Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/J47Jbgo8pyaPsI26JbX8iSpgxc0.roa
File:                     J47Jbgo8pyaPsI26JbX8iSpgxc0.roa (raw, json)
Hash identifier:          tdwGtYjP7Exj3POcOHZue2wNuSAq5f15u+Dh/iuW85I=
Subject key identifier:   27:8E:C9:6E:0A:3C:A7:26:8F:B0:8D:BA:25:B5:FC:89:2A:60:C5:CD
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       08EC
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/J47Jbgo8pyaPsI26JbX8iSpgxc0.roa
Signing time:             Tue 29 Sep 2020 09:52:36 +0000
ROA not before:           Tue 29 Sep 2020 09:52:36 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9919
IP address blocks:        211.74.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2284 (0x8ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:36 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=278EC96E0A3CA7268FB08DBA25B5FC892A60C5CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2e:95:ba:78:4d:13:db:88:97:68:a8:05:04:
                    95:e8:0e:ee:0d:9f:2d:0c:d0:dc:19:3b:73:4f:48:
                    69:af:5d:ec:cc:71:e6:b4:36:9c:2a:8d:94:7b:94:
                    ef:a6:1d:92:d5:94:75:a5:fd:82:29:ed:86:99:1a:
                    0e:7c:23:a6:78:72:b8:ad:71:bb:9e:39:2c:e7:98:
                    fd:b8:28:51:be:37:3b:e3:00:68:36:cf:12:8e:73:
                    ad:66:c2:92:10:9f:66:ee:af:29:77:bb:94:7d:7c:
                    42:a8:5c:18:da:bb:43:c5:64:c4:19:31:2f:62:87:
                    27:82:36:43:bd:5a:3f:bd:b6:94:d7:18:73:2c:84:
                    a0:82:0c:ee:32:e3:c1:d5:cc:70:40:46:c1:32:85:
                    ff:55:f7:8b:ad:2f:7d:2c:36:e5:07:93:6e:70:6b:
                    3e:ce:34:ff:69:8b:de:dd:56:9c:18:16:6e:9c:54:
                    8a:a3:9f:22:a9:88:e7:0b:93:b5:8a:c6:db:e5:0e:
                    32:26:49:5e:3b:a8:65:1f:87:3d:b7:62:a7:44:de:
                    8f:36:25:24:11:11:b9:1b:28:31:4d:30:5a:ab:a0:
                    d8:72:19:d1:e1:ca:04:ab:a4:5d:6f:84:2e:17:fc:
                    9d:5c:5b:c9:80:3a:24:53:52:3d:21:8c:58:7d:dd:
                    85:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8E:C9:6E:0A:3C:A7:26:8F:B0:8D:BA:25:B5:FC:89:2A:60:C5:CD
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/J47Jbgo8pyaPsI26JbX8iSpgxc0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.74.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         84:eb:e7:57:b7:be:5b:2a:10:fa:e6:ab:c1:67:2a:32:fd:c1:
         04:26:c5:51:4e:83:6e:30:14:0f:30:96:29:af:36:3c:66:1c:
         5d:18:c0:68:fd:c7:ea:e3:24:c2:b7:02:1e:b6:dc:08:63:19:
         dd:df:df:64:d7:4d:e6:cd:91:e2:99:3c:09:56:6c:87:6c:66:
         3e:20:14:e9:3d:43:74:47:1a:6d:cb:72:33:30:20:fa:78:f3:
         b2:52:fd:c4:b2:ff:c2:81:66:51:f7:3c:93:e6:c8:36:8a:82:
         fe:71:00:0e:25:a7:d5:7e:84:a6:12:f7:6f:c9:89:a6:2a:9a:
         46:04:ac:d9:76:6f:80:26:fb:ee:24:c2:64:70:2c:ae:eb:84:
         a2:84:e9:7d:79:d8:e2:00:54:90:63:91:5d:ad:df:9f:d4:d2:
         6c:cd:8e:c8:1b:56:af:66:1d:26:d4:57:f3:75:fd:98:fb:63:
         b1:05:25:67:c4:77:db:35:1d:db:94:84:ea:68:0a:88:00:cc:
         0b:df:6c:0f:a0:0a:ff:63:2c:b6:bc:69:d9:5d:f3:52:16:b3:
         1c:43:36:46:cb:f5:b3:9f:b4:07:43:a0:96:02:de:06:eb:04:
         25:bf:77:dc:97:0d:82:85:a8:a4:1d:23:90:c2:31:5c:39:44:
         5c:a9:f7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----