Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/x9s65ECqS1V61e_4MmMFN0hOqSw.roa
File:                     x9s65ECqS1V61e_4MmMFN0hOqSw.roa (raw, json)
Hash identifier:          sUBCEfGx3JXASvS5KQT5z76z92BfskOuQ6I54bEQLpE=
Subject key identifier:   C7:DB:3A:E4:40:AA:4B:55:7A:D5:EF:F8:32:63:05:37:48:4E:A9:2C
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0C2B
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/x9s65ECqS1V61e_4MmMFN0hOqSw.roa
Signing time:             Sun 07 Feb 2021 07:06:11 +0000
ROA not before:           Sun 07 Feb 2021 07:06:11 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18049
IP address blocks:        106.105.224.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3115 (0xc2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Feb  7 07:06:11 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C7DB3AE440AA4B557AD5EFF832630537484EA92C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c0:ee:f6:47:d6:70:2b:9d:1d:2d:c8:50:db:
                    44:14:ce:9c:f8:1b:46:8e:47:4b:c5:34:15:3e:7c:
                    9c:c5:4c:ac:c6:3d:ac:83:61:fa:60:f5:46:83:10:
                    42:3c:38:96:54:26:ee:a2:f1:01:6e:11:db:86:ef:
                    e6:27:9b:30:00:05:69:fc:1e:5b:3c:9f:0e:4c:53:
                    d1:86:b7:ab:85:27:91:4a:cd:ee:3f:39:de:1f:fd:
                    03:8a:2c:25:7b:b2:ee:62:ca:9e:64:90:28:99:19:
                    97:76:09:d1:16:a1:bd:32:ab:82:bc:15:75:c7:36:
                    7d:73:08:dd:52:9f:84:b7:35:bf:97:a0:a4:c1:75:
                    4c:ef:c1:67:c4:39:78:25:b8:53:35:44:94:8a:08:
                    b1:69:19:43:1b:01:e1:c5:df:e6:b3:e1:2b:73:49:
                    37:7b:7e:6d:fc:e5:08:2b:58:45:62:36:bb:71:85:
                    3d:e6:41:98:e2:e6:be:cf:e1:8b:34:40:d9:3f:7c:
                    11:b9:d5:d2:e2:4d:3b:dc:5f:83:82:f8:f5:4e:c4:
                    d8:f1:4e:ca:b8:94:73:30:68:5e:eb:31:f2:31:c3:
                    ed:c8:dd:68:34:71:11:a5:99:27:79:fd:cb:cf:21:
                    a8:8d:1a:d0:23:56:6d:e3:b9:90:6a:72:11:ef:75:
                    45:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:DB:3A:E4:40:AA:4B:55:7A:D5:EF:F8:32:63:05:37:48:4E:A9:2C
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/x9s65ECqS1V61e_4MmMFN0hOqSw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.105.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         96:84:a5:33:f4:e0:f3:1a:2f:e9:68:d9:44:73:fc:1e:65:8e:
         46:bb:90:ce:ba:91:df:e5:67:c5:0d:fe:df:1b:24:83:b2:e9:
         80:f0:67:1b:9f:f1:1b:bc:87:45:80:20:1c:bb:e1:a2:09:09:
         1a:b9:eb:d6:94:e0:2a:f5:e9:9b:f5:0c:0e:47:9e:07:76:73:
         fc:ec:9f:8a:fc:e7:70:71:fa:a0:ac:e2:36:24:5a:31:b4:50:
         2f:c1:a2:7e:74:93:b4:3a:60:63:1c:3d:d9:34:e0:09:17:50:
         33:5e:14:e1:86:68:d4:3d:4d:e9:40:67:5a:3b:7c:e1:61:0f:
         38:55:47:d8:f0:7f:99:15:92:9e:ad:e8:d5:e1:a9:66:9f:19:
         ae:11:72:21:c7:dd:44:3b:5e:f1:3d:37:05:ad:ea:b3:df:28:
         e9:a1:01:e8:41:2a:e3:48:94:77:21:57:ec:c7:e6:2e:f7:42:
         71:7c:12:3b:80:e2:a3:9b:8a:ec:34:01:63:ad:7a:23:43:52:
         29:59:f9:87:d4:40:79:6f:31:77:97:97:91:9f:f2:90:c9:eb:
         74:13:b0:fc:c6:5e:4a:22:ee:c8:0f:bd:b2:04:57:a7:29:f9:
         0d:43:64:7b:33:af:c6:9b:4d:97:9a:05:0e:55:6b:e4:2a:73:
         e7:7f:9b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----