Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/4U49dNTDCXiXL41tcnRqW84sGYU.roa
File:                     4U49dNTDCXiXL41tcnRqW84sGYU.roa (raw, json)
Hash identifier:          0y9F1mPHMP0TUOVSUVQnoFt7pmzg8ru3PVDNw5DwYEM=
Subject key identifier:   E1:4E:3D:74:D4:C3:09:78:97:2F:8D:6D:72:74:6A:5B:CE:2C:19:85
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0E22
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/4U49dNTDCXiXL41tcnRqW84sGYU.roa
Signing time:             Wed 29 Sep 2021 02:43:14 +0000
ROA not before:           Wed 29 Sep 2021 02:43:14 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     4780
IP address blocks:        203.73.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3618 (0xe22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:14 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=E14E3D74D4C30978972F8D6D72746A5BCE2C1985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:37:f0:d5:40:50:67:bc:1a:47:d6:4b:37:30:
                    86:c9:1b:fe:d5:14:d4:b5:5b:b1:8c:81:e2:29:63:
                    fb:11:56:c6:cb:e8:1b:54:71:46:d3:97:b7:ec:ca:
                    bd:6c:1b:05:5a:1c:d9:6a:d5:ac:b6:53:3b:4c:74:
                    e0:bf:d7:25:fa:8d:1f:63:0d:bc:8a:b0:6a:de:b3:
                    1f:51:4e:3a:67:47:5d:c7:bd:58:b7:09:42:40:79:
                    43:a3:0f:5e:67:d7:2e:bc:4f:55:9c:76:ea:94:42:
                    f3:25:49:b3:6c:b5:da:27:16:ef:96:2d:15:44:bb:
                    86:9f:7b:4a:49:85:36:54:f0:f3:64:6d:5b:ad:a1:
                    cb:7f:0e:74:b9:19:28:aa:08:6f:f6:ea:b3:7c:b9:
                    bc:5c:93:19:73:57:e7:ec:05:eb:2d:a8:51:a9:ea:
                    7f:4c:06:5a:7c:7d:df:52:81:eb:06:0e:ad:35:ef:
                    4f:54:43:58:3f:5b:75:92:74:98:1e:68:e7:a0:b5:
                    56:c3:85:dd:fd:d1:44:00:c6:6d:9e:95:89:3d:bd:
                    58:75:72:62:61:8d:05:90:f4:76:7e:80:ab:13:02:
                    72:65:b7:c2:9c:6c:cf:88:ea:59:a6:5e:da:24:e4:
                    8c:36:8e:1b:6e:bc:63:82:6c:3b:89:93:e0:a5:95:
                    39:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:4E:3D:74:D4:C3:09:78:97:2F:8D:6D:72:74:6A:5B:CE:2C:19:85
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/4U49dNTDCXiXL41tcnRqW84sGYU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.73.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c6:07:54:d9:00:0e:33:49:34:e3:ae:9a:bf:5c:6f:0d:99:62:
         64:d3:73:fe:2c:e3:f4:02:99:af:df:f6:e2:3a:90:ce:5f:66:
         bd:95:f8:f0:26:45:23:03:c8:ee:87:11:ff:4b:21:f9:5d:5c:
         c6:33:bb:d9:28:e2:45:f0:54:2e:19:8c:8f:08:87:1b:9b:d4:
         ad:4e:1d:4b:a1:df:40:ea:d1:cb:a6:85:65:61:c5:10:ad:f3:
         8b:4d:04:69:5a:af:a8:7b:4f:b3:2a:32:03:87:06:c7:c4:93:
         b4:ac:7d:5d:b4:0c:3b:c1:14:63:c4:77:bf:ff:2a:96:93:b9:
         c3:4f:77:93:08:6b:b6:58:f2:45:ea:ea:a1:e8:ed:bf:2b:bd:
         cc:c8:b7:ff:4c:86:33:53:a0:92:f5:e9:5f:e8:6b:e2:04:52:
         a4:ac:b3:4c:3f:e2:b0:3f:91:54:c1:43:7b:80:5b:df:6a:b9:
         cb:95:89:0c:53:de:a8:3b:3a:56:f2:75:c2:ab:f5:d1:04:2b:
         de:8a:2d:76:3b:52:10:bc:a0:cf:fc:82:b6:43:16:05:7c:63:
         c0:af:51:b2:11:92:44:cb:4a:35:3c:90:31:9a:05:5b:53:c6:
         3d:e2:e8:ad:57:f9:e0:46:7b:39:40:4a:6c:33:ff:9d:43:51:
         75:54:e0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----