         b6:9c:48:02:34:d0:09:ce:64:e9:b7:da:a0:ec:ab:9f:73:88:
         81:5f:f3:fe:f0:59:42:5d:39:28:f5:fe:0e:e1:1e:62:2d:40:
         59:3d:2e:b6:66:74:87:2b:9d:f6:9c:86:08:42:cf:5a:c2:5f:
         fe:7c:2f:98:7a:f2:b3:21:4d:7f:ec:b6:70:b1:d5:89:66:b7:
         c6:dc:80:db:f9:d7:05:a3:b1:91:4c:61:11:f3:88:ac:b5:cb:
         71:d3:c8:20:83:74:8a:6e:16:27:e6:50:de:5d:f6:20:07:9b:
         6b:f3:d2:ea:cf:34:df:9b:98:f9:6d:04:50:c1:0e:d2:bf:90:
         96:c7:9e:51:be:55:e1:ef:05:20:dc:65:ff:19:c2:35:e2:cc:
         3d:be:ec:88:86:94:f5:09:f8:82:88:27:4c:c9:fa:72:df:37:
         e1:08:2d:34:68:b7:5a:13:0c:8b:55:bc:dc:83:5e:43:74:c8:
         81:cc:86:fb:c4:32:f2:bf:92:39:49:20:b4:7d:5c:44:f7:27:
         db:be:4b:a0:a6:76:30:3f:4f:59:03:1d:79:9a:dd:db:6c:64:
         76:57:36:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----