Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Rltcf5_RzcOSRpQ7a_kb3V-MFsw.roa
File:                     Rltcf5_RzcOSRpQ7a_kb3V-MFsw.roa (raw, json)
Hash identifier:          zaO2tiwJQBGvp8rDVimzTrQkR63Q7BCK/RpYo3LW8kQ=
Subject key identifier:   46:5B:5C:7F:9F:D1:CD:C3:92:46:94:3B:6B:F9:1B:DD:5F:8C:16:CC
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0E92
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Rltcf5_RzcOSRpQ7a_kb3V-MFsw.roa
Signing time:             Wed 29 Sep 2021 02:43:45 +0000
ROA not before:           Wed 29 Sep 2021 02:43:45 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9919
IP address blocks:        220.229.80.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3730 (0xe92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:45 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=465B5C7F9FD1CDC39246943B6BF91BDD5F8C16CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:8d:6d:b5:e4:ae:cd:e5:44:61:17:ec:18:14:
                    5d:10:5c:cf:10:f9:2a:77:bd:33:21:b7:0e:1b:4c:
                    67:81:32:b1:fa:86:6d:54:ac:08:20:3c:bf:98:56:
                    68:04:b9:51:77:0f:57:be:08:cc:9c:94:99:a2:f9:
                    58:11:98:90:f7:17:a6:fc:b2:09:3a:fa:9b:fa:b9:
                    86:b1:b2:f3:31:e8:5d:50:14:40:26:f9:2e:fc:fa:
                    7c:f7:31:25:ce:13:50:9b:9d:22:a9:85:48:ae:c0:
                    33:f5:e3:98:93:08:73:3b:c5:82:99:1c:a8:9c:d6:
                    59:24:c7:8e:76:9d:ba:40:e9:6d:53:06:c1:c0:2b:
                    16:a8:38:a9:24:c9:58:65:be:75:21:81:7c:50:36:
                    5c:a1:5b:e7:4f:a5:1c:37:c0:b9:09:12:d2:f7:b9:
                    4c:f4:94:b1:24:ef:33:32:60:5b:0e:2d:9a:2b:ba:
                    ce:33:45:64:84:aa:77:e8:07:43:54:06:8d:bc:13:
                    59:91:a1:d4:9e:48:e7:c3:cf:a6:66:17:cb:9b:a3:
                    ca:d1:aa:a2:36:d9:95:17:e2:e1:c8:54:e8:80:ba:
                    cb:e0:4c:54:e4:7a:93:f4:1d:96:cc:59:75:4d:f3:
                    c5:07:c8:6b:66:a6:62:58:d2:af:75:54:f2:32:bb:
                    97:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5B:5C:7F:9F:D1:CD:C3:92:46:94:3B:6B:F9:1B:DD:5F:8C:16:CC
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Rltcf5_RzcOSRpQ7a_kb3V-MFsw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.229.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4e:6c:4e:0c:10:ac:c2:be:e5:0a:7f:52:aa:f2:7e:3a:40:33:
         d4:e8:e9:43:27:11:75:a7:26:b6:02:f0:2e:39:d2:3b:7a:54:
         dc:e8:7f:12:cc:5b:da:f1:9d:7a:71:7d:36:fc:c6:54:49:19:
         ef:0d:f1:6f:a4:07:73:32:74:aa:ca:c8:5e:b5:24:43:71:e0:
         2c:1e:41:84:82:9d:17:f4:c3:5d:05:72:5a:4e:bd:80:dc:aa:
         ed:1d:76:16:6f:0b:4a:5b:9b:7f:cf:18:f4:51:88:4e:a2:b7:
         e8:dc:09:0a:37:11:12:44:10:82:5c:38:31:a9:15:60:5c:95:
         33:41:36:af:65:70:5c:5b:33:0f:bf:bc:96:0d:7c:0b:ac:ea:
         64:72:24:9b:28:8d:fa:a4:10:77:de:a4:de:46:4e:a1:0d:c9:
         1b:f7:e7:b6:17:1d:77:25:7c:7d:9e:0b:db:03:0d:9e:37:0d:
         ea:bf:e9:3e:6a:97:7f:d5:00:84:50:86:3d:05:dd:da:ab:69:
         fb:0a:06:12:f8:42:96:3c:35:82:08:b8:97:cd:72:68:ee:bf:
         a4:bd:5b:08:e7:6d:81:39:38:e7:c2:92:3a:d0:15:86:a2:0b:
         85:3e:8d:48:e2:2d:21:71:2d:f1:7d:e1:eb:aa:de:5f:78:67:
         55:21:0c:f5
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDpIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTA5Mjkw
MjQzNDVaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDQ2NUI1QzdGOUZEMUNE
QzM5MjQ2OTQzQjZCRjkxQkRENUY4QzE2Q0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDqjW215K7N5URhF+wYFF0QXM8Q+Sp3vTMhtw4bTGeBMrH6hm1U
rAggPL+YVmgEuVF3D1e+CMyclJmi+VgRmJD3F6b8sgk6+pv6uYaxsvMx6F1QFEAm
+S78+nz3MSXOE1CbnSKphUiuwDP145iTCHM7xYKZHKic1lkkx452nbpA6W1TBsHA
KxaoOKkkyVhlvnUhgXxQNlyhW+dPpRw3wLkJEtL3uUz0lLEk7zMyYFsOLZorus4z
RWSEqnfoB0NUBo28E1mRodSeSOfDz6ZmF8ubo8rRqqI22ZUX4uHIVOiAusvgTFTk
epP0HZbMWXVN88UHyGtmpmJY0q91VPIyu5dFAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQURltcf5/RzcOSRpQ7a/kb3V+MFswwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvUmx0Y2Y1X1J6Y09TUnBRN2Ffa2Iz
Vi1NRnN3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBNzlUDAN
BgkqhkiG9w0BAQsFAAOCAQEATmxODBCswr7lCn9SqvJ+OkAz1OjpQycRdacmtgLw
LjnSO3pU3Oh/Esxb2vGdenF9NvzGVEkZ7w3xb6QHczJ0qsrIXrUkQ3HgLB5BhIKd
F/TDXQVyWk69gNyq7R12Fm8LSlubf88Y9FGITqK36NwJCjcREkQQglw4MakVYFyV
M0E2r2VwXFszD7+8lg18C6zqZHIkmyiN+qQQd96k3kZOoQ3JG/fnthcddyV8fZ4L
2wMNnjcN6r/pPmqXf9UAhFCGPQXd2qtp+woGEvhCljw1ggi4l81yaO6/pL1bCOdt
gTk458KSOtAVhqILhT6NSOItIXEt8X3h66reX3hnVSEM9Q==
-----END CERTIFICATE-----