Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/wgROAV2C-nOJJ28zYsMXts3VPyA.roa
File:                     wgROAV2C-nOJJ28zYsMXts3VPyA.roa (raw, json)
Hash identifier:          kvcT7Y0eUb7p0lzyqYpEM2pjDXJsatNqKZ3d7DiIFwE=
Subject key identifier:   C2:04:4E:01:5D:82:FA:73:89:27:6F:33:62:C3:17:B6:CD:D5:3F:20
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0EC1
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/wgROAV2C-nOJJ28zYsMXts3VPyA.roa
Signing time:             Wed 29 Sep 2021 02:43:56 +0000
ROA not before:           Wed 29 Sep 2021 02:43:56 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9919
IP address blocks:        113.196.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3777 (0xec1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:56 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=C2044E015D82FA7389276F3362C317B6CDD53F20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8f:a0:0f:02:fd:38:44:bb:28:98:b9:48:40:
                    92:af:0b:9c:e0:20:e9:e0:75:07:f3:57:17:3e:45:
                    d1:d1:6e:95:1e:2c:38:58:b4:43:4f:e8:ed:bb:77:
                    63:73:58:84:10:6a:dd:f0:80:51:4a:bd:dd:d7:c7:
                    4e:20:81:ad:66:cc:3c:43:3b:08:5d:08:b5:8b:77:
                    f0:4d:27:10:a1:40:6c:49:18:d3:d0:b3:e8:19:fc:
                    19:c8:c5:98:c4:f9:a1:15:35:4e:6b:dc:84:fa:56:
                    76:bb:77:b9:97:35:f7:cb:f0:29:3a:5d:d9:30:a1:
                    4a:ca:4b:51:c7:73:77:37:ef:69:15:52:24:40:81:
                    ac:f9:2b:67:51:e7:b4:30:db:2b:03:f6:d4:4b:9a:
                    66:3a:06:cd:03:72:53:22:e0:2e:c3:a1:07:4b:0a:
                    9c:7b:93:dc:00:fd:68:b8:ad:a2:24:6a:eb:1e:c0:
                    e4:09:91:6e:14:39:00:f2:f1:ae:d9:46:d3:bc:57:
                    25:5b:bb:95:84:5c:3b:4d:18:b1:a0:22:a7:bd:e6:
                    f6:8c:5a:1b:a0:a0:0d:65:04:c0:4c:e1:6a:c8:b6:
                    70:04:64:e4:ea:13:97:f2:ec:ee:ee:dd:6f:77:2a:
                    9b:de:c7:e3:af:bc:9c:7f:5b:84:d2:9b:56:84:af:
                    57:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:04:4E:01:5D:82:FA:73:89:27:6F:33:62:C3:17:B6:CD:D5:3F:20
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/wgROAV2C-nOJJ28zYsMXts3VPyA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.196.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         35:f0:a1:b7:89:15:81:e8:df:d7:70:97:9c:ac:b8:ba:d1:0c:
         c5:44:74:cf:7c:32:f1:77:77:c5:10:94:61:76:7f:62:29:ce:
         42:31:10:bb:b8:61:df:d8:07:d6:68:da:8f:35:7c:83:fa:a5:
         c2:16:19:2e:48:6f:a1:c1:97:84:49:4e:76:ce:d3:f6:b2:06:
         53:22:5a:ab:6a:a7:f3:8d:1c:81:07:b0:57:26:0d:f7:b8:3d:
         ae:02:c6:c1:78:eb:51:c6:8a:c2:a3:18:e4:96:67:52:27:09:
         60:08:b0:40:8f:2c:41:03:08:e2:54:97:db:48:42:63:76:56:
         76:54:31:02:04:65:9f:a7:1b:de:d0:8e:0a:2f:e1:e9:93:eb:
         24:e2:19:86:68:5f:c1:cd:60:c2:c3:2c:74:00:99:b0:f5:92:
         6c:91:8c:2c:a7:63:8f:bd:58:67:7b:fb:41:a1:f5:63:77:12:
         b6:ad:29:98:03:9c:36:0f:0c:61:f1:15:6f:0f:af:c6:c7:e3:
         02:48:e5:61:18:75:48:18:c0:13:f5:e7:7d:53:06:7d:2b:8e:
         ff:1b:9d:d1:3c:88:73:32:26:87:52:cc:ce:71:91:8d:20:eb:
         cf:9a:3c:ad:0d:a7:00:3a:9a:fc:5f:cb:92:4f:9a:79:6b:32:
         24:04:56:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----