RAG Safety: Exploring Knowledge Poisoning Attacks to Retrieval-Augmented Generation