Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/5u0QaU9B0tvi7hqfyFCwvuojEsA.roa
File:                     5u0QaU9B0tvi7hqfyFCwvuojEsA.roa (raw, json)
Hash identifier:          DA3rsLQgm4Hj+j2x+HjbysErNxTWPrV/5AdY9J9tetg=
Subject key identifier:   E6:ED:10:69:4F:41:D2:DB:E2:EE:1A:9F:C8:50:B0:BE:EA:23:12:C0
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0900
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5u0QaU9B0tvi7hqfyFCwvuojEsA.roa
Signing time:             Tue 29 Sep 2020 09:52:41 +0000
ROA not before:           Tue 29 Sep 2020 09:52:41 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18049
IP address blocks:        123.205.0.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2304 (0x900)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:41 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E6ED10694F41D2DBE2EE1A9FC850B0BEEA2312C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1d:3f:97:38:88:81:f3:30:99:e5:34:cd:83:
                    7c:ba:b3:f0:a8:8d:fc:0a:cc:f5:60:a7:04:c7:e8:
                    17:ce:f4:6b:36:89:0c:44:a4:de:c7:e3:75:35:a9:
                    c2:bc:87:22:84:fd:5a:ce:8f:c2:60:63:ab:62:53:
                    1b:8c:41:33:4d:4c:17:07:de:d3:91:6d:09:3c:f8:
                    97:8c:bb:56:e4:53:7f:c9:a0:81:8e:2c:8a:eb:a9:
                    c9:cd:0b:2b:0d:d1:32:5d:81:ee:2f:2d:78:9d:bc:
                    3d:46:a3:f9:60:42:a9:8e:29:71:90:59:fe:5d:6f:
                    6e:57:33:15:78:eb:73:92:6e:27:31:59:f2:ed:55:
                    18:42:18:77:4e:59:2b:4f:59:bf:3d:11:ae:ef:0b:
                    33:53:22:84:71:0a:f5:e4:24:4f:d9:b5:0f:6f:4c:
                    6b:86:fc:9f:69:66:8f:d3:1a:8f:43:16:57:1d:f0:
                    ad:9f:a1:09:a9:92:b3:13:cc:ca:b7:c9:da:fe:3e:
                    1d:35:32:88:a2:c1:b3:79:12:ca:2e:aa:a0:09:c2:
                    e5:44:85:a2:73:dc:62:9b:22:d7:d7:70:03:5b:ba:
                    ee:92:42:57:f4:13:5b:c9:2b:01:d0:36:ce:2e:df:
                    a1:e8:df:66:1e:af:86:11:15:56:18:4b:cd:fb:55:
                    90:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:ED:10:69:4F:41:D2:DB:E2:EE:1A:9F:C8:50:B0:BE:EA:23:12:C0
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5u0QaU9B0tvi7hqfyFCwvuojEsA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.205.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         92:55:8f:4a:4e:f4:f0:3a:a6:d6:c6:b8:15:00:46:b3:d0:25:
         a1:a7:cf:52:1c:1b:76:54:9a:49:09:32:b2:0a:55:59:5d:06:
         c4:fc:6b:1a:25:52:6d:c7:09:05:cb:19:c2:a1:bb:07:89:a4:
         2f:09:87:2d:65:96:4a:3f:ed:43:76:fd:1b:87:2c:e8:cd:90:
         ea:b7:24:0d:0c:64:21:03:1d:d2:5f:06:83:66:ee:5b:b7:48:
         37:fc:4e:5a:3d:e9:35:0b:e3:f4:4d:7a:0e:cc:42:83:80:b9:
         7c:f8:c6:0d:8b:e1:d1:80:23:ab:89:a0:30:7f:a0:dc:5c:77:
         e1:8e:4b:96:7b:e0:d0:8c:f4:5f:65:cc:3a:71:c0:20:ef:cf:
         0b:3d:fd:61:e5:67:92:13:7f:54:eb:ba:9c:1e:6a:61:f6:28:
         67:00:18:18:78:9a:1c:3c:c1:43:9a:a0:02:ac:70:c5:30:2c:
         16:c4:bd:1b:67:08:19:71:9a:ce:fb:80:ad:ca:da:35:51:1b:
         df:61:67:03:24:b9:26:3a:dd:b7:29:f8:06:c8:7a:a8:68:bf:
         bc:39:bb:5a:2b:80:64:1b:29:b0:80:03:82:77:4e:7f:c1:bd:
         07:19:ca:57:5a:a7:2c:90:1c:06:e7:ab:9a:3f:71:c1:33:cc:
         95:29:7f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----