Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ss2gI-XKk8BBJKlFa0BYuEDjg6I.roa
File:                     Ss2gI-XKk8BBJKlFa0BYuEDjg6I.roa (raw, json)
Hash identifier:          TZQfBzAo7l0nbaR6dyk+12dPl0+es7XnMgX1MNPn9vs=
Subject key identifier:   4A:CD:A0:23:E5:CA:93:C0:41:24:A9:45:6B:40:58:B8:40:E3:83:A2
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0856
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ss2gI-XKk8BBJKlFa0BYuEDjg6I.roa
Signing time:             Tue 29 Sep 2020 09:51:55 +0000
ROA not before:           Tue 29 Sep 2020 09:51:55 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9919
IP address blocks:        218.210.0.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2134 (0x856)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:51:55 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4ACDA023E5CA93C04124A9456B4058B840E383A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:41:79:fe:31:34:68:ef:e0:89:48:2c:90:37:
                    72:cb:ad:33:02:4a:b0:a9:f5:cd:5b:e9:ff:28:e9:
                    3c:e4:ec:4f:83:be:5e:85:6c:a0:bb:14:ee:ce:8c:
                    cd:44:06:b1:22:25:ad:4b:2e:92:51:7e:71:ef:d2:
                    86:f7:51:3f:0b:e6:7a:70:0c:4a:d3:eb:0f:62:22:
                    c7:e4:04:5d:07:33:2b:8b:67:39:62:28:81:d2:37:
                    b0:a4:89:07:61:fa:72:11:f6:ff:a8:c7:94:9b:e3:
                    75:c5:4a:50:d9:cf:4c:fb:49:9c:11:ea:e3:4e:bb:
                    f5:b2:3e:ce:ce:bf:07:68:ef:d3:01:2e:bd:38:d6:
                    3c:75:95:75:5d:96:03:97:05:8d:fe:12:68:6d:bb:
                    32:a1:41:0d:53:fb:5c:b0:4b:77:28:13:6e:ee:b9:
                    18:f0:9d:f7:da:a8:b3:1f:60:30:a9:1e:1b:3d:f6:
                    75:58:c6:e4:68:16:97:de:68:ee:3e:9a:9a:6e:7e:
                    83:b5:0b:14:62:cc:9d:ba:00:cd:d4:c3:18:f3:7a:
                    34:05:6e:d7:cf:68:05:74:e5:b8:0d:18:3e:d5:5f:
                    e6:35:2a:8a:e2:64:8b:fb:31:3b:42:ef:fa:4a:8b:
                    4d:80:bd:8f:ad:98:10:54:39:3f:60:fd:37:ea:78:
                    0a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CD:A0:23:E5:CA:93:C0:41:24:A9:45:6B:40:58:B8:40:E3:83:A2
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ss2gI-XKk8BBJKlFa0BYuEDjg6I.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.210.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ad:34:5e:51:fc:f7:4b:c6:53:38:51:23:a7:ce:d7:34:42:d0:
         10:0f:fe:a5:44:88:cb:da:32:8e:1a:a6:3a:63:69:74:fd:6f:
         bb:40:7b:ac:db:88:b3:f8:54:26:92:ab:13:c4:e9:fa:4a:8f:
         fe:c9:79:ce:d3:92:db:14:cb:40:36:9e:78:c7:9a:ca:77:38:
         1c:13:cb:1e:d4:29:54:da:b2:c2:28:b9:f8:1d:c8:68:cf:03:
         af:85:41:f9:51:58:f8:5f:9b:b3:3e:6d:9a:88:64:34:33:22:
         0d:6a:37:f9:bc:0e:73:4c:e8:70:ab:3b:eb:b6:2e:dd:82:5c:
         fd:70:4f:13:1f:75:c3:bb:c6:27:8b:24:a5:8f:8a:25:a8:d5:
         84:17:93:cb:37:36:91:11:48:f4:6f:82:b2:a4:e2:a4:ac:7b:
         a0:40:a5:7a:32:ba:cd:8c:17:25:11:d3:f6:42:3c:38:e0:04:
         d2:c1:2b:01:95:ef:2e:03:e5:38:c4:f1:2e:08:b8:a5:e8:d8:
         f9:ac:83:55:cf:84:14:1a:ce:4f:f0:42:0c:ec:7b:7f:67:98:
         af:c1:5a:bb:4b:38:2b:ab:65:d2:67:de:4a:08:78:7e:3e:2b:
         94:26:40:67:42:af:6a:70:6b:33:3d:c9:5b:2a:bb:ca:e3:6a:
         fd:d2:3a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----