Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/xMqF-GDXvwbXy3dQQ6VjjRxF_sw.roa
File:                     xMqF-GDXvwbXy3dQQ6VjjRxF_sw.roa (raw, json)
Hash identifier:          hZwGIzLUzvDAsehlXuAeXvrVXxDqcK+XQQPWJyBZmaU=
Subject key identifier:   C4:CA:85:F8:60:D7:BF:06:D7:CB:77:50:43:A5:63:8D:1C:45:FE:CC
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0E87
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/xMqF-GDXvwbXy3dQQ6VjjRxF_sw.roa
Signing time:             Wed 29 Sep 2021 02:43:42 +0000
ROA not before:           Wed 29 Sep 2021 02:43:42 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     4780
IP address blocks:        112.105.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3719 (0xe87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:42 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=C4CA85F860D7BF06D7CB775043A5638D1C45FECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1a:76:ae:91:59:3f:ef:3c:0d:84:00:31:f5:
                    c2:fa:55:8b:cd:b9:27:24:6e:86:9c:b3:ad:f7:d0:
                    44:1e:cd:a9:51:8a:47:90:4e:6d:18:2b:a0:4e:19:
                    73:17:83:73:b6:11:82:e7:98:5a:d3:3f:13:dd:89:
                    da:b1:68:0b:74:1f:06:33:56:21:22:58:99:f7:dd:
                    1d:f7:c8:62:ed:77:df:1f:d4:93:6d:dd:62:37:fc:
                    29:3c:22:ef:95:a6:6a:25:84:11:13:eb:0f:6d:9e:
                    8d:17:b6:7a:f3:66:92:db:b4:0d:62:d0:92:ca:2a:
                    23:65:fa:2d:c6:76:a4:f3:1d:b2:4f:99:c6:9e:6b:
                    f1:b7:63:57:c8:c6:fa:47:89:5d:45:7b:a9:1d:12:
                    78:10:b3:ad:0e:ef:83:77:48:71:bb:fd:3f:42:c8:
                    fa:b5:34:12:be:bb:bc:8f:33:39:ab:5e:a0:f5:e1:
                    f1:b0:00:0c:79:60:09:b8:a4:bf:0e:d8:a0:21:38:
                    d9:59:7e:6f:09:a6:a5:9d:41:43:6d:d0:9a:9c:0b:
                    3f:79:8e:71:24:06:b1:45:bb:7f:c3:15:bc:5e:c9:
                    3f:bc:7f:fe:a0:5f:a4:6f:21:0b:36:03:e6:a2:0e:
                    02:be:f8:e7:2b:c5:fb:10:af:1b:35:fb:47:6d:ed:
                    10:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CA:85:F8:60:D7:BF:06:D7:CB:77:50:43:A5:63:8D:1C:45:FE:CC
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/xMqF-GDXvwbXy3dQQ6VjjRxF_sw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.105.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         21:bf:c5:e8:44:3d:db:a6:6c:ae:5b:c4:7f:48:0e:42:d6:94:
         c2:8d:6f:5b:63:9f:23:dc:3f:fb:df:e8:9c:9c:56:e8:30:1b:
         ee:2e:20:87:56:a4:12:14:92:00:f3:fa:2e:78:90:80:22:e9:
         10:e7:d7:9e:78:e0:a7:04:ab:42:dd:f5:a3:d0:8a:70:ed:86:
         95:4f:bc:eb:ee:3a:7c:61:a2:ee:3f:f7:7f:99:e3:ea:82:9e:
         76:19:59:34:33:43:93:b3:ae:b8:79:d8:b8:06:a5:90:3e:a8:
         69:a7:da:03:3a:17:ec:9b:b2:21:8b:40:74:32:37:18:f6:9d:
         84:58:91:73:4b:9e:2d:18:b5:12:ba:ca:e1:85:9c:1d:65:b1:
         a8:01:fe:5d:56:76:6a:2d:23:a1:10:ae:36:8d:7f:5a:79:96:
         98:c2:c8:55:f8:e7:87:9e:05:fd:52:71:28:85:e1:27:60:2e:
         17:d8:e2:86:4d:7f:56:54:9e:46:7b:0a:53:a7:21:8a:45:ae:
         55:c6:82:4b:3e:8d:ec:95:2e:ea:63:0b:77:30:42:1b:3d:1a:
         34:76:d5:5c:93:d9:42:00:8b:5b:42:bb:da:07:f6:76:6d:1b:
         e8:52:45:49:69:b8:bd:eb:39:0e:9a:09:99:c5:0f:b1:3b:2b:
         9b:80:be:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----