Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/xdp4hW7sU9_ur1IoD1DUZWWa_bM.roa
File:                     xdp4hW7sU9_ur1IoD1DUZWWa_bM.roa (raw, json)
Hash identifier:          bGXpiTHrQkJc7/DGEQOe6YytfCzLkM/MgOVPJ+LRROA=
Subject key identifier:   C5:DA:78:85:6E:EC:53:DF:EE:AF:52:28:0F:50:D4:65:65:9A:FD:B3
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       0B18
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/xdp4hW7sU9_ur1IoD1DUZWWa_bM.roa
Signing time:             Thu 16 Dec 2021 06:45:39 +0000
ROA not before:           Thu 16 Dec 2021 06:45:39 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     17809
IP address blocks:        203.217.104.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2840 (0xb18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Dec 16 06:45:39 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=C5DA78856EEC53DFEEAF52280F50D465659AFDB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1c:cc:66:23:f8:d3:a2:0d:f4:62:19:41:42:
                    c2:ab:fe:6e:c9:df:fa:b9:4f:26:5a:94:58:f1:06:
                    ea:75:89:7d:97:b4:bf:5f:92:51:29:22:71:4c:0c:
                    81:30:9d:62:ad:eb:ca:d2:bf:d2:c8:21:0b:c3:59:
                    34:9b:bc:dd:f5:eb:3b:6f:51:29:eb:30:0b:64:32:
                    5d:89:b5:52:6a:f3:39:9b:d7:2c:ed:a8:3b:e7:7e:
                    93:f5:e7:e0:27:0d:7a:7d:b0:51:d0:01:61:90:80:
                    b9:a6:4f:59:7f:4d:5c:12:5e:62:a1:95:51:90:f3:
                    7e:83:2c:5f:59:63:8b:05:89:8a:67:e8:69:6d:d1:
                    52:46:09:5f:91:85:be:29:36:72:d8:eb:7a:b7:9b:
                    8d:ba:29:18:aa:3c:dc:24:18:55:ad:89:3a:b4:31:
                    2e:e6:05:41:05:c3:0b:47:53:6c:fc:d8:3f:4d:64:
                    4e:e3:f8:e0:2b:e0:51:4b:ce:e7:e8:f8:e6:db:59:
                    21:15:b6:d3:44:78:54:4a:bb:00:76:15:93:29:6e:
                    7e:ef:e8:7e:77:c5:17:aa:ec:1c:e5:38:9c:1b:e7:
                    f7:02:48:44:7c:e0:f7:97:e7:74:22:09:59:60:cb:
                    13:70:7a:bb:a2:3b:5a:92:ee:b3:98:1e:fe:45:6f:
                    48:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DA:78:85:6E:EC:53:DF:EE:AF:52:28:0F:50:D4:65:65:9A:FD:B3
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/xdp4hW7sU9_ur1IoD1DUZWWa_bM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.217.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         70:58:02:d6:37:f1:5e:a3:16:e9:b4:c9:0c:ae:43:b5:5c:60:
         7f:cb:ec:f4:ba:d8:96:e3:b0:8b:ea:b2:cf:99:df:37:03:35:
         a3:0d:00:8c:a2:aa:80:09:54:87:e0:6c:e5:07:a7:57:f7:18:
         89:b4:44:e8:71:dd:2e:e8:9d:f9:9d:94:65:36:87:cd:19:b8:
         5c:fc:04:90:c1:a0:aa:0d:40:c8:44:5a:3b:8a:bb:02:7d:df:
         63:50:df:0f:7c:e1:a1:40:87:63:76:a6:5c:1b:32:14:86:0a:
         02:e4:fc:9e:43:c2:db:57:33:dc:3a:61:07:d6:ee:5e:64:1c:
         1d:b2:52:9c:ff:6d:08:59:83:f9:67:1c:b6:7f:2a:21:12:a7:
         bf:7f:c5:54:6c:e3:de:01:58:37:d7:6b:fa:5b:d3:ff:32:f6:
         52:65:e2:3f:2b:2f:3f:f3:8d:f1:b2:23:2d:e5:24:8d:da:1d:
         94:10:2c:69:78:b8:5d:96:96:7c:02:ef:43:ee:3e:09:2f:52:
         83:f7:e9:2d:b2:5f:70:2c:4f:27:78:5d:09:0f:ff:2c:b5:ed:
         61:4c:a5:21:fc:57:b7:fb:d9:be:0a:87:ea:69:64:8d:ea:c9:
         b0:b3:e8:55:d0:76:6b:76:97:7b:8e:5d:21:9f:be:dd:fe:c0:
         52:1a:df:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----