Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Y6gqmuUGSbGsbCRdqQZHWYhLpFw.roa
File:                     Y6gqmuUGSbGsbCRdqQZHWYhLpFw.roa (raw, json)
Hash identifier:          y6H+L6qUyGVUQgchwW/dKorBcb5C7KLp4W8R9rHEpiU=
Subject key identifier:   63:A8:2A:9A:E5:06:49:B1:AC:6C:24:5D:A9:06:47:59:88:4B:A4:5C
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       08A0
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Y6gqmuUGSbGsbCRdqQZHWYhLpFw.roa
Signing time:             Tue 29 Sep 2020 09:52:14 +0000
ROA not before:           Tue 29 Sep 2020 09:52:14 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131584
IP address blocks:        106.105.181.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2208 (0x8a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:14 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=63A82A9AE50649B1AC6C245DA9064759884BA45C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:da:96:3d:09:fc:28:13:18:1e:1e:ad:b5:0b:
                    3e:35:33:f9:6a:e8:b2:7b:f3:74:21:c8:3e:ac:93:
                    7c:4d:69:7c:e0:4b:a5:b2:e5:88:86:0a:d9:97:82:
                    39:7e:1f:55:45:54:d8:2d:50:c4:cb:56:90:9f:04:
                    29:b4:7f:5b:c3:16:8b:9b:3e:13:02:d4:bf:62:64:
                    f9:ba:e3:17:c0:f9:53:9a:1c:1b:d3:45:b1:a9:50:
                    a7:20:13:e9:df:e8:f7:f2:93:09:14:09:e5:d7:d4:
                    1c:e0:64:bb:c0:3f:af:b4:f7:03:05:fa:40:cf:aa:
                    7c:76:98:54:84:5c:7b:0f:23:18:1a:57:50:8f:56:
                    f3:cf:69:1c:6b:43:5a:08:b7:df:94:d0:44:09:77:
                    78:d0:0b:28:59:64:9a:ee:f8:99:08:6b:d0:72:dc:
                    4e:34:64:1b:a5:58:ec:29:a8:47:94:f9:5a:f7:be:
                    0a:83:19:65:92:33:1d:81:ca:47:fb:e0:a2:3c:23:
                    c1:74:1f:3b:0e:29:67:62:ed:3e:99:c3:e0:90:44:
                    bd:bb:fe:88:67:86:d4:b3:0e:11:45:e6:4b:06:a1:
                    92:45:a2:f2:76:72:ce:ee:9f:e7:1f:f8:98:45:56:
                    13:4e:ad:cc:c7:7a:ad:36:a8:2f:87:53:78:fc:cf:
                    3b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A8:2A:9A:E5:06:49:B1:AC:6C:24:5D:A9:06:47:59:88:4B:A4:5C
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Y6gqmuUGSbGsbCRdqQZHWYhLpFw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.105.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:4e:4c:8c:a0:5e:56:5f:b6:55:d7:51:f9:c4:e9:6b:6c:4b:
         42:d7:f2:b1:34:db:65:6e:72:eb:d7:f7:c7:d2:e9:41:d8:5d:
         ac:21:1f:88:d8:4c:3b:af:e8:e3:7e:e7:1b:36:76:9d:00:fd:
         f8:5b:13:a9:ba:d2:2b:64:de:d9:d1:3c:b5:27:46:f1:6d:fb:
         55:32:60:aa:40:62:58:94:68:c7:2d:d8:39:d8:e2:f9:14:89:
         83:4d:1a:36:ee:17:e2:90:3f:99:c3:73:e6:02:15:3f:33:92:
         58:97:5c:96:b1:22:54:0f:d1:ba:07:40:b8:24:dd:8d:58:13:
         a1:be:88:dd:ea:52:12:a5:2d:b1:63:66:dc:6c:cc:87:cf:07:
         9b:c2:cf:15:1d:a4:c1:c5:c8:24:23:6a:a1:1c:f8:40:9d:12:
         f4:c9:74:f1:18:9e:dd:4b:ee:b8:1c:58:bf:b1:ad:fa:e3:db:
         76:9b:19:3b:03:6f:c8:81:a4:80:fa:5f:6f:f0:0b:ab:a3:25:
         c9:a6:d0:4a:25:a3:25:03:ee:ad:a6:0c:b8:f3:ea:0c:c6:5b:
         83:cf:4e:e5:ea:83:89:b0:64:2b:87:89:eb:f5:c7:61:fc:70:
         45:c3:36:ab:67:7f:c6:24:55:81:76:5a:d5:aa:a3:7d:b6:5c:
         1b:77:9e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----