Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/PbXvR_BVhbyxBhmwoM42VfpyS4A.roa
File:                     PbXvR_BVhbyxBhmwoM42VfpyS4A.roa (raw, json)
Hash identifier:          xJzMTHphrqbe7/SdQenKpTDU61XKzHX92Dhyrp9CaGs=
Subject key identifier:   3D:B5:EF:47:F0:55:85:BC:B1:06:19:B0:A0:CE:36:55:FA:72:4B:80
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       09EF
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/PbXvR_BVhbyxBhmwoM42VfpyS4A.roa
Signing time:             Tue 10 Nov 2020 08:30:38 +0000
ROA not before:           Tue 10 Nov 2020 08:30:38 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131586
IP address blocks:        106.106.0.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2543 (0x9ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Nov 10 08:30:38 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=3DB5EF47F05585BCB10619B0A0CE3655FA724B80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9a:62:90:07:c9:a7:9a:a0:55:3f:09:c4:f6:
                    0e:d4:e7:53:8f:45:29:a0:65:3f:f6:d6:2b:55:37:
                    d5:79:42:aa:e5:f1:da:22:47:88:29:9e:8d:86:30:
                    f7:03:5b:93:40:9d:84:0a:65:3f:58:47:50:3c:17:
                    2b:81:e7:4a:cc:1e:df:72:2a:c0:5e:93:9a:06:7b:
                    0e:69:98:57:f2:d4:eb:07:a0:af:5b:82:fc:93:af:
                    6c:17:bd:03:b5:e6:de:e8:fe:86:a7:e2:c9:88:1d:
                    e3:e9:c3:5c:fd:39:99:d3:b6:d5:5e:35:a6:ad:27:
                    72:de:2e:a7:03:64:bb:d9:46:99:c7:8e:6f:97:fc:
                    e9:f6:1e:8c:72:58:0f:21:98:c8:17:12:2f:34:e3:
                    57:c3:42:54:00:bb:a7:be:16:5c:e1:5c:51:cb:5b:
                    c7:b9:73:bd:e9:50:06:24:53:ee:97:0b:a4:50:4b:
                    6d:c0:a1:91:e6:ff:c7:80:43:5a:0b:67:50:e4:07:
                    ed:6c:23:52:12:e9:44:37:fe:54:4b:af:51:30:33:
                    fc:d9:5f:bb:d1:8f:88:23:76:17:c1:a7:2a:2f:7c:
                    67:e5:cb:6c:97:10:d3:29:31:0a:c5:6f:bf:c8:76:
                    29:fa:4e:29:48:bd:ce:c3:0e:ec:d9:30:8f:d0:38:
                    f7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B5:EF:47:F0:55:85:BC:B1:06:19:B0:A0:CE:36:55:FA:72:4B:80
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/PbXvR_BVhbyxBhmwoM42VfpyS4A.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.106.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         84:8f:44:6d:25:ca:67:ac:d7:e5:d1:14:4e:5e:7c:e7:f5:a3:
         56:13:c7:0a:30:77:a8:e4:c8:05:39:c7:87:d4:eb:da:10:e1:
         78:19:45:a6:16:30:a9:ad:dc:ce:9c:fc:0b:56:5f:10:31:b1:
         80:2c:41:fb:e4:7e:e4:35:ec:c8:77:55:1f:38:3a:06:01:e3:
         ef:81:fb:00:99:23:47:6f:1b:82:15:89:e9:38:27:43:6b:46:
         80:e3:dd:2b:76:72:7a:16:31:ab:56:30:81:44:5b:89:33:7f:
         f5:1c:56:c6:f7:12:d9:37:d4:91:d7:45:ec:15:0d:e9:3d:92:
         8d:9c:65:c5:ff:d3:a9:55:a9:9a:fa:b8:7b:02:1f:40:e4:72:
         35:a5:0c:bc:cd:6f:1e:29:7c:3b:9b:4c:96:69:2b:b5:04:a9:
         9e:80:8a:b9:98:99:d3:3a:41:ff:68:3d:c3:19:01:b4:2e:0b:
         40:46:9b:36:db:60:3d:4b:dd:57:3d:4b:bb:cf:85:62:c8:4c:
         c2:1c:c3:5e:b2:d2:af:31:bf:b7:99:1c:52:6d:ba:f0:27:c8:
         4d:ea:91:38:b7:8d:5b:04:68:80:82:2d:e7:4b:1a:b2:de:e7:
         38:04:c8:8d:c0:bb:65:88:d7:28:2f:7b:0e:97:56:30:2f:fb:
         5c:d5:fc:3c
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCe8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMDExMTAw
ODMwMzhaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDNEQjVFRjQ3RjA1NTg1
QkNCMTA2MTlCMEEwQ0UzNjU1RkE3MjRCODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1mmKQB8mnmqBVPwnE9g7U51OPRSmgZT/21itVN9V5Qqrl8doi
R4gpno2GMPcDW5NAnYQKZT9YR1A8FyuB50rMHt9yKsBek5oGew5pmFfy1OsHoK9b
gvyTr2wXvQO15t7o/oan4smIHePpw1z9OZnTttVeNaatJ3LeLqcDZLvZRpnHjm+X
/On2HoxyWA8hmMgXEi8041fDQlQAu6e+FlzhXFHLW8e5c73pUAYkU+6XC6RQS23A
oZHm/8eAQ1oLZ1DkB+1sI1IS6UQ3/lRLr1EwM/zZX7vRj4gjdhfBpyovfGfly2yX
ENMpMQrFb7/Idin6TilIvc7DDuzZMI/QOPdTAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUPbXvR/BVhbyxBhmwoM42VfpyS4AwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvUGJYdlJfQlZoYnl4Qmhtd29NNDJW
ZnB5UzRBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB2pqADAN
BgkqhkiG9w0BAQsFAAOCAQEAhI9EbSXKZ6zX5dEUTl585/WjVhPHCjB3qOTIBTnH
h9Tr2hDheBlFphYwqa3czpz8C1ZfEDGxgCxB++R+5DXsyHdVHzg6BgHj74H7AJkj
R28bghWJ6TgnQ2tGgOPdK3ZyehYxq1YwgURbiTN/9RxWxvcS2TfUkddF7BUN6T2S
jZxlxf/TqVWpmvq4ewIfQORyNaUMvM1vHil8O5tMlmkrtQSpnoCKuZiZ0zpB/2g9
wxkBtC4LQEabNttgPUvdVz1Lu8+FYshMwhzDXrLSrzG/t5kcUm268CfITeqROLeN
WwRogIIt50sast7nOATIjcC7ZYjXKC97DpdWMC/7XNX8PA==
-----END CERTIFICATE-----