Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/pwAX9_HcvqTzy1-jKZGRAKNpe8M.roa
File:                     pwAX9_HcvqTzy1-jKZGRAKNpe8M.roa (raw, json)
Hash identifier:          lb1SCjfL9shozQ+MxZnQCdrX1o6G5Z3EGnbpae0wZD8=
Subject key identifier:   A7:00:17:F7:F1:DC:BE:A4:F3:CB:5F:A3:29:91:91:00:A3:69:7B:C3
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       09AB
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/pwAX9_HcvqTzy1-jKZGRAKNpe8M.roa
Signing time:             Sun 07 Feb 2021 13:15:38 +0000
ROA not before:           Sun 07 Feb 2021 13:15:38 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17809
IP address blocks:        211.79.112.0/20 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2475 (0x9ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Feb  7 13:15:38 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A70017F7F1DCBEA4F3CB5FA329919100A3697BC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c6:17:12:cb:56:79:19:4b:3b:6d:22:63:f3:
                    52:97:75:ed:69:b0:df:3d:d9:6f:41:2e:83:31:d6:
                    72:a7:29:dc:61:ad:d2:66:89:de:83:a0:67:9f:86:
                    f9:8b:d2:52:6e:53:b8:5b:b5:43:63:8c:2a:82:03:
                    e6:d8:a2:86:b7:1c:fc:d3:2d:6a:2e:88:2f:a1:a4:
                    52:a5:27:8a:d1:aa:e4:0b:39:ab:6e:99:42:bd:97:
                    1c:61:63:71:d9:37:dd:03:63:c5:06:6b:ad:39:6c:
                    3c:0b:14:21:e4:55:5a:b9:c8:95:de:b2:ab:dd:75:
                    41:87:78:73:6c:3b:77:97:ba:2f:22:0a:9d:ee:1d:
                    dc:63:2b:a1:4d:a0:ab:62:29:c0:29:e1:72:cb:e3:
                    92:b6:61:85:cc:ad:fc:83:b9:1a:3b:f4:8e:94:22:
                    97:b8:03:ee:bc:f4:9a:44:66:33:74:3f:2f:c4:9b:
                    fa:f0:7a:c0:ff:96:0d:e3:68:72:df:80:f9:ef:0f:
                    dc:55:8c:7d:08:c3:23:ce:e2:e7:26:06:31:1a:83:
                    22:a7:25:8a:1c:84:f8:6b:42:0d:41:50:c3:99:df:
                    c2:a2:5f:08:3a:8c:d6:11:3d:b1:42:69:64:e3:66:
                    01:cb:07:c4:db:4b:1b:f6:f8:d8:47:82:6f:cf:66:
                    f4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:00:17:F7:F1:DC:BE:A4:F3:CB:5F:A3:29:91:91:00:A3:69:7B:C3
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/pwAX9_HcvqTzy1-jKZGRAKNpe8M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.79.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0f:21:3d:42:5c:b6:30:6d:da:6d:3d:ad:f3:27:40:20:44:43:
         ca:d5:6d:9d:01:a2:37:48:1a:25:73:26:c8:dd:16:af:99:f4:
         54:64:5e:7f:bf:95:dc:da:d2:80:57:ce:9f:7d:f7:c4:5c:3c:
         94:13:2f:99:b9:d3:90:88:47:95:91:f5:69:47:66:49:51:4a:
         86:dc:94:ce:b4:8b:53:73:a5:bc:a2:7c:f5:49:d0:87:06:6d:
         ad:01:93:8a:88:1b:f3:eb:20:1e:1f:93:e2:56:e4:d4:23:e8:
         81:7b:bd:cb:68:7b:85:b1:66:07:63:a7:98:a4:3e:af:cd:d0:
         2a:4f:c2:e3:33:4e:2e:8d:1e:7f:75:2f:a0:34:79:0a:74:f1:
         0c:60:bd:4e:e7:de:41:f8:c8:79:9d:98:5a:1c:40:32:69:5d:
         2e:48:62:df:e1:07:0b:59:bb:b6:be:84:52:ff:34:4a:2a:5f:
         69:1a:fd:07:cf:34:dc:6a:fb:99:c7:3c:a2:fa:99:2f:af:2f:
         24:df:57:cf:45:32:bc:c4:5e:00:67:2c:40:4d:05:99:7a:39:
         80:ca:88:b8:e9:21:c6:e6:eb:33:0a:02:6c:0b:37:1d:10:c0:
         e2:83:a6:9e:fc:1b:10:d6:77:1e:8d:ad:59:60:b4:f7:46:bd:
         ea:5d:06:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----