Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/3tqCNQKgq_YZzVzhfVJaIZG35r4.roa
File:                     3tqCNQKgq_YZzVzhfVJaIZG35r4.roa (raw, json)
Hash identifier:          kFtMRU+mU6LxkGX2Aa5LNtASoL0rFtjNr2c4TiJiKNw=
Subject key identifier:   DE:DA:82:35:02:A0:AB:F6:19:CD:5C:E1:7D:52:5A:21:91:B7:E6:BE
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       08C8
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/3tqCNQKgq_YZzVzhfVJaIZG35r4.roa
Signing time:             Wed 18 Nov 2020 07:47:33 +0000
ROA not before:           Wed 18 Nov 2020 07:47:33 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17809
IP address blocks:        203.217.96.0/19 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2248 (0x8c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Nov 18 07:47:33 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=DEDA823502A0ABF619CD5CE17D525A2191B7E6BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3f:c3:70:5f:8a:ca:4f:f7:d9:7a:33:a7:e3:
                    65:88:83:98:fc:01:50:76:1f:04:32:9c:8d:b1:11:
                    c2:c6:7c:04:aa:72:72:06:31:72:5b:d9:b8:2d:39:
                    5a:f3:c2:b5:c5:46:3a:f5:b5:d9:50:6b:69:97:49:
                    2f:c5:dc:55:a1:e3:ff:32:f9:2d:0a:12:c6:87:8a:
                    84:98:03:28:e3:36:e0:bd:55:fb:05:a8:da:14:8f:
                    9e:d2:b6:be:3b:9f:7e:1e:87:28:b4:3b:a4:71:15:
                    6a:aa:34:b3:8c:3a:71:4f:b0:38:8f:46:cf:2d:9c:
                    0d:7e:6e:93:d0:b4:be:a5:de:8c:ab:7b:2e:5e:00:
                    9f:eb:b0:1f:6c:b3:b3:fc:2f:1b:90:1b:75:68:cd:
                    5b:60:b6:52:43:20:3d:2b:7a:41:cf:0a:77:78:d3:
                    da:fa:a4:f5:01:21:ab:0e:b0:d8:29:a1:e8:f5:8f:
                    92:01:a0:bd:de:5a:e7:d1:e2:2c:fb:43:44:72:3f:
                    b2:19:81:51:05:c3:dd:ee:d6:2d:11:e2:73:28:26:
                    9a:4c:7b:1c:a5:f8:50:f2:4e:dd:95:ce:52:0d:36:
                    72:26:b0:62:57:78:e9:32:ae:f2:64:fa:73:ec:d6:
                    aa:91:0e:d5:38:13:0d:93:7e:23:29:87:ef:fa:2e:
                    38:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:DA:82:35:02:A0:AB:F6:19:CD:5C:E1:7D:52:5A:21:91:B7:E6:BE
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/3tqCNQKgq_YZzVzhfVJaIZG35r4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.217.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ac:e8:cb:82:8b:cb:85:9a:a3:06:3a:2c:d1:7d:6e:bb:59:7a:
         d2:7a:99:01:0a:ed:4b:f6:b5:02:ab:31:4b:1b:1c:96:93:ad:
         69:ae:f9:57:fb:c7:11:49:d1:5b:95:0e:2f:47:48:54:45:de:
         af:dc:8d:f1:a4:84:8b:53:04:1f:09:33:8a:18:db:f9:1d:10:
         9b:a1:d3:1d:aa:99:0f:42:72:26:18:ca:2a:2a:86:73:f6:3e:
         fc:aa:d5:d6:8b:11:d7:78:a3:64:ba:a2:64:3f:2b:97:d2:37:
         35:61:24:6f:32:9f:27:a4:a6:0c:db:bd:27:b9:18:da:ca:10:
         cc:94:45:53:ad:db:b8:06:a2:59:81:b2:ee:89:20:88:8d:90:
         85:e7:85:ef:c9:66:e1:c9:6a:ed:fe:eb:d9:a7:c5:48:3f:68:
         40:3a:9c:01:42:67:1b:60:e2:e8:c9:6a:88:d4:d7:54:69:e0:
         ff:3e:32:f8:33:50:84:7e:84:12:f0:41:e1:7c:8a:0d:2e:36:
         5e:1a:d9:69:bd:7e:07:5d:ab:f3:cf:bb:cb:ae:53:93:79:94:
         bf:dc:7c:ad:3c:07:e7:1f:7f:60:c4:0a:d4:72:c5:ca:7e:b1:
         ac:5e:75:c1:f8:0d:fc:5d:4d:67:76:b2:00:d6:35:19:c6:88:
         03:ad:15:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----