Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/8cJ1WuMrYaflZktaTzwwf_L-qVU.roa
File:                     8cJ1WuMrYaflZktaTzwwf_L-qVU.roa (raw, json)
Hash identifier:          ZWdiVLGGVJXV4iUumUHIv9cAeDMjdUE+U9v1uW85jCc=
Subject key identifier:   F1:C2:75:5A:E3:2B:61:A7:E5:66:4B:5A:4F:3C:30:7F:F2:FE:A9:55
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0C37
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8cJ1WuMrYaflZktaTzwwf_L-qVU.roa
Signing time:             Sun 07 Feb 2021 07:10:14 +0000
ROA not before:           Sun 07 Feb 2021 07:10:14 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38851
IP address blocks:        122.147.160.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3127 (0xc37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Feb  7 07:10:14 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F1C2755AE32B61A7E5664B5A4F3C307FF2FEA955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:28:b4:d0:ab:2d:73:36:50:41:15:79:1e:81:
                    51:8b:b7:1d:77:57:2b:7b:41:05:8a:ae:74:ff:42:
                    2b:34:09:9a:1f:1d:2d:98:cc:bc:3a:cc:df:70:f4:
                    5a:97:7a:5c:17:df:16:b0:ec:30:b1:1f:6b:cf:47:
                    55:82:6f:e6:58:c6:b0:e9:9d:41:5d:55:e6:78:e5:
                    0b:49:7a:8e:71:8b:86:63:55:80:83:04:db:e8:53:
                    2a:a4:e1:9a:85:d1:6e:79:8d:b1:cf:41:89:f2:64:
                    16:07:f5:12:5e:39:08:cb:d3:b7:ad:fe:07:bb:23:
                    61:72:f2:07:b1:4c:06:bd:dc:39:2f:d1:0e:b0:39:
                    2b:4a:66:2a:27:56:6a:94:bb:71:cb:9c:94:ba:da:
                    ad:9c:ce:be:ce:20:b3:30:19:65:20:84:71:ba:3a:
                    89:f4:0b:71:46:bd:e6:c6:45:c6:73:c4:41:88:7e:
                    04:44:e0:42:0c:09:47:4a:d7:f4:a8:5b:3a:ad:71:
                    07:e3:ad:24:7e:f1:3d:34:54:70:58:72:c5:d0:3e:
                    29:22:ad:86:ef:57:cc:c1:ea:45:b7:40:6a:41:f4:
                    cd:a1:ab:62:3a:5f:34:4b:b0:0d:95:bd:62:7f:33:
                    98:ca:fe:5a:38:90:4b:3f:52:cb:b4:f2:26:a2:fb:
                    8a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C2:75:5A:E3:2B:61:A7:E5:66:4B:5A:4F:3C:30:7F:F2:FE:A9:55
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8cJ1WuMrYaflZktaTzwwf_L-qVU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.147.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:6a:c6:be:99:66:ca:a3:93:0b:c0:e0:5a:11:9f:38:27:ae:
         76:41:bc:bd:4d:8f:9e:9c:11:43:c1:1c:1e:db:97:e7:b9:4c:
         21:1f:f3:93:71:59:80:68:81:62:12:48:4f:79:74:bb:3e:f5:
         0f:f1:8a:db:83:65:d4:c3:b9:7f:e9:0d:6e:26:1a:b5:99:82:
         c1:48:06:a7:3a:aa:a7:34:96:a1:30:2f:0f:ff:e9:c0:14:3d:
         18:6d:fc:8f:e5:c2:10:84:78:74:e8:ae:af:6c:44:47:ac:14:
         e3:ef:0e:d9:cb:4e:47:b6:aa:af:c1:4c:c9:49:52:c0:ff:9a:
         dc:a0:36:fd:91:81:f2:db:05:ed:19:a6:b1:30:77:f5:b4:e9:
         9d:ba:d1:c0:0f:14:a6:32:15:03:97:6d:84:f6:e0:94:bf:0a:
         fa:e5:5e:b5:00:b7:29:2a:e8:39:08:4c:f2:f5:43:ec:36:85:
         3b:09:ce:63:c0:50:99:3d:5c:79:41:70:72:74:53:27:bd:b1:
         53:84:b3:d2:35:b5:2d:b5:51:a3:5f:7b:d9:64:11:1f:e1:25:
         75:96:3c:1d:35:6e:46:1e:33:89:27:c3:86:5f:b9:f0:3e:80:
         87:33:e2:d7:da:5d:ad:88:08:65:f1:50:0d:c9:25:0c:6b:09:
         6c:6f:78:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----