Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/w6w4w5Y11HVerPLf-QpdsMNnEhM.roa
File:                     w6w4w5Y11HVerPLf-QpdsMNnEhM.roa (raw, json)
Hash identifier:          F3MeXe+d+a6QcZE3gBRkNi5PtG9tI5fwFRCciZm9y+E=
Subject key identifier:   C3:AC:38:C3:96:35:D4:75:5E:AC:F2:DF:F9:0A:5D:B0:C3:67:12:13
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0875
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/w6w4w5Y11HVerPLf-QpdsMNnEhM.roa
Signing time:             Tue 29 Sep 2020 09:52:03 +0000
ROA not before:           Tue 29 Sep 2020 09:52:03 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9919
IP address blocks:        122.146.96.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2165 (0x875)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:03 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C3AC38C39635D4755EACF2DFF90A5DB0C3671213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:59:f6:e2:6f:6a:c6:06:cd:cd:6a:1d:51:a4:
                    3b:a4:64:26:cc:5d:1f:a4:32:e5:4a:8c:17:8b:fa:
                    9d:8f:92:db:bd:80:ea:46:5b:de:23:e4:86:b6:c9:
                    97:6b:a0:c5:7f:4c:f6:c5:5c:e4:b0:f7:aa:5b:30:
                    d6:fa:b8:52:ae:c4:1d:bc:5a:72:99:f1:1c:53:a4:
                    81:b1:39:b5:e7:fc:cf:55:41:e3:b4:0b:e0:57:19:
                    1b:c8:46:8c:97:e2:21:36:b2:2a:0e:82:b6:86:e5:
                    69:37:a9:31:4b:b9:43:6a:ea:d8:00:8b:e4:b8:5e:
                    39:91:c0:7a:4c:bb:b1:6b:9a:b2:76:0e:93:46:07:
                    41:a2:f8:95:2a:d5:09:47:e9:ac:da:02:ea:69:40:
                    5b:d2:80:7d:b1:eb:2d:f1:41:d4:a4:78:7a:6c:33:
                    18:4b:e8:6a:d1:90:69:9b:b6:6f:d8:85:2e:dc:ed:
                    c4:83:2b:08:f6:0f:c1:d3:9d:58:a7:9c:30:3c:37:
                    ec:dc:75:e5:44:ac:0d:25:df:a1:9a:f7:ee:d3:29:
                    2f:3d:28:34:32:14:90:18:8a:d9:27:e6:93:ed:bd:
                    97:cf:73:6d:a6:4f:8c:f0:10:e3:7b:83:68:24:04:
                    be:e8:a1:f2:69:85:4e:f2:38:d7:3b:40:24:56:d2:
                    61:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AC:38:C3:96:35:D4:75:5E:AC:F2:DF:F9:0A:5D:B0:C3:67:12:13
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/w6w4w5Y11HVerPLf-QpdsMNnEhM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.146.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b0:1f:3b:72:df:95:e2:2d:25:8f:7d:b9:cb:cb:e7:cc:b9:81:
         6a:f2:d5:c9:20:ca:2e:df:5b:3e:5c:e0:1b:d9:5a:83:fc:5f:
         bd:c9:18:10:35:ff:82:d9:0f:84:10:78:41:3f:a5:f4:72:f4:
         7b:43:79:ac:a3:92:27:01:80:28:9b:46:0c:1b:f7:01:5e:69:
         54:83:2e:af:c3:06:80:4c:33:25:5f:fd:48:8e:61:66:84:68:
         10:6d:75:f7:46:e5:f0:0f:91:9e:2f:43:89:e7:fb:21:89:d3:
         92:5b:f8:e1:66:80:01:69:8a:a8:1a:5d:62:1b:1c:10:63:ac:
         93:69:70:ab:f6:85:20:3c:30:8d:ad:cc:58:2e:08:25:cf:57:
         4a:3b:a1:2a:24:e5:e5:78:ee:6c:95:5c:bf:b0:4c:5d:e3:cd:
         50:85:6f:9c:8f:d7:da:57:cc:95:fe:df:1a:ac:ec:20:99:02:
         ad:0a:4b:8a:68:ce:86:48:2a:7f:22:86:30:8d:c2:b0:9b:ac:
         df:9d:ff:4c:46:a5:ad:f0:6e:b9:da:72:18:d6:38:3d:5e:36:
         f1:8d:7e:ee:f0:c6:80:b7:e7:2b:95:97:59:c1:6b:f7:2e:e3:
         60:28:a1:d4:b9:e2:cc:0c:3b:06:4b:7e:28:28:88:75:c9:d8:
         76:3e:97:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----