Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/6CofFNHrN_cPaZNLgvZqaQbu6us.roa
File:                     6CofFNHrN_cPaZNLgvZqaQbu6us.roa (raw, json)
Hash identifier:          IK3xBhLHbLIXPhWMnQE+Ze18i19rO68PLx843BL7/sw=
Subject key identifier:   E8:2A:1F:14:D1:EB:37:F7:0F:69:93:4B:82:F6:6A:69:06:EE:EA:EB
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0ECA
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/6CofFNHrN_cPaZNLgvZqaQbu6us.roa
Signing time:             Wed 29 Sep 2021 02:43:59 +0000
ROA not before:           Wed 29 Sep 2021 02:43:59 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9919
IP address blocks:        123.204.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3786 (0xeca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:59 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=E82A1F14D1EB37F70F69934B82F66A6906EEEAEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1a:00:cd:5a:8d:75:15:d1:79:61:d3:a3:58:
                    c7:50:d2:3d:af:65:ce:fb:ab:66:d9:4a:fc:4d:b8:
                    55:6f:bf:e6:a5:8e:60:7e:cd:e0:25:3d:ff:c9:fd:
                    52:ca:da:0e:b4:76:ea:eb:b6:09:a1:45:c5:32:c3:
                    f2:92:d1:38:3c:50:8e:7f:1f:70:1a:0e:17:12:2f:
                    1d:47:a3:ea:7c:cc:8a:de:0f:a1:1b:fa:f9:06:86:
                    f0:ca:6e:f9:c7:3f:6d:02:19:76:72:6b:56:7b:6e:
                    37:a0:46:ab:70:a4:4a:a0:b3:8f:18:ad:a2:76:85:
                    b7:f5:3d:18:9a:f2:30:6b:d2:51:aa:9d:9e:da:02:
                    4f:de:12:a0:fc:2c:6c:4e:75:7a:c0:6f:a3:b8:79:
                    09:75:c4:75:6e:6a:5d:8c:72:ef:9c:95:0c:e5:9e:
                    43:10:67:02:00:a6:eb:cd:3a:d6:25:7f:7a:12:57:
                    f6:ff:bd:5c:7a:9c:cb:b1:ff:78:86:41:76:06:7f:
                    9c:e7:68:86:c0:62:f6:0d:91:03:fb:9d:35:fb:f6:
                    38:5c:b6:1f:6f:2b:23:e9:e7:3d:eb:de:68:88:86:
                    9d:c4:d1:45:bb:4f:f1:e7:47:eb:97:5d:38:97:de:
                    a5:6a:bb:97:20:79:e4:83:51:d5:b2:2f:2d:43:6f:
                    a5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2A:1F:14:D1:EB:37:F7:0F:69:93:4B:82:F6:6A:69:06:EE:EA:EB
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/6CofFNHrN_cPaZNLgvZqaQbu6us.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.204.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         76:b4:a2:f1:ca:a4:c2:5b:15:80:3d:36:6d:81:18:58:3b:ed:
         9a:c7:d3:84:cc:99:a6:0d:60:1b:28:fb:f5:fb:26:79:96:8e:
         73:15:ad:6c:bc:69:2f:cb:4f:bc:ab:35:4d:5b:3e:9d:21:17:
         e5:2d:bf:73:60:6d:cf:07:26:56:d9:ac:f7:bb:be:75:a7:f7:
         bd:1f:b4:22:b4:3a:75:ae:1d:b8:7e:6c:eb:3e:7d:7b:d2:28:
         3a:95:45:a9:4b:3e:19:dd:84:df:2d:2c:f7:98:26:e6:1b:1e:
         09:b6:7d:79:bd:42:a5:89:fd:10:3c:57:bf:5f:08:31:70:59:
         e7:2e:98:87:49:8e:8a:35:0d:9b:4b:aa:7f:bf:28:18:27:4c:
         51:7f:65:9d:c0:7e:10:d9:6f:0a:bd:f2:85:a2:ae:83:cb:60:
         57:15:20:70:65:1b:33:7f:c9:c0:32:f9:7c:00:51:73:df:0a:
         56:f5:86:4c:fd:8b:de:12:b8:87:9e:4c:31:e0:ec:f3:aa:cf:
         6f:cb:25:26:64:c2:26:10:57:7d:1f:76:bd:e7:e6:bf:02:db:
         e3:5c:e2:bf:9b:ba:bb:15:f6:e3:c7:33:db:8c:48:5a:b4:b0:
         11:93:dd:11:e0:2c:95:f6:1d:ed:7c:7d:b0:2f:61:e1:02:08:
         cd:e7:56:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----