Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/WPUObFjdhsT6u8xsqfGam4pxBOY.roa
File:                     WPUObFjdhsT6u8xsqfGam4pxBOY.roa (raw, json)
Hash identifier:          +jnEydaPh/vk/QFII21qFDvFu72YR0yJPMsyr4HAv3s=
Subject key identifier:   58:F5:0E:6C:58:DD:86:C4:FA:BB:CC:6C:A9:F1:9A:9B:8A:71:04:E6
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       0997
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/WPUObFjdhsT6u8xsqfGam4pxBOY.roa
Signing time:             Sun 07 Feb 2021 13:15:21 +0000
ROA not before:           Sun 07 Feb 2021 13:15:21 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38851
IP address blocks:        119.15.216.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2455 (0x997)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Feb  7 13:15:21 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=58F50E6C58DD86C4FABBCC6CA9F19A9B8A7104E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:56:09:61:09:62:1b:4b:03:d6:cf:9b:a0:46:
                    d6:ff:7a:e6:64:5b:50:e4:76:98:fd:fd:f9:f3:04:
                    9b:af:2d:f5:10:fe:db:12:c4:b1:df:b1:92:11:b9:
                    3d:e0:f1:e3:84:ad:a6:12:0e:9c:a3:b2:61:86:43:
                    57:9e:fc:23:65:70:e4:73:c2:7c:c2:69:d1:b5:06:
                    c9:3a:54:d8:89:58:96:81:e5:3e:22:69:48:08:8f:
                    ff:89:37:34:6c:2d:58:31:8e:d0:c1:05:35:df:01:
                    e3:bb:f9:d7:54:6d:77:f1:f2:44:77:10:4d:07:80:
                    8b:3d:c0:7e:04:24:08:2f:f0:80:ad:3b:72:e4:80:
                    3c:e1:d6:72:18:8e:5a:50:4f:6b:7d:90:df:66:86:
                    23:7b:e8:2d:22:df:65:d4:a2:81:7d:5d:78:cb:87:
                    c6:03:34:ec:8f:77:fc:c1:fc:fc:af:27:81:2f:eb:
                    3c:78:ad:42:5f:db:ee:05:23:5a:b0:47:5a:d4:9c:
                    77:aa:ad:91:a1:da:4e:7a:d6:15:cf:ab:4a:cc:b5:
                    5a:30:7e:b4:92:7a:c7:0b:64:b3:07:85:b1:84:a8:
                    40:de:67:69:f4:09:42:50:8a:bf:3a:86:a8:1e:55:
                    8b:b6:26:1d:00:1d:60:94:72:4d:c9:07:ad:63:83:
                    7b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F5:0E:6C:58:DD:86:C4:FA:BB:CC:6C:A9:F1:9A:9B:8A:71:04:E6
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/WPUObFjdhsT6u8xsqfGam4pxBOY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.15.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         30:6d:2c:b1:a7:a0:f4:a0:11:38:1f:cb:a6:93:b1:51:55:8b:
         d3:bf:f9:3a:00:ec:ff:6c:95:3f:8f:b1:c2:07:6e:48:54:13:
         33:9d:29:4d:c1:7f:6d:3b:17:c4:e4:ee:ee:46:34:93:a4:50:
         58:20:d7:1c:bf:dc:ae:93:02:ba:bc:8e:bb:68:5f:b9:f4:2f:
         8c:eb:0a:ee:37:70:29:66:93:69:78:4c:b5:b6:b1:4a:6a:ac:
         77:a5:aa:a9:2b:0c:b0:22:f2:4b:33:2b:7d:10:dc:b1:93:1a:
         3c:77:b2:52:2c:f1:3c:c9:56:fe:b8:c5:b6:79:05:9c:a8:3e:
         4a:a7:9e:1c:df:4e:4e:88:90:45:b8:56:1c:87:4b:c8:c4:90:
         27:1e:82:07:49:f0:6b:ef:4e:30:80:7d:22:80:51:3b:c0:f5:
         16:17:9e:2b:7f:33:9d:a3:ea:2e:12:92:b7:4a:d9:bd:be:12:
         2a:2b:d7:c6:a3:da:a4:cb:7a:e9:b7:67:9d:6c:97:5f:d6:0d:
         3c:80:60:38:2f:af:a2:9f:da:8b:f7:5d:1f:f2:f8:57:2e:e2:
         db:ad:64:ba:a7:03:9c:e7:ae:3c:d7:4f:f8:7d:a9:be:5e:1b:
         aa:0b:fb:90:3f:cd:ca:00:f4:8e:b2:06:87:0a:09:61:78:05:
         4e:19:02:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----