Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/UZIsdRSsyIskRqQgun2EurYkDrU.roa
File:                     UZIsdRSsyIskRqQgun2EurYkDrU.roa (raw, json)
Hash identifier:          4MWe36ZIgwPmY6s2jSgs/qzue9v99l2eEsy9byfysTU=
Subject key identifier:   51:92:2C:75:14:AC:C8:8B:24:46:A4:20:BA:7D:84:BA:B6:24:0E:B5
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0B73
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/UZIsdRSsyIskRqQgun2EurYkDrU.roa
Signing time:             Sun 07 Feb 2021 06:19:26 +0000
ROA not before:           Sun 07 Feb 2021 06:19:26 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9919
IP address blocks:        61.56.192.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2931 (0xb73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Feb  7 06:19:26 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=51922C7514ACC88B2446A420BA7D84BAB6240EB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4d:d7:d0:02:8c:2b:cf:ec:6a:f9:4a:46:51:
                    c1:84:57:56:7f:15:45:2a:ad:7e:89:fd:70:08:eb:
                    23:2b:cb:33:1f:39:7d:95:fa:89:84:c1:df:20:40:
                    f6:5d:5e:0c:77:3c:02:4c:7d:f8:97:e0:d8:0b:13:
                    e0:88:ec:7a:70:a8:ab:da:d2:d9:69:5b:49:c8:56:
                    47:4a:b6:73:54:26:0e:4b:a3:89:ec:fa:35:2e:05:
                    f6:90:02:60:0b:d4:b4:aa:5a:69:5b:c9:4b:2b:e0:
                    83:21:ed:46:7d:cf:43:8f:73:29:5f:2f:5a:37:ca:
                    49:7a:9c:f5:68:cb:39:93:b4:da:03:40:31:b4:56:
                    4c:2f:ae:f1:e8:aa:a0:93:28:d0:c4:71:27:45:99:
                    a6:96:5d:a8:67:29:ee:88:40:25:f2:85:09:8b:62:
                    59:15:e1:b3:95:fd:15:b2:5c:5c:8e:12:67:2b:ae:
                    31:95:33:32:7e:f8:16:9c:52:e0:d8:c2:0d:9b:91:
                    b4:95:4e:25:57:8b:c7:5a:63:13:31:bc:bb:61:54:
                    a9:d6:49:9a:9b:d3:bf:cb:c1:4a:6b:2c:24:a5:ca:
                    83:ff:1f:a8:26:78:35:53:8d:7c:46:9e:03:78:b8:
                    94:42:ea:a3:64:f2:85:1f:d8:b4:47:11:90:c0:59:
                    a9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:92:2C:75:14:AC:C8:8B:24:46:A4:20:BA:7D:84:BA:B6:24:0E:B5
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/UZIsdRSsyIskRqQgun2EurYkDrU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         07:f1:d2:e3:b6:b0:76:d5:6f:20:11:2a:d4:b8:71:6d:1e:c5:
         ee:12:8e:e6:03:5b:10:83:92:25:b8:10:6f:85:88:4a:b3:61:
         d7:08:5e:e3:9f:f2:2e:9b:bc:80:be:8b:62:d4:f8:da:7e:df:
         b7:69:ab:4d:f6:f1:9a:f3:87:7a:17:0d:ce:56:38:e8:7b:90:
         b3:d4:dd:ef:8f:8c:db:ca:8d:c5:79:96:15:42:92:05:d3:ec:
         62:ca:d8:cb:21:fd:9e:82:2d:19:28:06:bd:47:20:22:d6:d2:
         01:16:cc:15:3e:03:52:50:ce:a0:a0:5d:22:20:64:71:ca:60:
         d3:31:18:bb:04:ed:39:e7:c9:54:7c:37:08:64:a2:98:23:a8:
         81:d1:1a:7d:96:84:45:d4:4d:b3:c0:06:38:a1:2f:fa:77:6e:
         c8:56:0b:57:f2:b4:4a:bf:60:f1:aa:c4:b1:e8:c0:8d:fb:f7:
         36:ec:69:ea:97:4d:84:bf:6a:9f:f4:9e:1a:08:46:f8:14:27:
         a1:12:fd:4c:06:93:4a:c3:42:31:69:5d:9b:b3:23:73:d8:2a:
         c5:f8:51:1f:7f:9d:f7:9a:74:82:77:59:6a:fe:be:76:d5:08:
         4c:c7:f5:9c:bd:0d:0d:2b:83:ed:53:c4:78:36:bd:35:3d:f7:
         f6:97:2c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----