Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/2jai7CtBMQ0_q6tX1y_OQ8Wu0Hg.roa
File:                     2jai7CtBMQ0_q6tX1y_OQ8Wu0Hg.roa (raw, json)
Hash identifier:          IM8pAr8o2icDvI6GCXR0I/4f3q2AwjiHTHeh423OBGk=
Subject key identifier:   DA:36:A2:EC:2B:41:31:0D:3F:AB:AB:57:D7:2F:CE:43:C5:AE:D0:78
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       087A
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/2jai7CtBMQ0_q6tX1y_OQ8Wu0Hg.roa
Signing time:             Tue 29 Sep 2020 09:52:04 +0000
ROA not before:           Tue 29 Sep 2020 09:52:04 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        2001:4580::/26 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2170 (0x87a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:04 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=DA36A2EC2B41310D3FABAB57D72FCE43C5AED078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:32:b4:d8:69:b2:37:df:5e:fb:53:ba:12:b7:
                    18:3f:c9:70:04:5b:28:49:5f:54:51:95:35:b0:c4:
                    41:62:01:ec:8d:90:c9:ab:42:99:70:8a:4b:56:25:
                    e9:c2:04:57:e9:ad:8c:e9:76:9b:94:65:99:be:76:
                    cd:82:fa:2d:5d:71:96:38:f3:d4:db:6b:a2:d6:95:
                    20:a3:c5:3f:8b:d8:57:30:ef:1d:9a:63:45:b9:72:
                    6f:39:d6:43:e8:9b:bb:da:1c:a4:8d:aa:8b:29:5f:
                    00:2e:a7:75:32:31:69:89:2a:fb:6e:91:d8:e5:bb:
                    ac:60:43:c5:be:25:9b:16:24:b4:8c:54:34:68:12:
                    65:2c:42:3b:4b:60:15:fd:83:f2:f1:5f:5a:fb:6b:
                    0e:bc:d7:4a:43:e8:b0:66:23:41:25:df:49:2c:ab:
                    06:a2:39:4c:f9:42:d3:13:4a:d5:e4:32:66:90:f1:
                    5c:3a:a4:70:ed:3e:3e:88:c0:78:74:f4:43:62:a2:
                    f6:02:cb:1e:de:e4:7f:96:14:0e:28:a8:0c:3c:b6:
                    39:91:46:44:f5:88:87:0c:80:69:4d:25:98:9c:95:
                    f4:6a:be:55:26:6f:d6:b0:dd:72:18:7c:54:9a:83:
                    21:75:ea:16:8b:5f:e9:5a:69:a1:fd:ed:8a:19:fc:
                    61:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:36:A2:EC:2B:41:31:0D:3F:AB:AB:57:D7:2F:CE:43:C5:AE:D0:78
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/2jai7CtBMQ0_q6tX1y_OQ8Wu0Hg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4580::/26

    Signature Algorithm: sha256WithRSAEncryption
         aa:1c:2d:1b:bb:60:cf:58:32:fb:08:62:ca:b1:46:76:dd:3f:
         5f:8a:86:c0:57:ca:e6:6b:39:bd:f3:e6:bb:07:cb:84:36:11:
         b6:2b:51:6e:b4:c0:1d:61:d7:05:bb:ab:a6:d8:1c:0d:f2:b7:
         40:42:96:f7:f2:b1:7b:aa:f9:28:cc:67:55:c0:5d:4a:05:ef:
         78:4c:17:a6:eb:ce:c4:d8:5f:eb:2b:37:74:0a:e2:b4:6c:9d:
         ae:d3:8b:81:f3:9d:0b:66:ed:b5:47:9b:77:50:d5:1f:1b:f0:
         dc:10:00:c3:ac:b0:46:45:b4:93:3f:0f:0e:a8:06:37:cf:b6:
         97:05:18:3c:62:04:43:bc:fb:7d:23:74:b7:f0:bb:9a:7c:44:
         c8:eb:42:4a:16:19:a4:cf:fc:83:29:2d:bc:81:d2:15:8e:ee:
         f7:dc:d1:71:98:cf:9d:b8:e0:c4:39:91:4b:de:f6:fa:7d:98:
         68:19:61:a1:96:ea:6c:c3:64:58:00:5a:78:73:a4:01:bb:99:
         99:78:03:a6:8d:0e:32:6c:bb:39:e9:ec:5f:4d:1c:db:7b:6e:
         88:75:1f:73:04:f3:67:08:ac:c4:d7:63:9f:14:80:70:4b:6c:
         0f:0f:c1:08:cf:82:12:0d:d9:52:ad:9c:e5:e0:ce:9a:09:95:
         d9:0f:b6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----