Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/vkwa1LL-GKgVPbgZMibTOhFYLSc.roa
File:                     vkwa1LL-GKgVPbgZMibTOhFYLSc.roa (raw, json)
Hash identifier:          ee6wBv5O7JzjW6NkaKK4xwUBsIDezfsMXmwLEE6OfSI=
Subject key identifier:   BE:4C:1A:D4:B2:FE:18:A8:15:3D:B8:19:32:26:D3:3A:11:58:2D:27
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       095C
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/vkwa1LL-GKgVPbgZMibTOhFYLSc.roa
Signing time:             Thu 21 Jan 2021 10:05:05 +0000
ROA not before:           Thu 21 Jan 2021 10:05:05 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38851
IP address blocks:        119.15.216.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2396 (0x95c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Jan 21 10:05:05 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BE4C1AD4B2FE18A8153DB8193226D33A11582D27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:54:5e:3c:eb:ab:7d:bd:d2:3e:ff:ab:c7:dd:
                    ff:08:a2:e1:d8:c0:c4:47:3c:56:fd:c7:76:85:d5:
                    34:04:1a:26:09:04:cd:69:8b:6b:7b:66:d5:85:7e:
                    48:09:14:44:21:94:b9:a6:f3:0e:93:e3:b1:a8:fd:
                    1f:4d:64:4d:f9:54:e6:0d:3b:d8:9b:97:a6:ef:4f:
                    9d:a1:cd:a6:3e:e2:27:44:1b:21:78:38:cf:b3:34:
                    e2:e1:a8:16:c0:36:85:4d:5e:19:19:7a:4b:1a:ab:
                    e2:0d:6c:22:a5:b3:26:8c:6d:64:9a:23:b2:6d:20:
                    45:8f:2b:15:c9:29:3e:b5:da:38:13:ae:1f:8d:4d:
                    48:04:3c:e0:91:cc:b8:ac:91:54:1b:67:01:80:5c:
                    b2:3b:e9:87:ab:dd:20:f9:c7:9d:97:1f:c3:c4:19:
                    63:5c:87:04:3a:49:00:92:04:91:3b:fd:6d:93:c6:
                    02:1d:50:22:b6:b1:25:1d:85:3c:ad:53:56:90:eb:
                    65:cc:e8:68:aa:0e:d4:98:f3:e4:7d:13:e2:08:e5:
                    21:1d:8d:dc:3e:00:35:57:b1:09:74:56:a4:b1:8d:
                    07:dc:77:61:f0:68:08:3d:93:66:df:8f:73:1f:7d:
                    aa:36:de:2b:f7:d7:33:1b:12:60:82:4b:0d:2d:49:
                    42:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:4C:1A:D4:B2:FE:18:A8:15:3D:B8:19:32:26:D3:3A:11:58:2D:27
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/vkwa1LL-GKgVPbgZMibTOhFYLSc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.15.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         05:c1:1d:0d:55:f1:6b:b0:b7:39:d5:5a:af:3e:15:46:1e:58:
         4f:8e:00:d1:56:df:1f:fa:2a:cc:7a:90:fe:22:02:d8:f4:ce:
         f0:0b:04:c9:ed:c5:16:6e:b5:53:a9:05:2f:7e:9f:8e:89:89:
         98:ec:c0:1a:ed:23:fa:3a:26:75:e2:0b:02:8e:ac:81:28:6e:
         a4:37:c3:05:31:f8:51:b3:d3:24:69:08:6a:46:32:3b:de:f0:
         97:53:0d:db:9c:12:2c:cf:fd:6b:58:1a:24:2e:f7:ef:d5:d6:
         28:57:20:24:3f:96:c8:98:fb:e6:e9:bd:2f:65:18:80:1d:ad:
         86:cf:04:09:30:ec:c6:3e:5f:9e:77:35:19:d5:cf:29:e0:ca:
         5c:ce:62:20:b6:d2:ef:4a:15:f6:74:2f:b9:6e:c9:15:3b:45:
         b1:88:fb:8f:8b:3c:3d:87:93:50:c3:76:98:4d:eb:d0:10:88:
         57:8f:4e:33:1e:31:bd:c8:60:3f:98:30:f7:65:38:b2:83:71:
         e0:31:bf:c3:13:2f:e9:d0:1e:ad:d7:25:d5:e2:32:61:7d:c7:
         ea:88:57:65:c9:ce:fd:12:48:f8:2b:72:7f:28:bf:ac:f4:a1:
         1b:c8:ba:c6:0f:b4:55:95:33:90:ae:94:f8:53:b4:99:c0:59:
         cb:83:a6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----