Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/9A6Zw3sGrdTYt-NUdAU_1HPWWcU.roa
File:                     9A6Zw3sGrdTYt-NUdAU_1HPWWcU.roa (raw, json)
Hash identifier:          Ui9QkMkUfafq7IudI7fOAv8VM9Gcaur1mNKzemyhX28=
Subject key identifier:   F4:0E:99:C3:7B:06:AD:D4:D8:B7:E3:54:74:05:3F:D4:73:D6:59:C5
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       0B47
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/9A6Zw3sGrdTYt-NUdAU_1HPWWcU.roa
Signing time:             Fri 24 Dec 2021 11:44:16 +0000
ROA not before:           Fri 24 Dec 2021 11:44:16 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     17809
IP address blocks:        182.155.0.0/16 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2887 (0xb47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Dec 24 11:44:16 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=F40E99C37B06ADD4D8B7E35474053FD473D659C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:93:c1:d3:15:b9:c7:9d:92:53:3d:c9:cd:1f:
                    aa:85:e4:b3:6d:d3:8b:e6:81:48:e1:80:fa:4d:34:
                    d9:95:38:bf:92:c7:f7:88:5b:17:81:ed:aa:7e:56:
                    50:54:15:b0:63:ca:b2:76:ce:00:92:b9:b1:ac:9c:
                    21:70:a3:05:7b:2e:2b:e0:fb:42:64:e7:0e:b4:65:
                    f5:27:bc:00:98:df:80:ef:d2:2b:77:1d:f4:34:cc:
                    25:d8:54:84:ea:7e:c0:a9:fc:0f:ce:cc:35:f8:f0:
                    fc:e8:fc:65:06:ca:3d:4d:39:e1:66:55:2a:a5:5c:
                    b8:e2:93:d7:bc:3f:22:48:cd:a5:31:d1:b0:dc:3c:
                    94:2a:74:3f:3d:f7:d7:9f:5b:b4:8c:1b:d2:f4:8d:
                    de:43:7e:0b:22:80:1d:be:10:74:06:01:a6:e2:48:
                    46:cd:0a:6c:3b:14:20:a5:5e:f3:f8:ad:af:d8:07:
                    56:97:73:0e:ef:2f:be:bb:1e:76:d3:7e:93:7d:91:
                    e1:62:b0:03:22:4a:6c:cb:c0:80:f6:ae:dd:85:29:
                    bf:f5:80:de:38:8c:a1:50:ae:38:55:3e:53:fe:9c:
                    f0:b2:5b:d4:b2:43:df:ab:94:e6:44:1d:8d:77:4b:
                    75:0b:ad:af:95:8e:bd:14:4e:7b:4e:37:e8:17:3c:
                    67:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:0E:99:C3:7B:06:AD:D4:D8:B7:E3:54:74:05:3F:D4:73:D6:59:C5
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/9A6Zw3sGrdTYt-NUdAU_1HPWWcU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.155.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         74:53:ce:56:83:ba:f2:74:68:cc:ab:2a:1e:1c:5e:06:e3:f3:
         ce:98:c9:ba:1a:29:35:01:9a:f4:1c:01:bb:44:53:94:ae:9f:
         0c:88:24:e9:5a:6d:11:73:5f:ed:aa:f0:88:97:97:ad:3c:34:
         5d:fd:6c:7b:dd:2f:98:87:28:29:e2:32:3d:2f:0c:a6:f3:0a:
         57:f0:0d:21:20:87:f3:7c:09:36:9f:ed:fe:9a:51:17:a5:31:
         6c:b2:52:a2:30:70:19:d2:7d:e4:8a:97:9b:b3:79:a8:5c:ed:
         c6:f4:8b:7e:96:36:77:21:5d:1d:fe:2b:3d:c8:6b:96:26:24:
         7b:22:3d:d7:d1:87:36:81:5a:4c:e7:4e:ac:5d:24:07:d6:c6:
         7f:c7:f6:af:09:65:22:4e:40:6f:b5:e1:9a:f5:2c:26:8a:4d:
         53:78:7d:03:b7:dc:82:cb:46:3b:af:53:d9:fc:7c:92:46:ef:
         b6:c1:af:bf:5d:e3:a9:55:72:75:b5:cb:27:10:a2:a5:d0:d8:
         cf:8d:31:aa:f9:39:06:17:0f:a5:64:81:31:27:be:b2:45:97:
         4f:e2:3a:64:1c:75:06:9d:6e:a1:10:a1:7a:b9:c3:74:09:91:
         9b:69:8b:38:f7:7c:45:ad:c6:da:7c:2d:4e:b7:d7:e3:97:bb:
         0b:fc:7e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----