Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/h6_N0BRmwTW87tKCkXLPNOCBamQ.roa
File:                     h6_N0BRmwTW87tKCkXLPNOCBamQ.roa (raw, json)
Hash identifier:          +b/RR5itj2b+LTeH5ykNmXKikHGByd/UYI70xxTjafM=
Subject key identifier:   87:AF:CD:D0:14:66:C1:35:BC:EE:D2:82:91:72:CF:34:E0:81:6A:64
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       091A
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/h6_N0BRmwTW87tKCkXLPNOCBamQ.roa
Signing time:             Tue 24 Nov 2020 03:27:49 +0000
ROA not before:           Tue 24 Nov 2020 03:27:49 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38851
IP address blocks:        119.15.216.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2330 (0x91a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Nov 24 03:27:49 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=87AFCDD01466C135BCEED2829172CF34E0816A64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:bd:47:3b:85:d7:11:a7:3c:2c:0a:65:8e:be:
                    a8:e7:35:26:e4:5e:43:45:f4:03:61:4b:7b:c5:67:
                    8f:7e:a6:46:72:17:00:4c:8f:b5:1b:09:6f:cd:ef:
                    8f:7d:7c:04:c3:4e:89:2d:81:83:79:a1:01:9a:10:
                    dd:ec:72:b4:c9:b8:a7:03:a7:63:ec:64:1b:5b:b1:
                    92:65:4b:70:6c:d9:44:5f:83:83:51:5a:2d:c2:55:
                    e9:a2:2b:5d:4d:7a:1a:50:28:e5:14:db:eb:4c:81:
                    8f:da:5c:ef:ea:d0:39:0c:b3:d5:d4:8d:bd:51:59:
                    cb:65:a0:e6:3b:5d:4c:db:55:ec:13:07:bc:3b:6e:
                    11:01:a8:8d:58:e4:4a:cc:61:89:b0:a9:65:8b:46:
                    4a:9e:3c:79:39:b1:47:69:0a:c5:62:87:5b:e5:17:
                    d8:95:e3:cb:1b:06:67:b4:46:fe:79:65:0d:ec:bf:
                    ac:8f:de:8b:78:48:07:33:5c:44:6b:d2:67:a4:23:
                    a2:48:74:94:28:d9:11:2e:95:7f:4f:bd:52:22:99:
                    65:77:ad:a9:2d:2f:ee:a5:22:c7:82:40:b8:c2:ef:
                    1f:29:2f:f0:2f:66:09:8d:64:b9:6f:4b:63:19:7a:
                    35:39:e9:cb:00:3d:08:36:59:66:7a:99:c9:4b:66:
                    14:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AF:CD:D0:14:66:C1:35:BC:EE:D2:82:91:72:CF:34:E0:81:6A:64
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/h6_N0BRmwTW87tKCkXLPNOCBamQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.15.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a3:71:a2:ab:a9:08:46:c0:85:a7:6d:16:10:25:f1:9b:21:29:
         f7:f5:ac:76:1e:32:64:5e:ea:1a:52:98:d0:dc:0f:05:64:12:
         ca:4b:77:ea:a6:4b:b0:31:13:bd:1d:1a:8d:e2:9a:cf:cb:2b:
         59:c6:9a:36:d1:ec:f5:d4:6d:bd:ea:61:b1:35:60:10:32:d7:
         82:05:05:ad:9c:ee:c2:7d:f0:0a:f2:30:03:96:aa:f6:61:9a:
         5b:b6:4a:27:39:8a:9c:b8:4e:25:0e:7f:9a:a8:2e:06:78:76:
         47:73:90:08:91:8f:94:68:8b:9a:f7:e9:12:5a:44:af:19:c2:
         e0:41:a5:70:ab:f8:40:9f:87:6f:99:cc:ea:14:11:a6:da:62:
         dc:58:ae:17:a0:2a:10:c2:45:1d:ff:c2:54:84:9e:0e:7c:eb:
         c5:12:fd:2f:1f:b4:56:d4:97:5e:bd:f5:16:df:a9:b3:59:45:
         04:bd:a9:a8:25:16:0e:f6:96:1b:a1:57:cb:e5:8a:6e:d3:5a:
         05:48:01:f9:00:b1:d7:5f:20:6f:ce:5c:99:9a:e2:e2:87:52:
         06:32:90:41:29:9d:d6:08:3a:36:b5:a4:73:bf:e8:2e:4e:c7:
         21:e4:62:d7:ac:ad:c8:2a:46:f7:b1:74:6f:8e:20:85:ee:b3:
         0e:c9:58:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----