Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Xs2P7HVlbUB6oVKIjEQ3f3jfwX0.roa
File:                     Xs2P7HVlbUB6oVKIjEQ3f3jfwX0.roa (raw, json)
Hash identifier:          mZbLQ+ukJR5+uAx6sf0qscQla/dwjT22+RqoYTfh1UE=
Subject key identifier:   5E:CD:8F:EC:75:65:6D:40:7A:A1:52:88:8C:44:37:7F:78:DF:C1:7D
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0859
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Xs2P7HVlbUB6oVKIjEQ3f3jfwX0.roa
Signing time:             Tue 29 Sep 2020 09:51:56 +0000
ROA not before:           Tue 29 Sep 2020 09:51:56 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18419
IP address blocks:        210.244.97.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2137 (0x859)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:51:56 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5ECD8FEC75656D407AA152888C44377F78DFC17D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:78:dc:72:29:23:c5:60:5a:9b:a9:e0:b5:87:
                    b3:fd:1c:3b:ea:7d:61:cb:6c:60:ac:ec:58:93:18:
                    5a:5c:28:2e:ca:57:e7:b3:01:43:19:32:a5:4b:39:
                    0e:11:85:4e:58:ea:11:94:c6:15:e9:eb:42:17:f6:
                    52:1a:64:f1:e5:23:c0:80:3c:9d:f6:d0:e6:29:d2:
                    62:04:1c:40:b9:40:7d:51:5a:11:bf:87:e5:d8:91:
                    7a:9b:b8:df:84:ae:34:be:0b:f1:d5:2b:60:79:8a:
                    db:d4:c5:4b:3e:d0:88:17:53:c8:60:b3:1b:ad:72:
                    85:79:cb:2c:70:28:e6:cd:5f:c2:eb:d4:ec:ba:20:
                    2f:3e:aa:7b:b5:8f:41:59:eb:07:2f:c4:eb:1b:e1:
                    91:8d:dd:9b:33:83:ae:60:21:69:a6:2f:ca:5f:70:
                    23:f0:97:73:57:7b:ea:eb:e2:1f:f6:39:af:b4:03:
                    92:0a:d0:30:4b:54:4d:ce:0c:5b:14:5e:47:4a:de:
                    66:dc:58:2a:8c:d4:ae:20:bc:41:61:12:2f:fd:ec:
                    3d:40:59:05:4c:b0:50:bb:7e:f5:53:83:97:b6:f8:
                    1e:c7:7d:d1:cc:a8:5c:36:ea:b5:19:b0:fd:3e:8e:
                    98:2f:b4:ab:f9:af:bd:93:3e:36:c0:f9:aa:b3:58:
                    af:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:CD:8F:EC:75:65:6D:40:7A:A1:52:88:8C:44:37:7F:78:DF:C1:7D
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Xs2P7HVlbUB6oVKIjEQ3f3jfwX0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.244.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:d5:23:bc:42:0b:5c:13:20:fb:fd:84:71:05:3c:31:c4:42:
         0d:26:fe:77:f9:cf:b5:84:86:57:20:cb:65:1b:16:8e:39:54:
         81:30:7c:a9:a1:fb:b5:3f:b8:c8:7b:08:55:eb:6d:e2:f7:de:
         72:79:91:d4:1c:2b:ac:5b:d3:9c:ef:ca:90:8c:d7:70:fd:d1:
         d2:9e:5b:24:6d:5f:95:3a:2e:4b:4a:c9:cf:22:89:78:a3:cc:
         5b:58:3c:3d:a3:ee:7b:7e:5b:ae:ca:ef:29:7a:83:e8:30:26:
         d2:c3:ae:58:bf:18:3b:d3:f4:34:60:37:d3:20:0c:35:cf:6f:
         47:04:6c:24:79:9d:69:cf:ff:d3:19:e5:83:92:c5:31:79:63:
         09:f0:05:0b:dc:80:5d:cc:ff:94:57:c5:db:5c:06:bd:bd:e5:
         16:b9:7e:d5:82:dd:34:8f:d9:54:f9:65:f0:1e:45:c5:41:71:
         ad:23:56:64:4e:22:5f:28:c2:18:07:8e:05:09:f3:3e:57:8a:
         45:51:b0:4f:9e:1d:4a:e4:a4:9b:1c:0a:a9:a6:00:41:18:a9:
         1b:59:53:f2:07:13:1d:09:47:55:29:bb:40:7b:39:f3:1d:d7:
         c0:6f:15:13:bb:9e:56:b7:7a:fd:6b:95:0c:8a:ae:ef:67:1c:
         1d:1c:10:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----