Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/U_uuiKrsT2Rc0DLxWBu0DF99zCM.roa
File:                     U_uuiKrsT2Rc0DLxWBu0DF99zCM.roa (raw, json)
Hash identifier:          873lT3on2usZVbOjAynwP6zbDEvTy5yFfoInhtPOAlI=
Subject key identifier:   53:FB:AE:88:AA:EC:4F:64:5C:D0:32:F1:58:1B:B4:0C:5F:7D:CC:23
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       08EE
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/U_uuiKrsT2Rc0DLxWBu0DF99zCM.roa
Signing time:             Tue 29 Sep 2020 09:52:36 +0000
ROA not before:           Tue 29 Sep 2020 09:52:36 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        106.105.128.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2286 (0x8ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:36 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=53FBAE88AAEC4F645CD032F1581BB40C5F7DCC23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:dd:33:da:85:67:d8:ea:7a:ef:bd:a2:35:8c:
                    34:f6:c4:36:e1:7b:e1:c7:8e:43:15:68:3c:79:48:
                    a3:6a:4e:a6:e8:fa:04:9d:bd:48:34:10:8c:ac:1e:
                    2d:df:e4:a0:27:37:3e:ce:67:ac:79:ee:a1:d0:11:
                    96:4f:e2:35:4b:ef:4a:5f:4c:22:ea:ef:d5:21:4c:
                    8c:c9:ea:84:b3:82:64:92:4d:56:eb:52:b0:12:3a:
                    e8:0d:1c:b3:3e:52:2e:06:ec:75:ef:e4:c3:94:ae:
                    32:d2:8f:01:86:01:db:86:68:72:b3:3c:be:14:6a:
                    ff:77:f2:d4:42:2c:89:92:e1:95:fd:53:2a:cd:da:
                    d7:ab:eb:fa:79:90:d7:3a:e9:4c:e0:34:98:aa:11:
                    fa:6b:f0:1b:15:49:28:a9:d5:c9:ce:89:77:d0:eb:
                    8f:b2:b1:0b:66:f9:95:7a:a6:bc:41:d6:51:bb:73:
                    21:4a:c6:c1:8e:e0:33:e4:53:e7:c4:05:97:b0:c9:
                    ab:e9:ec:16:76:dc:0d:c6:39:ba:c7:80:a5:81:d5:
                    c7:ba:74:78:55:05:50:ca:3a:8f:29:a6:18:6b:a8:
                    f6:25:2d:d1:fb:29:61:f8:cc:28:bf:9e:fa:69:a4:
                    b6:63:52:89:f5:76:04:02:6d:04:e9:cf:3f:58:03:
                    cc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:FB:AE:88:AA:EC:4F:64:5C:D0:32:F1:58:1B:B4:0C:5F:7D:CC:23
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/U_uuiKrsT2Rc0DLxWBu0DF99zCM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.105.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         92:e9:15:06:16:e1:77:16:17:38:e7:74:f6:dc:e3:37:7b:99:
         f2:35:68:73:b8:b7:17:8d:58:85:83:70:0b:a0:b9:b5:fb:ad:
         f3:6b:d4:47:37:ee:63:ec:09:2f:b1:47:b5:c4:62:00:92:a8:
         d4:dc:3c:53:c4:f0:12:03:23:11:1e:2e:14:8b:01:40:a6:01:
         20:c1:cf:62:81:4c:2c:45:13:1d:1b:b1:58:55:17:77:95:8c:
         8b:db:8d:54:b0:60:a2:33:e1:c5:4d:e2:c6:e6:9f:36:02:0d:
         99:07:5b:cb:46:25:23:9a:a6:6a:7b:38:96:5e:b5:15:26:19:
         44:77:0d:c8:60:88:ec:5c:d2:20:0e:80:36:27:14:49:e9:29:
         eb:f3:79:1f:89:04:86:42:c7:2d:ab:ff:6e:d7:f3:e8:d3:bb:
         82:ef:49:18:3a:8c:bb:c9:43:a7:2e:af:93:ed:87:9e:8b:80:
         6a:d9:a8:ee:3b:6f:bf:00:61:78:08:a8:b9:9d:9b:94:2a:55:
         70:1d:ef:69:ab:64:5e:23:7a:a8:4b:45:d8:44:d2:2a:83:0f:
         34:fa:3b:03:54:23:3e:3c:e3:0f:e8:53:0b:0d:65:2f:6c:a4:
         7c:d9:54:69:5d:1f:0b:31:4e:cb:d7:75:4f:72:d1:90:a2:c7:
         1d:22:71:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----