Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/HeuEzMx5Tz18Al51J7AfSpXhrvA.roa
File:                     HeuEzMx5Tz18Al51J7AfSpXhrvA.roa (raw, json)
Hash identifier:          oeikzkjSpad/QAotvhcjHEbWBVH2Cjrj1w+8y/sK19U=
Subject key identifier:   1D:EB:84:CC:CC:79:4F:3D:7C:02:5E:75:27:B0:1F:4A:95:E1:AE:F0
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       08CA
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/HeuEzMx5Tz18Al51J7AfSpXhrvA.roa
Signing time:             Wed 18 Nov 2020 07:49:10 +0000
ROA not before:           Wed 18 Nov 2020 07:49:10 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17809
IP address blocks:        203.222.0.0/19 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2250 (0x8ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Nov 18 07:49:10 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=1DEB84CCCC794F3D7C025E7527B01F4A95E1AEF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:40:ae:b9:ab:18:ce:2d:8f:3a:b5:2a:0f:8f:
                    c6:e7:bb:79:99:ac:6f:e8:61:02:e8:95:7d:41:be:
                    ad:65:73:80:b6:3d:23:96:a4:a1:80:b2:7d:d5:71:
                    f0:6f:0e:84:57:58:19:d6:12:75:aa:06:75:26:60:
                    f6:f9:03:9e:a9:69:91:ca:72:a6:e2:bc:40:0b:21:
                    48:6e:90:49:09:3e:a1:05:70:0f:7e:93:14:4f:fc:
                    5e:ea:9a:31:a5:56:4f:47:e4:45:26:e3:3e:db:42:
                    19:f6:63:33:c7:5b:44:3d:53:33:29:98:fe:b0:02:
                    d6:44:05:3d:d7:6c:a7:a4:27:bd:d5:ba:97:fe:f5:
                    9a:47:73:a1:89:81:e2:b7:28:5c:1a:08:45:71:57:
                    6b:3e:65:0d:ca:5f:ba:4b:a0:e5:03:67:de:e2:a2:
                    5e:54:94:a6:87:bb:fb:5b:8e:eb:19:03:de:1d:3b:
                    c2:71:96:02:a7:9f:16:d1:c7:33:eb:a9:70:09:1b:
                    ed:a0:e3:f5:18:f1:1e:3a:7e:9b:95:a3:ac:66:90:
                    7a:3a:d0:ed:b1:23:be:3c:2b:bc:8a:c5:a7:65:cf:
                    42:37:f7:7b:e4:5c:f8:87:d7:18:8d:16:b2:7d:21:
                    53:c9:d1:6b:83:2e:aa:12:9a:fb:12:b6:78:f8:2e:
                    12:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:EB:84:CC:CC:79:4F:3D:7C:02:5E:75:27:B0:1F:4A:95:E1:AE:F0
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/HeuEzMx5Tz18Al51J7AfSpXhrvA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.222.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b3:d1:40:1c:d4:d8:80:99:a3:e7:fa:0b:8c:d1:e0:fd:ab:4b:
         46:2b:c5:61:e0:fe:1c:87:c5:14:09:28:19:ac:08:74:3d:5e:
         5d:5a:d3:47:36:4a:52:bf:96:1f:f5:07:7e:5c:ba:51:40:a0:
         61:75:67:fe:a5:3b:8c:9a:5c:d8:eb:b4:2b:57:eb:7d:31:59:
         f9:64:f0:05:f9:2b:90:bb:85:1f:8d:40:ed:df:ee:ee:17:37:
         82:7b:f5:77:3b:14:9c:7f:ca:c3:77:e3:83:52:40:d0:c6:9f:
         35:81:3a:93:e0:7b:db:97:84:2e:65:7a:ef:7f:b1:bd:4b:8f:
         a7:a9:7e:01:4a:75:c9:01:a0:36:0f:a7:20:5e:07:ed:5f:a1:
         04:ac:cb:40:32:4b:37:14:07:eb:76:9b:9d:de:06:77:72:18:
         f8:15:59:8a:0a:b6:7b:89:fa:74:08:1e:e5:7e:81:78:2c:c3:
         e3:a8:b7:05:5f:2e:fe:6c:28:22:08:1e:f4:24:cb:ad:6d:6b:
         fd:14:ce:20:7a:cd:17:1d:94:ed:93:1b:13:aa:8e:92:22:99:
         5f:87:f8:10:2c:66:9c:91:0c:ff:d3:3b:8a:6b:1c:b7:ae:2e:
         ba:58:f0:84:f0:75:bf:76:c7:a0:88:83:38:9e:d1:d3:df:67:
         45:7b:84:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----