Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/vk1VVvf5eIT3eqsRqMAxEHF3-Ew.roa
File:                     vk1VVvf5eIT3eqsRqMAxEHF3-Ew.roa (raw, json)
Hash identifier:          KxnGLJrWBd6djVs1JjR4hnLplY25wDEwLXLCdxyRPTY=
Subject key identifier:   BE:4D:55:56:F7:F9:78:84:F7:7A:AB:11:A8:C0:31:10:71:77:F8:4C
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0E1F
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/vk1VVvf5eIT3eqsRqMAxEHF3-Ew.roa
Signing time:             Wed 29 Sep 2021 02:43:13 +0000
ROA not before:           Wed 29 Sep 2021 02:43:13 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     4780
IP address blocks:        218.210.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3615 (0xe1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:13 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=BE4D5556F7F97884F77AAB11A8C031107177F84C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:62:d1:f3:d3:9e:88:d6:eb:01:17:d2:9d:eb:
                    2f:a1:aa:2b:0a:7b:c4:cf:96:76:77:0b:f0:bc:03:
                    35:4a:91:80:26:b9:56:12:f5:a4:e2:1c:30:aa:be:
                    5c:0d:3a:e3:05:9d:c3:f7:71:25:54:49:d4:f3:b6:
                    7f:3d:89:b0:26:79:16:26:67:4b:28:2a:ef:da:f1:
                    1e:e0:13:fc:0c:4e:e0:36:86:d9:a6:53:8a:c9:48:
                    c4:55:a7:63:1c:a7:8b:78:fa:3c:c0:02:ab:c2:21:
                    a8:a0:75:c3:57:87:c6:8c:14:83:39:5d:57:78:e9:
                    bb:40:ed:27:f7:a5:29:87:ed:dc:16:06:7d:1d:21:
                    82:5b:ce:03:32:75:8b:6a:07:c8:13:fa:9b:bd:06:
                    0b:c4:fd:76:68:60:31:27:3c:c2:6e:e4:b5:ca:99:
                    51:04:13:40:74:29:b2:aa:2d:95:c8:e8:6a:8c:66:
                    ba:83:b6:96:6b:e0:b4:15:0f:f3:93:43:f8:ea:1f:
                    39:f9:58:1c:f7:c9:c2:04:cc:94:f5:a4:82:37:a5:
                    4f:5c:c4:b4:b8:06:5c:7a:10:10:84:71:4e:97:45:
                    91:98:b4:34:73:34:36:5d:f8:0d:65:37:9d:74:2c:
                    48:4c:a4:5a:8b:e4:8a:bf:02:01:f9:6a:17:77:9c:
                    a7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:4D:55:56:F7:F9:78:84:F7:7A:AB:11:A8:C0:31:10:71:77:F8:4C
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/vk1VVvf5eIT3eqsRqMAxEHF3-Ew.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.210.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b7:d7:7f:6e:05:8e:93:32:a8:d8:c5:7c:8e:bd:98:bd:7c:7c:
         23:1d:ec:7e:84:ee:6c:55:a3:4a:c2:f9:e0:be:6a:e7:13:0d:
         6f:ba:4e:5b:3e:10:6c:97:88:94:f5:7c:0d:9e:34:f6:8c:af:
         21:47:7a:f0:4d:71:10:65:bf:15:6f:8a:22:58:28:68:cc:1d:
         55:77:1f:75:77:24:e5:57:e1:b4:ef:df:1d:97:36:9a:4d:4e:
         56:23:58:fa:0d:1b:85:35:03:d2:5d:c0:95:77:ce:39:a0:4d:
         87:e6:41:1a:65:da:9e:81:07:4f:f4:2f:67:e2:df:d2:82:de:
         0b:0d:70:b6:9b:01:b0:7f:f0:77:50:19:8e:a1:32:2e:fe:e6:
         12:6a:89:55:c7:0a:68:1d:4c:a0:32:a5:88:17:a3:80:1c:6e:
         60:e4:28:80:40:ac:f0:f2:0c:39:8e:4d:43:ab:7b:c8:30:7b:
         f5:6b:e9:35:ad:0c:d3:42:a3:4c:04:62:4a:d6:a1:6d:a8:5c:
         f0:01:39:30:9b:d0:8a:2c:0e:74:72:c8:a3:ce:5b:52:86:d5:
         f4:a7:96:ba:7a:74:ee:ec:9e:d1:5e:28:cc:7d:d0:ae:26:49:
         c9:7c:0d:f9:de:c1:00:72:74:d8:ec:58:bc:c1:d0:ef:68:0e:
         ab:fd:3a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----