Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/vM2tegB4kvh-LyHrOteKVSB8yoA.roa
File:                     vM2tegB4kvh-LyHrOteKVSB8yoA.roa (raw, json)
Hash identifier:          wDV8TuUW2oChNWbmrWHkEMGHjU/9riQRm8B1qecKkKg=
Subject key identifier:   BC:CD:AD:7A:00:78:92:F8:7E:2F:21:EB:3A:D7:8A:55:20:7C:CA:80
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0892
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/vM2tegB4kvh-LyHrOteKVSB8yoA.roa
Signing time:             Tue 29 Sep 2020 09:52:10 +0000
ROA not before:           Tue 29 Sep 2020 09:52:10 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9919
IP address blocks:        60.245.64.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2194 (0x892)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:10 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BCCDAD7A007892F87E2F21EB3AD78A55207CCA80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f5:43:6f:15:ad:43:00:7e:ea:39:fa:3a:19:
                    26:c5:d0:b5:0e:9e:e4:bc:8d:1b:87:a2:ee:8d:94:
                    bb:4f:16:a1:f2:fb:e0:1f:13:9f:53:ac:d1:2a:b8:
                    66:ec:b6:52:67:ee:b0:73:61:ae:b9:8d:91:1b:bc:
                    04:8f:0a:9d:6f:40:25:f7:8e:f3:d4:28:1c:c7:81:
                    4f:bb:2b:cc:cc:e8:f1:ed:b9:08:2c:51:fe:51:8d:
                    a8:9c:61:b8:22:eb:a6:8c:6d:18:a5:89:34:b0:84:
                    7e:9d:28:82:9a:c7:59:53:8d:d3:5e:fe:21:9a:f5:
                    88:b3:cc:21:41:f5:c4:d6:bc:0e:98:5f:36:a2:51:
                    59:29:87:d1:99:e5:e7:5b:f5:9d:6a:d0:c8:d8:2f:
                    4f:ff:70:63:35:ec:58:cf:f2:0f:7e:df:40:17:a6:
                    57:f2:6c:9e:ed:a2:3c:cb:f1:78:6e:95:1e:24:21:
                    57:69:06:93:53:dd:5a:a8:57:a4:7e:dd:ec:36:1d:
                    aa:a1:2d:3a:0f:ae:82:76:10:7a:49:3d:bb:71:f4:
                    64:a8:79:42:42:bf:00:af:d7:0d:b3:1f:46:a6:af:
                    6b:2f:d3:42:00:08:bb:18:09:f8:79:ca:5c:95:ba:
                    70:c6:33:5c:52:e7:03:66:4d:cd:ba:67:60:8b:26:
                    ff:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:CD:AD:7A:00:78:92:F8:7E:2F:21:EB:3A:D7:8A:55:20:7C:CA:80
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/vM2tegB4kvh-LyHrOteKVSB8yoA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.245.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         38:cf:21:4e:49:82:db:b6:5d:59:da:3b:67:b8:1a:15:6c:15:
         86:3d:f5:87:17:54:c9:6f:f4:94:d4:27:1c:51:d0:66:fb:d5:
         e8:83:79:de:2f:1d:08:45:9a:cd:72:ed:e9:06:85:27:00:9d:
         97:13:59:f2:c6:ff:14:c6:f8:58:f1:f8:1d:99:16:34:cd:a2:
         5c:94:df:40:df:0a:fc:4a:3a:11:1d:4a:41:f4:2b:1a:c2:7b:
         13:5c:04:84:25:18:ad:b5:a4:49:6f:16:5f:df:f9:bf:01:4b:
         86:2b:d2:9f:e7:37:fd:24:40:8c:78:e4:e3:2b:00:15:d4:b7:
         c6:30:07:5e:05:90:7f:fb:ca:84:98:99:dc:ce:d7:dd:3d:4d:
         5f:ff:6c:60:1b:69:df:38:db:d5:a2:85:eb:66:be:6f:4d:d4:
         6a:6d:97:fe:a1:a0:71:94:13:e9:be:dc:2f:7a:d0:c9:54:38:
         8e:f2:8a:a2:dd:0b:39:e0:e3:d6:c9:12:ab:70:4f:b4:2c:f1:
         e1:49:23:b0:9c:ce:37:a7:9d:a3:e0:8e:66:2e:78:0f:9c:c2:
         1c:59:24:c0:ca:d2:90:74:62:72:6b:7d:aa:03:70:b0:36:25:
         7c:e3:d8:27:d2:fc:75:da:99:27:d2:5f:ae:59:d1:9f:7a:28:
         53:b5:f3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----