Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/vdfykovd77qPyoXnlPKLhNDQPyM.roa
File:                     vdfykovd77qPyoXnlPKLhNDQPyM.roa (raw, json)
Hash identifier:          rrZSO8tHAZDox5rVsXlmusdQopLlicnm/TO74gKk5Q0=
Subject key identifier:   BD:D7:F2:92:8B:DD:EF:BA:8F:CA:85:E7:94:F2:8B:84:D0:D0:3F:23
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0D17
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/vdfykovd77qPyoXnlPKLhNDQPyM.roa
Signing time:             Sun 07 Feb 2021 11:48:16 +0000
ROA not before:           Sun 07 Feb 2021 11:48:16 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        122.147.16.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3351 (0xd17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Feb  7 11:48:16 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BDD7F2928BDDEFBA8FCA85E794F28B84D0D03F23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e7:94:b3:d9:0b:15:f9:17:fd:ee:fa:2f:bb:
                    96:9f:68:1e:42:57:5a:0b:60:22:15:01:f9:a4:b8:
                    6c:fc:4d:57:3e:4e:20:8c:e3:b7:63:cf:b8:a7:80:
                    af:0a:92:69:8a:21:89:00:3c:80:ba:74:97:1b:04:
                    74:94:dc:75:f3:84:4f:14:fd:24:75:3b:8c:ac:9f:
                    07:c4:3d:65:f1:e6:f3:fe:6c:63:55:c4:51:45:eb:
                    39:d5:6a:48:ea:52:76:e3:46:04:df:22:a2:61:bd:
                    5b:38:a2:42:fb:02:87:3d:44:20:2c:43:dc:ac:66:
                    8d:30:6d:ad:46:0f:e6:ff:85:1f:40:a9:ae:89:7e:
                    18:f1:c9:aa:9e:e5:75:d1:0b:19:6f:98:63:0b:d4:
                    ed:ec:b4:1b:af:1f:b6:d2:a3:09:7a:3b:11:1f:7c:
                    a5:5f:d4:b8:9c:bb:64:fc:c9:8f:99:7e:5c:54:9e:
                    d0:11:b0:4c:a3:f3:a0:a9:90:85:6e:21:9b:c5:59:
                    06:94:52:21:db:9a:e6:83:2a:c0:34:47:a5:4d:bf:
                    90:69:a2:30:23:4f:fa:59:b5:5c:65:0e:3b:ff:c2:
                    10:6a:87:4d:6d:61:ba:c4:1d:04:9b:74:d7:59:e7:
                    be:3b:88:03:c8:36:d2:ab:7c:35:c7:5e:4a:07:4a:
                    b1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D7:F2:92:8B:DD:EF:BA:8F:CA:85:E7:94:F2:8B:84:D0:D0:3F:23
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/vdfykovd77qPyoXnlPKLhNDQPyM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.147.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a2:c9:47:b4:dd:15:6d:37:cd:c4:20:af:d9:2e:62:a8:58:6b:
         4d:fc:81:8e:a1:27:b2:1a:8a:1b:47:f4:92:04:a7:e5:8d:e4:
         48:69:de:19:30:b0:bd:1d:b5:a1:8f:02:29:65:f9:a1:2e:94:
         62:6f:7b:43:bd:1c:de:7d:88:ee:7b:f2:b9:e3:b3:4e:2b:f6:
         16:a7:a0:a7:ed:d2:a2:f6:af:5c:07:41:46:9c:76:91:a4:0a:
         c7:6e:74:2e:87:0c:10:65:ad:c7:73:b1:c2:6f:c3:8c:d6:4e:
         25:cb:85:fd:61:31:c4:99:70:58:dd:78:72:81:3d:3e:68:06:
         9e:f9:cd:1f:90:55:85:52:98:23:3b:0d:c9:12:85:da:df:e3:
         cc:34:82:4f:82:94:3f:1f:f6:ff:76:07:fa:a9:cb:72:cf:02:
         b5:1e:c2:20:cc:7a:55:ec:e6:9a:ec:71:fe:06:a2:03:06:28:
         c4:4d:1c:e3:da:fb:dc:4b:1d:e0:fb:7f:7a:f2:a0:36:51:18:
         d8:0f:f9:f2:48:63:91:21:47:e7:e0:68:bb:91:4c:90:10:dc:
         1c:ab:87:ea:d8:29:1f:87:28:46:c4:d2:ad:12:86:ba:88:ca:
         f8:1d:23:f0:80:d6:d7:a6:bc:9c:36:8c:f1:8d:fb:08:bc:13:
         73:85:d6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----