Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/GjNhY_MR_v7moYDoTRZpiYOptwg.roa
File:                     GjNhY_MR_v7moYDoTRZpiYOptwg.roa (raw, json)
Hash identifier:          Xd16ZPVtz7WoUTflRNqj1lVhyl+RkvslEPO3QutsjMw=
Subject key identifier:   1A:33:61:63:F3:11:FE:FE:E6:A1:80:E8:4D:16:69:89:83:A9:B7:08
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       08D9
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/GjNhY_MR_v7moYDoTRZpiYOptwg.roa
Signing time:             Tue 29 Sep 2020 09:52:31 +0000
ROA not before:           Tue 29 Sep 2020 09:52:31 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        112.105.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2265 (0x8d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:31 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=1A336163F311FEFEE6A180E84D16698983A9B708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a5:3b:62:4a:53:90:d9:5c:16:df:bc:1f:35:
                    bd:59:97:2a:64:02:21:5d:29:7f:c4:7f:d6:c6:7d:
                    ed:87:22:e9:5e:c1:cf:c8:c4:75:61:94:7a:57:61:
                    55:39:27:26:cf:f8:69:1e:0f:86:5f:dc:f3:39:2c:
                    98:4b:af:78:c1:9d:53:bb:09:96:fa:68:8c:26:7f:
                    fa:08:bb:51:18:fe:a5:23:7a:8a:69:5a:01:20:97:
                    ae:e1:f1:f3:c5:b5:00:a2:54:1a:0b:ab:67:b4:c7:
                    15:35:b3:51:dd:5b:65:80:3b:31:3b:d4:9d:11:45:
                    14:4c:28:8e:b4:3b:84:b5:c3:eb:ae:24:ef:72:c8:
                    2b:31:5a:80:27:59:49:a9:e6:db:55:0d:0d:b8:9d:
                    d5:f1:26:65:89:5f:00:47:01:2d:27:72:0a:b2:20:
                    32:39:ab:4a:f0:bb:2e:81:a1:4e:00:29:1b:ec:5d:
                    4e:ef:fa:99:f4:4b:98:9d:97:e2:c5:d9:86:ad:60:
                    1b:bd:3a:b4:3a:d3:37:4d:87:5f:53:1c:d1:93:12:
                    e8:be:c2:4a:54:e0:4b:44:d6:a3:dd:29:c7:d8:8d:
                    67:4f:25:a5:c2:ee:41:ab:35:24:98:11:30:71:ec:
                    89:7d:79:7c:94:67:cd:65:fa:fc:21:f7:bb:f1:36:
                    6c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:33:61:63:F3:11:FE:FE:E6:A1:80:E8:4D:16:69:89:83:A9:B7:08
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/GjNhY_MR_v7moYDoTRZpiYOptwg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.105.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9f:7f:18:ac:45:b9:10:75:d9:da:99:6b:bf:b0:de:ce:34:3b:
         14:15:2f:7f:b9:75:5d:c4:2f:18:de:86:68:e0:ad:9a:34:c0:
         51:26:13:2c:f9:6b:5c:d1:9d:99:1e:2d:30:8e:a3:f7:11:4e:
         6f:45:2b:64:81:60:33:0e:84:cc:89:6e:15:84:55:0a:3b:10:
         42:f7:be:74:f9:be:91:af:73:45:9c:59:e8:86:44:ce:8c:01:
         f6:8b:c1:3c:3c:7f:37:56:c9:23:a4:87:95:8d:61:cd:72:89:
         af:17:bb:0d:89:8b:a1:2f:77:b1:14:8c:b2:b6:de:09:19:c3:
         c4:61:31:6e:49:5d:f5:c8:69:bf:4b:36:d5:40:2d:4a:35:ec:
         c9:a2:a9:ad:c6:f0:b7:9e:76:9f:8e:05:14:05:cc:36:fc:f9:
         b2:e0:ea:04:3f:24:5e:bd:6c:b2:c1:df:aa:e1:bd:50:1e:25:
         14:ae:8e:9e:d5:09:55:3b:66:7d:c5:cd:9b:8a:e3:7a:97:88:
         5f:42:fa:31:57:e0:2b:1c:93:85:df:f9:41:1b:62:31:2b:b1:
         9c:ae:12:7b:18:bb:0b:9b:2f:e1:74:13:86:d0:03:92:61:15:
         e2:dd:32:dc:03:7b:cb:55:32:5a:1e:ed:3c:48:cf:6a:b1:2c:
         55:e7:3e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----