Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/uPTv79SJDFJYFAcgKIPlCO9KND4.roa
File:                     uPTv79SJDFJYFAcgKIPlCO9KND4.roa (raw, json)
Hash identifier:          /jxqBNXieA75tRpGFhp7ZMcRcRkudrwInND47JxrKL0=
Subject key identifier:   B8:F4:EF:EF:D4:89:0C:52:58:14:07:20:28:83:E5:08:EF:4A:34:3E
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0E45
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/uPTv79SJDFJYFAcgKIPlCO9KND4.roa
Signing time:             Wed 29 Sep 2021 02:43:23 +0000
ROA not before:           Wed 29 Sep 2021 02:43:23 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38851
IP address blocks:        113.196.144.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3653 (0xe45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:23 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=B8F4EFEFD4890C52581407202883E508EF4A343E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4e:b4:f6:cd:c6:09:6b:f9:55:9c:7f:17:85:
                    49:48:4b:7f:90:0b:de:69:70:d5:39:f3:5d:ad:60:
                    14:94:8e:a8:3d:ac:73:fe:c5:e9:d5:fa:f1:a2:ff:
                    ee:d0:ba:36:8f:5d:97:c6:5b:7c:3b:fe:75:cc:ff:
                    2b:14:a7:d1:c8:b7:7f:7c:87:b6:5f:c2:23:31:59:
                    ca:55:d8:c2:7b:78:af:8f:e6:62:1e:f6:49:99:61:
                    ac:4f:bc:2b:70:d3:0b:a2:9d:fc:c0:f2:e3:24:8e:
                    cf:ef:11:08:9d:01:cf:e3:b9:7d:ac:85:2c:f0:3d:
                    99:a8:88:af:86:92:61:7d:28:2c:a6:c9:c8:c0:ef:
                    21:5b:4a:4e:7e:38:3e:a0:1a:7c:9a:8c:68:88:60:
                    13:b4:59:bf:a0:30:75:e3:fc:ef:c5:ed:6a:7d:71:
                    04:8e:1a:07:c2:f5:aa:2d:8e:b6:dd:e7:18:2e:b4:
                    15:50:70:2b:be:45:35:80:d2:9c:1a:1d:5a:37:c7:
                    c5:75:97:ca:c7:52:3f:74:95:e0:74:66:e1:21:ba:
                    ba:21:2e:18:f1:3c:12:2c:11:56:05:75:7d:9a:49:
                    bf:0c:e6:75:86:ed:a5:cb:34:74:99:05:d9:dd:01:
                    6b:dc:46:82:c9:ff:ea:fe:08:ba:6d:0d:8b:2d:41:
                    31:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F4:EF:EF:D4:89:0C:52:58:14:07:20:28:83:E5:08:EF:4A:34:3E
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/uPTv79SJDFJYFAcgKIPlCO9KND4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.196.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         aa:9d:ab:c1:f9:e6:f5:17:65:50:74:1b:d1:2f:44:9d:a6:d2:
         f0:38:34:f3:6c:ee:2f:6c:2e:7c:58:8d:77:32:af:13:db:8c:
         96:a5:c9:c1:77:b6:2f:a7:8f:6a:d1:e9:15:9f:3a:7e:62:26:
         f1:18:05:ea:fe:e5:16:28:a0:7d:74:0a:33:ac:3d:dd:3c:03:
         da:f6:ec:c1:87:ae:d7:65:3f:18:17:f5:63:fe:44:ae:92:d4:
         29:7d:b7:46:0c:12:f4:ee:34:90:43:eb:30:61:7f:6b:2a:e0:
         88:3e:16:65:5b:45:b1:9a:87:c0:d9:92:3b:cd:97:a8:aa:17:
         fc:3d:a0:1a:46:3a:dd:50:f8:6e:98:c6:9e:81:4d:3d:a9:f2:
         a8:b6:66:06:54:79:14:10:ff:fc:4a:9a:75:2c:53:7b:45:69:
         cf:f9:a1:3c:68:61:40:dd:9e:ed:76:f1:1a:8c:23:cc:ca:8f:
         23:35:0e:c4:b1:31:8d:51:9e:99:5d:fb:7b:ed:5e:ff:0f:4f:
         93:65:49:39:7e:47:8f:89:3e:22:ac:3f:9d:06:97:28:b1:17:
         c5:9a:53:f4:56:12:92:79:e2:e6:a4:94:da:59:24:f3:b7:78:
         48:6b:3a:a9:b6:81:de:3b:be:7a:e0:1d:a3:da:f4:98:07:98:
         f7:66:c4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----