Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/P27_bdbOxigbKf8GQ7QOxdqLn8M.roa
File:                     P27_bdbOxigbKf8GQ7QOxdqLn8M.roa (raw, json)
Hash identifier:          mm4HRg82mkf/8O91c23kxTzqGUJg2TazZRrmzCjsefY=
Subject key identifier:   3F:6E:FF:6D:D6:CE:C6:28:1B:29:FF:06:43:B4:0E:C5:DA:8B:9F:C3
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0848
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/P27_bdbOxigbKf8GQ7QOxdqLn8M.roa
Signing time:             Tue 29 Sep 2020 09:51:52 +0000
ROA not before:           Tue 29 Sep 2020 09:51:52 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9919
IP address blocks:        218.210.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2120 (0x848)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:51:52 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=3F6EFF6DD6CEC6281B29FF0643B40EC5DA8B9FC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:21:2e:1a:7b:dd:6a:0b:bf:33:74:5a:c5:3a:
                    5b:55:d2:f1:5e:1f:61:45:2b:14:e2:58:07:49:85:
                    91:6a:5d:63:37:cd:a4:d9:87:14:e9:25:c8:77:27:
                    78:01:8c:ee:54:78:30:55:9b:e2:90:b3:a6:73:5d:
                    09:80:08:9d:5a:31:0b:69:56:33:30:82:e6:be:a5:
                    e9:d1:89:74:55:27:ae:14:d2:dc:e6:3a:88:ca:bd:
                    6c:ab:86:9d:bc:70:57:d4:e3:01:8e:3b:71:16:b7:
                    bd:ad:b8:cd:70:e9:82:42:e6:db:e4:0c:6e:3c:4b:
                    eb:4c:fa:c7:96:5c:44:48:67:25:ae:5a:4e:46:c0:
                    eb:48:8a:a0:71:b8:d9:26:89:95:08:e4:32:5b:ff:
                    97:d7:07:ed:17:81:83:1d:ee:3e:b2:d3:7d:f2:9b:
                    57:0f:01:7c:a8:5e:e8:78:35:ae:9f:47:3a:18:b5:
                    38:e5:01:08:a1:53:9f:96:0a:4f:62:78:c4:ba:fe:
                    04:ab:8c:7c:1c:2f:51:e0:8a:b0:5a:8c:fd:a4:86:
                    f0:49:1d:a5:6d:dd:72:c9:d7:88:6c:5e:c7:b3:ab:
                    2a:b2:82:f4:53:fe:e6:57:c5:2f:fa:14:19:87:60:
                    f4:a0:dd:5e:04:16:1d:fe:95:24:67:e9:4b:ab:71:
                    e7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:6E:FF:6D:D6:CE:C6:28:1B:29:FF:06:43:B4:0E:C5:DA:8B:9F:C3
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/P27_bdbOxigbKf8GQ7QOxdqLn8M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.210.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         49:39:bb:29:fa:24:8b:d0:a1:eb:57:45:ee:bc:fd:9c:1f:f9:
         ba:5d:cf:f9:7e:31:3c:9a:35:70:9b:64:81:ae:73:38:de:ca:
         62:ef:3b:ae:fa:84:5d:0c:09:bf:42:aa:07:c4:a9:78:dc:05:
         30:09:15:c0:9c:59:cd:3f:32:74:41:95:39:a5:aa:f1:10:17:
         5b:45:cb:88:69:ac:0e:bb:2d:e3:62:b3:f6:b2:3e:42:c6:8a:
         1c:71:cf:be:20:5d:be:a1:c5:96:d3:c9:23:6a:27:b1:e7:a7:
         12:34:be:eb:0b:46:8f:16:fa:8b:d6:a3:45:64:3e:89:45:18:
         99:32:0e:b5:28:4d:50:9e:07:d5:75:c4:4e:3c:ef:03:2a:80:
         c3:26:63:1b:09:e8:69:ee:c6:27:66:9e:99:33:af:55:19:97:
         8f:cf:c0:ab:eb:78:12:50:a1:a6:31:fd:4f:d4:dc:24:59:81:
         d0:70:8b:c6:14:0e:a8:d2:36:a9:44:9e:c3:aa:5b:89:b4:00:
         84:57:5b:c8:8b:2c:66:db:a4:49:30:a7:4a:b2:c3:54:ac:5f:
         63:3b:a4:02:37:0c:dd:a1:d7:a7:6f:ff:cb:a4:20:f8:03:46:
         41:35:a8:e6:38:6f:85:5a:cd:67:0a:40:90:44:e7:65:67:8d:
         64:c5:90:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----