Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/7_iDW8BmdmgxtE_sboe0JJVrKMY.roa
File:                     7_iDW8BmdmgxtE_sboe0JJVrKMY.roa (raw, json)
Hash identifier:          d8xyfLkvv/90NaZTF4izz183Wwn3rrVvpxStcjK1pSQ=
Subject key identifier:   EF:F8:83:5B:C0:66:76:68:31:B4:4F:EC:6E:87:B4:24:95:6B:28:C6
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       084C
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/7_iDW8BmdmgxtE_sboe0JJVrKMY.roa
Signing time:             Tue 29 Sep 2020 09:51:53 +0000
ROA not before:           Tue 29 Sep 2020 09:51:53 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9919
IP address blocks:        122.147.32.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2124 (0x84c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:51:53 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=EFF8835BC066766831B44FEC6E87B424956B28C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:61:ec:3a:05:f7:8f:80:ef:22:35:a3:d4:80:
                    4d:88:f7:06:97:3b:9e:3f:99:e1:6e:c1:34:e1:73:
                    0c:86:eb:cd:26:96:7f:42:a7:4b:ca:47:92:a3:dd:
                    7a:89:64:2b:12:25:df:eb:40:d3:38:0f:0a:53:71:
                    d2:e6:b9:d0:a3:ba:36:30:66:41:4f:55:29:80:5d:
                    46:af:bb:83:88:2c:0c:e7:40:2f:34:53:3c:f9:e1:
                    54:91:45:a1:3f:82:bf:ab:24:cd:b1:3b:2b:13:30:
                    fc:84:9b:49:b2:f2:2e:f8:d6:b2:af:67:d0:32:61:
                    f2:d5:c8:f8:f1:69:33:f4:34:3c:36:7b:a3:9b:a5:
                    77:9e:53:01:04:1c:78:d8:75:e8:7f:70:21:59:0e:
                    cb:73:ad:dc:ef:9d:19:17:45:48:a4:6a:c0:ae:aa:
                    56:e6:10:7f:f0:eb:93:f5:be:22:03:e5:a5:3b:ac:
                    ec:8b:af:55:2d:8d:15:7a:97:47:32:b9:e5:1f:bc:
                    ed:fa:b9:49:d8:02:e0:7e:92:40:90:cd:bd:5a:c4:
                    4a:f7:9c:55:74:5a:47:9b:17:62:99:8b:cf:7e:7e:
                    85:d5:e2:68:00:aa:0f:01:9d:2f:15:94:76:9c:9c:
                    0f:3f:ff:40:54:ae:0c:8e:3b:95:5d:a6:14:37:be:
                    a2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F8:83:5B:C0:66:76:68:31:B4:4F:EC:6E:87:B4:24:95:6B:28:C6
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/7_iDW8BmdmgxtE_sboe0JJVrKMY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.147.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8c:37:cb:27:36:85:99:6b:b9:08:08:fa:6a:7d:24:00:95:c5:
         3a:10:72:02:93:0a:67:10:95:d3:7c:74:a7:6a:69:b7:ea:47:
         a7:d3:19:64:43:fd:ce:f1:9e:ef:2b:1c:9a:38:aa:83:24:bc:
         b9:bd:66:e4:a6:a8:3d:f5:18:c5:de:9c:af:d2:2b:51:13:c9:
         17:fd:24:d8:05:14:6f:f5:0d:e9:77:a8:a0:3c:9c:51:cd:cd:
         c2:64:0f:71:f9:23:1f:25:1a:cd:4c:58:2a:c2:b6:1e:95:ab:
         bb:4b:35:16:f3:2d:f3:66:7f:dc:4a:ae:e6:d2:86:fd:e1:e9:
         bd:39:fb:6a:f9:26:8a:eb:a6:94:96:8d:eb:11:68:99:0b:29:
         e4:61:97:bf:25:ec:ad:0a:10:1c:cc:de:8d:4a:46:f7:00:8e:
         4a:52:07:ef:d9:70:f9:c6:73:6e:49:98:70:a1:db:75:0d:39:
         97:a6:27:c0:e3:04:88:f9:75:45:12:af:7a:2c:36:9b:e1:10:
         b0:14:01:73:eb:4a:91:28:76:7a:1c:a4:09:fd:37:0d:33:f3:
         18:94:e3:74:e6:67:2d:1b:23:d1:93:84:33:fd:27:1d:c0:ef:
         3b:97:24:75:dc:51:a0:98:1b:59:85:3b:16:05:f6:51:7f:11:
         63:72:ef:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----