Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/x93lqKO5u8iRPpM87mbxaH1vszA.roa
File:                     x93lqKO5u8iRPpM87mbxaH1vszA.roa (raw, json)
Hash identifier:          61K3b5eofkl/oCIATPSssX9UmCBRRtyscvKnKrWSelU=
Subject key identifier:   C7:DD:E5:A8:A3:B9:BB:C8:91:3E:93:3C:EE:66:F1:68:7D:6F:B3:30
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       0B34
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/x93lqKO5u8iRPpM87mbxaH1vszA.roa
Signing time:             Thu 16 Dec 2021 06:54:54 +0000
ROA not before:           Thu 16 Dec 2021 06:54:54 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     17809
IP address blocks:        210.209.128.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2868 (0xb34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Dec 16 06:54:54 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=C7DDE5A8A3B9BBC8913E933CEE66F1687D6FB330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cb:f4:5f:3f:c2:8d:fe:71:20:d7:89:0d:5a:
                    c7:5a:61:c5:03:2a:7c:7e:49:52:6b:fe:05:11:38:
                    c7:08:0e:22:4b:af:d5:ca:d9:78:5a:22:0f:f7:07:
                    e1:df:d0:30:bd:6b:1e:df:84:77:93:37:89:d7:59:
                    75:6e:fd:b1:28:c5:23:fe:d5:99:6e:06:6c:3b:cf:
                    02:01:70:e9:49:30:41:f5:4e:d1:68:9b:0e:5a:67:
                    5e:08:55:b2:92:47:c7:6f:fd:a1:b0:36:75:52:87:
                    4c:c0:75:c6:d0:14:1f:f8:5e:a1:47:df:79:b3:13:
                    f7:1a:67:aa:b0:1b:9f:28:32:94:df:b6:8c:c6:9e:
                    3a:f2:87:fb:88:56:39:ff:01:d6:37:1a:e2:05:cd:
                    70:f3:44:67:3b:98:78:bb:7d:c1:11:dc:8a:7f:35:
                    aa:0a:1b:b0:52:82:09:86:e3:61:37:ff:1a:13:69:
                    a5:c5:4b:3f:9f:1c:9f:b9:ec:a5:75:5b:ee:df:7a:
                    68:95:9c:04:e0:89:9f:63:0f:b1:19:52:ec:9b:8b:
                    11:4b:a9:37:11:05:e0:c1:5c:89:dc:56:3e:af:9a:
                    b9:20:32:40:a9:ca:49:de:67:9b:c9:a2:46:92:95:
                    50:c5:09:f9:48:7b:c5:5d:d7:71:af:92:ca:92:ef:
                    ff:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:DD:E5:A8:A3:B9:BB:C8:91:3E:93:3C:EE:66:F1:68:7D:6F:B3:30
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/x93lqKO5u8iRPpM87mbxaH1vszA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.209.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1e:ad:21:be:db:fd:45:3c:22:e9:aa:de:77:36:18:7a:05:86:
         4f:45:98:b0:58:65:f6:e8:3a:0f:08:8d:9f:6e:7d:f3:1b:a1:
         0b:00:b1:f8:ce:20:05:0f:b8:33:5e:67:12:35:9c:78:9e:33:
         95:0d:b6:3f:3f:f6:5a:f2:d6:1a:34:6e:2e:77:07:45:ff:cb:
         61:10:cc:dc:94:a5:1b:14:d6:d1:b2:4b:7f:29:6e:d8:fc:de:
         d8:92:08:07:59:7e:d0:3e:33:a2:86:2a:e6:d1:c5:5d:56:87:
         36:21:f0:27:8f:01:90:dc:67:93:fa:4d:28:a4:1b:2f:1f:fb:
         a9:2c:38:31:48:cb:18:f3:c8:a5:7a:60:3f:d1:07:33:7c:a0:
         6a:a5:92:25:58:70:bb:8b:02:c1:09:81:16:ee:9c:47:ac:c0:
         96:47:a5:cc:44:57:03:6a:5c:71:07:97:ff:9d:4c:8d:19:24:
         37:d2:69:02:a3:41:a4:96:1d:35:79:02:37:fc:e0:b2:42:f8:
         0f:c4:6b:a5:49:b9:6a:a8:36:62:8a:dc:66:4b:ef:1f:95:0f:
         dd:0a:96:80:46:ce:f3:1c:7c:b9:3c:74:b6:9d:94:b0:8f:d4:
         29:95:10:08:0b:ab:19:e2:c1:2b:1c:bf:63:e5:1a:6b:2c:de:
         d7:fc:28:de
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCzQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMTEyMTYw
NjU0NTRaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEM3RERFNUE4QTNCOUJC
Qzg5MTNFOTMzQ0VFNjZGMTY4N0Q2RkIzMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDy/RfP8KN/nEg14kNWsdaYcUDKnx+SVJr/gUROMcIDiJLr9XK
2XhaIg/3B+Hf0DC9ax7fhHeTN4nXWXVu/bEoxSP+1ZluBmw7zwIBcOlJMEH1TtFo
mw5aZ14IVbKSR8dv/aGwNnVSh0zAdcbQFB/4XqFH33mzE/caZ6qwG58oMpTftozG
njryh/uIVjn/AdY3GuIFzXDzRGc7mHi7fcER3Ip/NaoKG7BSggmG42E3/xoTaaXF
Sz+fHJ+57KV1W+7femiVnATgiZ9jD7EZUuybixFLqTcRBeDBXIncVj6vmrkgMkCp
ykneZ5vJokaSlVDFCflIe8Vd13GvksqS7/8dAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUx93lqKO5u8iRPpM87mbxaH1vszAwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgveDkzbHFLTzV1OGlSUHBNODdtYnhh
SDF2c3pBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBdLRgDAN
BgkqhkiG9w0BAQsFAAOCAQEAHq0hvtv9RTwi6aredzYYegWGT0WYsFhl9ug6DwiN
n2598xuhCwCx+M4gBQ+4M15nEjWceJ4zlQ22Pz/2WvLWGjRuLncHRf/LYRDM3JSl
GxTW0bJLfylu2Pze2JIIB1l+0D4zooYq5tHFXVaHNiHwJ48BkNxnk/pNKKQbLx/7
qSw4MUjLGPPIpXpgP9EHM3ygaqWSJVhwu4sCwQmBFu6cR6zAlkelzERXA2pccQeX
/51MjRkkN9JpAqNBpJYdNXkCN/zgskL4D8RrpUm5aqg2YorcZkvvH5UP3QqWgEbO
8xx8uTx0tp2UsI/UKZUQCAurGeLBKxy/Y+Uaayze1/wo3g==
-----END CERTIFICATE-----