Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/FSf4ndeAG2A5zqVc8FzYZAByKxY.roa
File:                     FSf4ndeAG2A5zqVc8FzYZAByKxY.roa (raw, json)
Hash identifier:          LDpokLInx1Oa4PQEws8VGCKqe6BYuqTTmMLy/3ADG0k=
Subject key identifier:   15:27:F8:9D:D7:80:1B:60:39:CE:A5:5C:F0:5C:D8:64:00:72:2B:16
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0913
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/FSf4ndeAG2A5zqVc8FzYZAByKxY.roa
Signing time:             Tue 29 Sep 2020 09:52:46 +0000
ROA not before:           Tue 29 Sep 2020 09:52:46 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9919
IP address blocks:        106.104.0.0/14 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2323 (0x913)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:46 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=1527F89DD7801B6039CEA55CF05CD86400722B16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a8:92:89:b3:05:1e:1f:3d:10:ea:af:df:e0:
                    d3:4d:0c:f4:c7:7b:5e:c5:94:b0:1d:3c:1f:52:91:
                    2b:17:82:16:c2:f9:55:09:de:ab:1f:70:f6:86:33:
                    6d:8f:e1:4b:7e:f1:1b:22:ef:4d:60:b5:94:d9:e8:
                    dd:ee:53:cc:0d:f5:c0:2e:4d:0e:cc:f1:51:35:a3:
                    b4:74:2e:57:88:73:1c:f9:cc:85:63:d0:2c:d9:ba:
                    c8:51:7b:de:1d:8d:8b:23:7f:98:9d:e4:3b:06:dd:
                    fc:f5:96:52:51:b5:e4:7c:40:de:1c:0e:f2:4d:25:
                    98:a7:a1:17:6e:a1:25:c3:47:65:4b:a3:b8:92:50:
                    eb:1a:60:1c:e6:cb:94:93:d5:71:88:17:4e:8b:87:
                    91:a6:2d:44:b7:43:3a:4b:a3:aa:88:07:90:ba:80:
                    6e:b8:d8:e0:a5:77:06:eb:3b:0d:af:97:6c:74:bc:
                    2d:d9:03:98:72:55:c2:3c:aa:8a:a6:76:6f:b1:e6:
                    de:db:19:35:0e:04:e2:a8:2f:58:30:80:dd:d7:22:
                    60:c8:ac:5d:2f:d9:29:62:2e:f7:5c:44:00:9b:22:
                    6e:9e:90:8a:34:4a:2a:e4:c6:cb:23:5f:40:7e:79:
                    03:cf:42:c6:ea:28:7f:76:2b:a9:62:80:cd:b8:86:
                    87:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:27:F8:9D:D7:80:1B:60:39:CE:A5:5C:F0:5C:D8:64:00:72:2B:16
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/FSf4ndeAG2A5zqVc8FzYZAByKxY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.104.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         a4:7e:50:2a:79:bb:6f:4c:41:1f:a4:23:37:4a:30:83:af:3d:
         10:54:f2:33:eb:40:7a:88:b3:7c:40:15:18:41:7e:7c:55:14:
         98:17:b4:f0:66:43:bf:55:98:a2:c1:ea:06:5f:2c:ff:6c:1c:
         84:a6:df:47:62:19:32:18:5f:10:60:14:20:73:b1:60:9a:e3:
         02:8a:29:67:71:0e:09:14:e0:13:7f:2d:ba:77:91:78:d4:94:
         a8:42:db:e1:9b:ab:88:29:aa:5c:d4:f1:2e:11:3b:8e:6c:fa:
         15:3d:4b:66:81:8d:37:85:3f:1f:e6:b9:06:7c:02:63:ce:08:
         30:19:05:5b:ca:b1:7f:37:8b:c9:86:82:25:c9:97:66:84:5d:
         c7:8b:a3:7b:4d:30:e1:13:eb:68:be:e0:53:61:db:d5:f6:87:
         98:e0:a0:88:16:71:54:24:db:25:69:c6:c0:55:e2:d0:3d:57:
         fa:94:fc:89:94:66:56:c7:71:13:cd:94:67:c0:6e:64:32:04:
         58:62:41:d3:ea:6f:55:c8:1f:e7:f8:c1:20:f5:67:65:75:10:
         e4:55:32:cb:5c:2a:06:e1:5b:6a:78:5f:02:59:0b:c8:27:68:
         06:68:15:fc:2f:e7:c7:e6:da:83:ae:fa:6c:42:7d:f2:df:70:
         79:57:31:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----