Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/7_CUCfrbbdZUjtckmGas7ooV3f4.roa
File:                     7_CUCfrbbdZUjtckmGas7ooV3f4.roa (raw, json)
Hash identifier:          +mL7qcirrlN2Hl4Uh2ajVznqOt6/od4pctnzXy2jdTQ=
Subject key identifier:   EF:F0:94:09:FA:DB:6D:D6:54:8E:D7:24:98:66:AC:EE:8A:15:DD:FE
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0E3D
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/7_CUCfrbbdZUjtckmGas7ooV3f4.roa
Signing time:             Wed 29 Sep 2021 02:43:21 +0000
ROA not before:           Wed 29 Sep 2021 02:43:21 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18049
IP address blocks:        175.183.0.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3645 (0xe3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:21 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=EFF09409FADB6DD6548ED7249866ACEE8A15DDFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:96:a2:83:ad:b3:8d:ef:f6:56:a0:9b:78:e8:
                    80:06:1a:da:5a:f0:67:37:45:80:2e:9d:90:64:91:
                    2e:87:79:cf:d4:36:6f:c5:e5:75:75:70:ce:5f:d8:
                    74:47:e8:7f:2c:f2:94:a7:a6:da:bf:37:7f:76:6e:
                    ef:f4:3b:b8:73:6e:f0:be:48:f3:8f:91:04:69:94:
                    e4:74:23:d5:cd:d2:f5:68:60:96:03:ac:8d:2d:6b:
                    02:cf:f4:e8:9f:f8:a3:77:bb:f0:10:b5:c7:5a:1e:
                    fc:33:2b:dc:d3:c8:45:b7:6c:11:5f:3f:9e:bb:35:
                    91:3b:88:40:c6:4c:f6:41:c0:c5:b6:3b:e9:a6:5d:
                    d9:09:5a:b5:50:35:40:e2:35:59:8d:7a:16:24:ed:
                    2b:8d:c2:82:dd:cc:64:77:67:6b:77:46:a8:25:02:
                    ac:a2:c5:6a:30:12:1e:9f:09:11:0e:51:c0:66:a5:
                    6d:2a:75:a4:4c:f4:c7:7b:80:c4:e7:73:7e:df:32:
                    1c:f0:9e:6d:2f:a5:ca:3f:d5:e3:70:2a:d9:d9:cf:
                    a9:83:8d:27:31:79:74:90:8c:d5:46:09:56:73:79:
                    32:8c:63:5d:8d:8e:4a:8b:0d:04:6d:a2:30:2c:a2:
                    53:ae:5e:ba:3b:bc:71:03:3a:e0:2b:cd:e8:1b:f0:
                    3a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F0:94:09:FA:DB:6D:D6:54:8E:D7:24:98:66:AC:EE:8A:15:DD:FE
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/7_CUCfrbbdZUjtckmGas7ooV3f4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.183.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7c:f4:fc:27:78:83:f7:ab:94:80:89:5b:38:ad:ba:a4:b7:98:
         d5:c2:b7:0b:bf:22:22:b8:aa:a9:52:0c:8d:e8:2d:9d:91:19:
         05:97:8a:b0:88:34:a7:21:d8:f9:f4:97:07:87:bc:96:25:cd:
         8b:d1:60:a5:90:da:22:24:76:c3:6a:aa:19:fb:30:d6:aa:d5:
         f2:e1:65:af:1e:02:2c:d5:ad:52:a2:26:81:9b:9f:58:d8:6a:
         33:26:5e:4e:19:6c:60:93:fd:fb:05:22:cf:02:29:f3:af:7f:
         bd:94:26:25:a1:51:33:7f:de:e0:46:73:76:eb:7e:73:9b:8b:
         07:83:be:92:d5:a6:e4:30:f7:78:7e:80:aa:3f:00:eb:c6:6c:
         2f:5f:29:66:4a:04:50:42:5b:61:23:eb:9d:2a:ad:c7:f4:ae:
         4c:a5:2f:7f:8a:85:97:e5:02:7f:c3:1e:f8:22:be:b7:2b:bf:
         5a:d0:48:0e:a8:1d:9c:ce:f2:01:c5:2c:7c:92:44:a7:09:b7:
         9a:4a:fc:00:2c:46:ae:8a:0f:be:86:78:d3:e2:be:f9:73:e3:
         c8:b6:a1:d6:86:91:7e:1e:73:c2:9a:3b:f9:a0:94:17:2f:cf:
         05:1a:7f:a2:b3:61:71:e5:99:2e:9f:20:92:6d:e4:3c:b8:4e:
         13:eb:37:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----