Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/SwzJ9jBZTfcGLvCuWCw6T1PqwaI.roa
File:                     SwzJ9jBZTfcGLvCuWCw6T1PqwaI.roa (raw, json)
Hash identifier:          /lcWFc0/ghcFSUTf2wBg+Ayr5EIgH5ChD/MRvqDhP24=
Subject key identifier:   4B:0C:C9:F6:30:59:4D:F7:06:2E:F0:AE:58:2C:3A:4F:53:EA:C1:A2
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0ED6
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/SwzJ9jBZTfcGLvCuWCw6T1PqwaI.roa
Signing time:             Wed 29 Sep 2021 02:44:03 +0000
ROA not before:           Wed 29 Sep 2021 02:44:03 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18049
IP address blocks:        112.105.0.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3798 (0xed6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:44:03 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=4B0CC9F630594DF7062EF0AE582C3A4F53EAC1A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:00:f4:b3:23:a7:0e:45:6c:e6:7d:3b:9e:7f:
                    8c:c2:f8:cd:64:b4:60:e4:08:81:d5:bb:eb:de:ef:
                    7a:26:fb:17:d1:a9:24:1e:8b:e5:33:40:26:8d:78:
                    ce:6f:6e:f7:41:77:65:d2:08:b0:23:19:f8:11:14:
                    c0:06:dd:b0:78:f4:05:76:ba:7f:45:d9:cc:82:cf:
                    02:6f:da:70:56:40:cf:d4:5f:32:51:f7:af:64:8b:
                    fb:58:4b:6e:49:20:17:e5:fe:d5:ed:37:30:03:da:
                    8f:1b:bf:29:3d:02:5d:61:b2:49:bb:e9:0f:fa:1d:
                    06:35:7b:a2:dc:94:21:d2:9f:a8:f4:fd:d4:12:03:
                    63:f9:d6:34:aa:52:04:c9:77:32:58:e6:ec:78:ef:
                    56:59:49:74:85:57:e2:8c:da:ac:c8:e9:43:7f:19:
                    dd:8f:1f:0d:ce:f2:19:c0:b0:cb:8d:dd:4f:15:08:
                    f7:6a:56:71:41:61:b7:84:66:dd:29:e1:ef:ca:00:
                    95:ba:af:f9:de:1a:38:5d:1e:59:94:22:54:e7:a2:
                    b8:87:d4:e4:18:08:95:a6:37:5a:17:a3:f2:21:e1:
                    d8:be:60:2d:31:b7:88:b6:73:6f:9b:f2:2a:ba:7b:
                    64:93:28:61:b3:00:d4:a8:96:d5:a8:b0:08:3a:ee:
                    0c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:0C:C9:F6:30:59:4D:F7:06:2E:F0:AE:58:2C:3A:4F:53:EA:C1:A2
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/SwzJ9jBZTfcGLvCuWCw6T1PqwaI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.105.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7f:3d:ad:39:5d:06:be:a2:3f:50:04:6b:74:f4:7a:70:c4:e8:
         63:aa:7d:71:7f:81:38:fa:5c:0d:e6:75:c1:bb:29:85:12:63:
         73:b4:e3:73:d3:a7:c6:40:87:66:2b:1a:4c:91:93:d8:3d:4a:
         cd:76:4d:54:ea:ba:0d:bc:28:d7:a6:f8:db:91:07:97:1c:e2:
         27:f1:70:04:b3:5d:b9:3c:d3:e6:de:ab:4d:a4:a2:94:8d:86:
         aa:c1:3a:25:54:42:68:b4:e7:dd:11:18:44:e0:58:aa:3a:24:
         cd:78:58:2c:3f:8a:05:23:fe:46:1f:4c:6d:6e:ae:5e:ea:0b:
         c0:44:e0:69:18:e8:7b:df:dd:17:68:56:8f:d6:8f:8b:c6:b8:
         ec:80:69:6c:f5:9f:ab:40:1e:fc:14:48:db:4f:10:e9:f5:2b:
         9c:17:f0:46:c0:d2:6a:24:c3:72:61:c4:74:d6:12:10:79:07:
         7a:a5:c8:c0:6b:46:e9:d3:40:46:27:db:15:67:b5:fa:fc:12:
         92:0d:98:8e:36:8c:7c:9c:66:6a:9e:9f:c4:cc:6a:72:95:ed:
         d3:11:6c:a5:e0:0c:c2:17:3d:f0:7f:1c:7f:7f:8d:5d:47:28:
         32:16:4e:c9:e3:20:01:a9:f4:b9:4e:a1:df:cc:d2:7d:7b:6c:
         8d:f1:9d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----