Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/-PWUMk1oksdG8pZuo1_7O7HgeHU.roa
File:                     -PWUMk1oksdG8pZuo1_7O7HgeHU.roa (raw, json)
Hash identifier:          wgpxA2MWkfuCtzMw8r2ySE5ybObxE4teywP3LAemSZY=
Subject key identifier:   F8:F5:94:32:4D:68:92:C7:46:F2:96:6E:A3:5F:FB:3B:B1:E0:78:75
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       08D0
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-PWUMk1oksdG8pZuo1_7O7HgeHU.roa
Signing time:             Tue 29 Sep 2020 09:52:29 +0000
ROA not before:           Tue 29 Sep 2020 09:52:29 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131584
IP address blocks:        106.105.180.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2256 (0x8d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:29 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F8F594324D6892C746F2966EA35FFB3BB1E07875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:58:ab:0e:fc:7b:be:67:97:39:53:1c:24:e8:
                    aa:c2:8c:9b:f9:bb:0c:53:0d:49:8f:f3:91:75:cf:
                    5c:6d:92:cc:b5:36:ae:33:7a:3e:7c:4b:2a:42:76:
                    d2:b6:01:50:7c:a7:2d:61:1b:cd:7a:87:58:89:fc:
                    50:15:8c:5b:54:c2:b7:fe:1a:f1:3f:1d:45:99:6a:
                    0a:0d:9a:bb:f2:9e:b2:db:a8:07:f0:37:1c:9e:bf:
                    36:96:2d:f0:9e:28:7b:2d:a8:0c:0c:24:e3:d0:a3:
                    7c:d8:de:19:37:8e:70:69:15:f2:18:76:ec:c7:e9:
                    36:c5:bf:0f:87:9b:57:f9:a9:c4:6f:4c:88:8d:99:
                    c5:f7:03:51:55:30:9a:d6:b5:a7:a5:5b:9f:19:5b:
                    0c:74:57:e1:98:9a:3a:77:4d:c4:dc:a7:a0:4e:e6:
                    a0:e0:4c:59:76:26:1b:0d:29:82:97:9b:ac:c8:70:
                    00:51:f5:43:c3:44:c7:3b:64:9a:b1:05:29:e7:37:
                    1d:1b:95:8a:f7:81:df:64:84:b3:28:61:e4:31:2e:
                    ef:06:59:cd:4f:f6:62:de:5c:97:9d:68:aa:10:bf:
                    55:33:76:7e:d1:6f:b2:59:bd:b1:88:7d:1b:06:d2:
                    84:a5:d0:29:0a:e2:ac:63:92:98:d1:42:7f:f5:7c:
                    68:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F5:94:32:4D:68:92:C7:46:F2:96:6E:A3:5F:FB:3B:B1:E0:78:75
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-PWUMk1oksdG8pZuo1_7O7HgeHU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.105.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:0f:4c:8c:e4:3d:a0:22:43:db:a8:67:6d:a4:b9:fa:57:52:
         69:c8:ce:24:f0:3b:e4:78:9c:40:17:7b:6a:dd:76:6d:9c:31:
         4a:1b:d4:ff:1c:cf:6a:5e:c7:27:e7:26:24:3d:cd:5c:55:f7:
         24:66:8f:fd:f6:af:f8:07:37:a0:ea:51:ce:7e:00:5d:3e:7b:
         9d:12:ed:8b:e8:f0:ef:b6:5f:02:4b:ad:9f:cc:0a:61:bb:18:
         41:4b:44:e9:ee:4f:bc:7c:91:7d:44:91:49:75:ef:d2:b9:e0:
         ce:f1:b8:1b:26:e5:2a:b2:4f:aa:19:f9:4c:a7:88:18:fd:82:
         3a:a8:1b:58:1b:c0:2a:38:c8:9d:2b:f7:4c:e1:59:1c:fa:42:
         e0:aa:41:5a:f9:cb:88:61:a9:69:b4:c1:9b:77:a5:a9:71:f7:
         72:81:c5:98:40:01:45:cc:e0:83:05:fe:01:06:19:1f:ed:9c:
         62:6e:9b:b8:9e:cf:05:85:1b:cf:60:7a:f9:40:47:85:58:52:
         5e:57:6d:16:0d:c5:4b:11:bc:0f:09:74:a7:fe:b2:8e:51:d7:
         11:d5:57:76:8d:b1:ab:35:f5:9f:71:ce:ce:b9:e6:0b:d7:9b:
         e9:d9:35:a1:72:03:3a:1e:f2:36:36:57:d3:d9:f1:71:38:64:
         89:49:64:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----