Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/VZ2NW_qdABRHV2hm4ZX15A81wyQ.roa
File:                     VZ2NW_qdABRHV2hm4ZX15A81wyQ.roa (raw, json)
Hash identifier:          G5BBbfQRU0BhoX3p5PQxbqC44WZEZkItI3uWtJFLUO8=
Subject key identifier:   55:9D:8D:5B:FA:9D:00:14:47:57:68:66:E1:95:F5:E4:0F:35:C3:24
Certificate issuer:       /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial:       09F4
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/VZ2NW_qdABRHV2hm4ZX15A81wyQ.roa
Signing time:             Sun 07 Feb 2021 06:34:47 +0000
ROA not before:           Sun 07 Feb 2021 06:34:47 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9919
IP address blocks:        192.72.128.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2548 (0x9f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
        Validity
            Not Before: Feb  7 06:34:47 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=559D8D5BFA9D001447576866E195F5E40F35C324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:b8:d9:62:41:93:83:09:61:c0:2f:04:92:c2:
                    14:a4:b1:e2:c2:45:e7:f1:16:1b:27:15:76:5e:0b:
                    33:e7:df:21:37:48:bf:90:34:fe:28:ef:d3:47:43:
                    66:b0:50:2d:c2:5a:f3:82:4c:c9:73:d5:a5:59:e5:
                    d5:46:d3:70:2b:e1:3a:82:28:c4:6c:bb:97:87:28:
                    48:1b:45:8e:ea:26:83:51:44:17:b9:3d:15:de:99:
                    8b:b8:73:5d:ae:26:74:8d:c5:d6:74:28:06:41:ac:
                    81:e2:ea:7f:c6:fe:1d:27:eb:78:4d:99:b3:39:09:
                    1b:b1:70:f9:1a:77:d6:21:19:a1:5b:63:16:62:66:
                    39:e0:66:8d:16:06:13:b3:94:84:13:e1:c1:e9:e0:
                    9b:c7:e9:28:2d:07:67:ad:23:8e:3b:75:88:4a:91:
                    5f:a8:8f:43:96:11:8d:7f:03:a8:2d:cb:45:9f:f8:
                    0f:13:a5:f3:28:55:04:13:c0:1d:aa:58:48:9b:89:
                    51:af:07:03:33:40:66:f1:60:75:ae:6e:17:e9:29:
                    43:1b:7f:62:8b:35:c0:6f:6c:41:44:8c:d0:ed:ea:
                    87:88:2b:9c:05:f2:bd:1e:f0:5f:8c:26:c4:d9:f4:
                    29:8b:3a:b6:08:f8:e7:33:5f:a1:68:84:70:e4:aa:
                    0f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:9D:8D:5B:FA:9D:00:14:47:57:68:66:E1:95:F5:E4:0F:35:C3:24
            X509v3 Authority Key Identifier:
                keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/VZ2NW_qdABRHV2hm4ZX15A81wyQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.72.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         63:75:79:41:13:93:57:0c:b0:0b:7b:14:c3:b1:81:68:c3:58:
         02:60:31:b0:bb:09:c8:3f:3c:b6:05:70:e8:62:84:8e:24:3d:
         ea:e2:d5:2c:64:e2:70:4d:f1:45:ea:cf:f5:2a:ce:07:92:97:
         2d:73:2e:d7:4b:9e:10:2f:14:29:27:1c:1e:6a:6b:9e:f7:95:
         f3:88:fa:2b:c0:6d:91:91:5e:1a:ca:27:dd:70:e5:1d:ff:21:
         83:b2:93:e3:6a:04:5f:b4:fb:9e:dc:54:1c:59:9e:3e:10:55:
         24:56:22:f2:30:43:8b:a0:d2:af:c4:b7:8c:db:84:32:d1:ba:
         8b:74:61:68:01:e6:7d:77:c8:69:c0:f1:4b:b5:e3:6b:2b:d9:
         1d:e0:af:15:fe:75:8f:c2:12:70:81:d7:ea:df:c0:bf:f8:87:
         f5:5f:81:39:35:c2:ee:83:94:ba:ff:cf:6a:61:5d:82:a3:c6:
         36:56:66:95:01:c3:c5:e4:66:53:72:e1:f6:15:f9:78:23:ef:
         4b:f2:08:02:b1:9a:7c:31:02:f1:d0:c0:6a:93:03:d4:60:0d:
         ff:29:b2:8c:28:ac:d9:89:c5:5b:24:35:a5:df:80:23:99:99:
         dd:af:8a:70:86:ec:88:46:b6:e6:e2:d6:88:66:38:c5:01:5d:
         96:2a:ed:11
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCfQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB
NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yMTAyMDcw
NjM0NDdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDU1OUQ4RDVCRkE5RDAw
MTQ0NzU3Njg2NkUxOTVGNUU0MEYzNUMzMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD7uNliQZODCWHALwSSwhSkseLCRefxFhsnFXZeCzPn3yE3SL+Q
NP4o79NHQ2awUC3CWvOCTMlz1aVZ5dVG03Ar4TqCKMRsu5eHKEgbRY7qJoNRRBe5
PRXemYu4c12uJnSNxdZ0KAZBrIHi6n/G/h0n63hNmbM5CRuxcPkad9YhGaFbYxZi
ZjngZo0WBhOzlIQT4cHp4JvH6SgtB2etI447dYhKkV+oj0OWEY1/A6gty0Wf+A8T
pfMoVQQTwB2qWEibiVGvBwMzQGbxYHWubhfpKUMbf2KLNcBvbEFEjNDt6oeIK5wF
8r0e8F+MJsTZ9CmLOrYI+OczX6FohHDkqg9dAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUVZ2NW/qdABRHV2hm4ZX15A81wyQwHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC
1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90
S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvVloyTldfcWRBQlJIVjJobTRaWDE1
QTgxd3lRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBsBIgDAN
BgkqhkiG9w0BAQsFAAOCAQEAY3V5QROTVwywC3sUw7GBaMNYAmAxsLsJyD88tgVw
6GKEjiQ96uLVLGTicE3xRerP9SrOB5KXLXMu10ueEC8UKSccHmprnveV84j6K8Bt
kZFeGson3XDlHf8hg7KT42oEX7T7ntxUHFmePhBVJFYi8jBDi6DSr8S3jNuEMtG6
i3RhaAHmfXfIacDxS7XjayvZHeCvFf51j8IScIHX6t/Av/iH9V+BOTXC7oOUuv/P
amFdgqPGNlZmlQHDxeRmU3Lh9hX5eCPvS/IIArGafDEC8dDAapMD1GAN/ymyjCis
2YnFWyQ1pd+AI5mZ3a+KcIbsiEa25uLWiGY4xQFdlirtEQ==
-----END CERTIFICATE-----