Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/JlVryubJnJa2X-_pjtoMmEnihLQ.roa
File:                     JlVryubJnJa2X-_pjtoMmEnihLQ.roa (raw, json)
Hash identifier:          eEjMJ04YfjnYatJYfPY6xA4FBR41rzytKXBgJiVNPZo=
Subject key identifier:   26:55:6B:CA:E6:C9:9C:96:B6:5F:EF:E9:8E:DA:0C:98:49:E2:84:B4
Certificate issuer:       /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial:       0B70
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/JlVryubJnJa2X-_pjtoMmEnihLQ.roa
Signing time:             Wed 29 Sep 2021 02:44:12 +0000
ROA not before:           Wed 29 Sep 2021 02:44:12 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     4780
IP address blocks:        192.72.4.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2928 (0xb70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
        Validity
            Not Before: Sep 29 02:44:12 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=26556BCAE6C99C96B65FEFE98EDA0C9849E284B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9a:00:9f:85:1b:09:d2:1a:e1:80:16:cc:c9:
                    1d:ab:7d:80:8e:d0:c6:dd:9b:3c:a7:cd:48:c4:67:
                    b0:31:e5:00:f7:21:41:1c:37:c7:cf:6c:0f:a3:e1:
                    7c:46:47:19:fa:2e:a3:10:12:9b:bb:37:71:5e:70:
                    67:fb:6f:14:39:2a:2e:08:40:e5:d2:f0:13:1a:51:
                    4b:ae:cc:42:ec:d3:64:95:34:b3:0d:ad:02:23:d2:
                    d9:4e:0d:d2:b0:8c:1e:d7:0c:d4:bf:1d:de:b5:7f:
                    73:d1:ce:a0:2e:b1:b7:59:45:04:e1:69:90:fc:e4:
                    14:e6:77:de:4d:f9:7d:17:e4:68:35:f8:40:94:16:
                    8d:f8:a0:7d:ea:73:7a:3a:2d:ff:1b:ed:62:32:86:
                    70:79:bd:ba:39:39:55:09:43:3b:dd:43:1d:1a:9e:
                    b6:36:fb:cf:00:3b:4b:4e:f7:71:ba:79:bf:61:d0:
                    e4:62:52:74:e8:ed:c2:87:86:f7:c9:0d:6a:7c:ab:
                    29:49:77:7b:4f:0b:39:74:32:5a:5f:6a:15:76:a6:
                    91:68:95:e9:d4:41:0f:1a:07:e4:de:73:88:b5:0d:
                    4d:ec:70:9b:d6:a7:49:d0:73:18:18:9b:c4:58:b4:
                    b8:de:e8:35:2f:78:db:02:96:85:49:29:cd:bd:5f:
                    9e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:55:6B:CA:E6:C9:9C:96:B6:5F:EF:E9:8E:DA:0C:98:49:E2:84:B4
            X509v3 Authority Key Identifier:
                keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/JlVryubJnJa2X-_pjtoMmEnihLQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.72.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:3a:84:f7:3f:20:3d:40:4c:37:fa:c3:46:a2:c7:d5:86:79:
         ff:0d:14:28:c5:be:3e:70:cc:0a:46:59:7d:55:cc:ab:c9:b7:
         8b:ed:2d:7b:5f:7e:3b:3f:ab:86:5f:a1:ad:2d:be:6a:61:43:
         37:f9:16:5b:73:55:92:14:ce:cd:2e:5c:e3:e2:ff:39:86:74:
         16:32:8b:75:4f:1f:39:7e:15:10:b3:a1:8e:f5:1f:79:5f:ab:
         ff:21:47:3c:88:98:8e:14:c8:49:e6:22:29:db:43:00:f4:06:
         63:c2:77:91:0f:48:5e:b6:c8:70:ec:a0:28:6b:49:97:af:da:
         65:ee:2c:68:d1:f4:d9:3e:d1:d1:7a:dd:80:8b:66:13:7c:ac:
         c1:84:5e:3f:96:12:23:0e:3e:33:48:3d:17:90:6b:00:50:04:
         31:6e:64:d5:38:5e:aa:78:08:67:d0:26:c3:44:6b:fa:d7:1a:
         80:ab:d4:ed:57:9d:78:44:84:4f:6c:d1:b3:4f:1d:5b:42:f5:
         82:c9:19:d5:79:c5:5a:a7:51:e7:7e:9e:4c:74:e7:ec:61:45:
         4f:92:07:bf:d4:b3:da:8c:a3:27:09:ac:1b:a8:4f:f7:52:da:
         48:fc:d9:9d:73:3e:58:6f:84:99:7f:20:41:be:4a:2b:0f:48:
         21:19:b6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----