Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/MRuZknNvNWMleIvS1IOTxfacvfY.roa
File:                     MRuZknNvNWMleIvS1IOTxfacvfY.roa (raw, json)
Hash identifier:          WZqAWzvRESdIR62fpRU0SKG5SW4K2forkP9HAz8HQ5o=
Subject key identifier:   31:1B:99:92:73:6F:35:63:25:78:8B:D2:D4:83:93:C5:F6:9C:BD:F6
Certificate issuer:       /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial:       09E1
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/MRuZknNvNWMleIvS1IOTxfacvfY.roa
Signing time:             Sun 07 Feb 2021 06:30:16 +0000
ROA not before:           Sun 07 Feb 2021 06:30:16 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        192.72.32.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2529 (0x9e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
        Validity
            Not Before: Feb  7 06:30:16 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=311B9992736F356325788BD2D48393C5F69CBDF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4c:4d:8a:48:9a:2d:f5:d0:85:5c:b9:bf:e3:
                    c7:62:42:10:95:e9:14:81:40:af:1f:05:5d:28:1a:
                    e0:93:64:8d:6f:5e:b2:ac:46:aa:0d:8d:78:08:48:
                    a7:8a:d3:f3:9f:b8:01:3d:49:64:b6:06:06:4a:4e:
                    74:94:75:1c:7a:88:ee:15:91:44:83:bd:76:93:17:
                    88:fe:c0:c5:fd:86:b1:73:c3:f0:b2:e9:44:6a:0d:
                    43:69:f3:fb:68:03:d3:89:f6:d8:d7:b2:46:cd:b9:
                    51:c8:77:b7:e6:e5:5e:b6:8b:a5:b3:8d:b0:f2:6a:
                    d4:4b:87:72:37:c1:ec:80:53:aa:16:2f:bc:b7:aa:
                    e9:67:93:b9:3d:5a:c2:9e:c6:1e:4e:cb:ae:59:b8:
                    43:38:84:91:df:15:52:cd:e1:33:d6:1a:c9:c7:f0:
                    22:5b:23:4c:5e:38:9c:90:03:bd:d5:e8:e8:f8:bf:
                    bd:40:c2:1b:9b:2b:27:4f:8a:fe:6b:c2:56:74:6f:
                    94:f8:33:91:8d:73:7f:14:f9:55:aa:14:86:15:4f:
                    eb:ec:1d:e2:d1:c0:2e:73:34:6d:f1:53:0f:7e:37:
                    a4:14:4c:82:0f:1a:43:51:6f:fe:7e:81:fb:58:47:
                    d2:bc:17:64:54:c0:a9:c4:aa:55:38:bf:83:63:36:
                    99:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1B:99:92:73:6F:35:63:25:78:8B:D2:D4:83:93:C5:F6:9C:BD:F6
            X509v3 Authority Key Identifier:
                keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/MRuZknNvNWMleIvS1IOTxfacvfY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.72.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6b:78:33:cc:0d:ff:85:df:93:23:3f:d6:52:54:86:76:18:35:
         bd:fc:3a:79:83:80:75:e7:aa:d6:35:a1:a9:71:25:d7:ba:43:
         7d:99:44:cd:4f:a3:90:16:8c:17:cc:12:65:23:f6:15:95:8b:
         31:20:10:cd:a8:dc:b1:f6:08:fa:97:d8:7e:78:65:9a:c0:51:
         26:35:31:c3:db:ab:3a:79:72:a4:83:28:e1:1a:81:23:28:ad:
         b2:29:ef:8d:46:4a:7a:f2:bf:7e:0b:e3:33:91:11:e2:99:8b:
         94:56:e0:83:c8:81:6a:53:a1:52:89:11:21:5f:73:cf:a7:b0:
         6d:f2:ac:54:f9:41:69:61:4c:5f:67:72:ee:d1:fd:3b:de:4f:
         ed:65:b4:dd:01:ae:58:7d:c2:57:ab:f5:72:89:1b:b8:c1:34:
         ca:26:c0:a1:5d:dd:df:5c:f5:93:f8:01:ef:52:ab:3d:8a:0b:
         60:28:02:b8:3b:16:7b:81:98:cb:d8:59:f6:6d:89:62:4f:f0:
         fd:48:ca:7e:10:77:9b:de:3e:92:a6:ee:67:81:09:c3:cb:74:
         1d:6d:0b:78:0d:9b:77:ec:5e:46:bb:e9:42:29:fe:23:d0:ba:
         a1:4e:15:47:2a:64:85:dc:c2:ed:cf:57:28:3a:11:91:ce:59:
         31:11:dc:63
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCeEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB
NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yMTAyMDcw
NjMwMTZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDMxMUI5OTkyNzM2RjM1
NjMyNTc4OEJEMkQ0ODM5M0M1RjY5Q0JERjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSTE2KSJot9dCFXLm/48diQhCV6RSBQK8fBV0oGuCTZI1vXrKs
RqoNjXgISKeK0/OfuAE9SWS2BgZKTnSUdRx6iO4VkUSDvXaTF4j+wMX9hrFzw/Cy
6URqDUNp8/toA9OJ9tjXskbNuVHId7fm5V62i6WzjbDyatRLh3I3weyAU6oWL7y3
qulnk7k9WsKexh5Oy65ZuEM4hJHfFVLN4TPWGsnH8CJbI0xeOJyQA73V6Oj4v71A
whubKydPiv5rwlZ0b5T4M5GNc38U+VWqFIYVT+vsHeLRwC5zNG3xUw9+N6QUTIIP
GkNRb/5+gftYR9K8F2RUwKnEqlU4v4NjNpkdAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUMRuZknNvNWMleIvS1IOTxfacvfYwHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC
1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90
S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvTVJ1WmtuTnZOV01sZUl2UzFJT1R4
ZmFjdmZZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcBIIDAN
BgkqhkiG9w0BAQsFAAOCAQEAa3gzzA3/hd+TIz/WUlSGdhg1vfw6eYOAdeeq1jWh
qXEl17pDfZlEzU+jkBaMF8wSZSP2FZWLMSAQzajcsfYI+pfYfnhlmsBRJjUxw9ur
OnlypIMo4RqBIyitsinvjUZKevK/fgvjM5ER4pmLlFbgg8iBalOhUokRIV9zz6ew
bfKsVPlBaWFMX2dy7tH9O95P7WW03QGuWH3CV6v1cokbuME0yibAoV3d31z1k/gB
71KrPYoLYCgCuDsWe4GYy9hZ9m2JYk/w/UjKfhB3m94+kqbuZ4EJw8t0HW0LeA2b
d+xeRrvpQin+I9C6oU4VRypkhdzC7c9XKDoRkc5ZMRHcYw==
-----END CERTIFICATE-----