Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/YrkqmkqFWxbWUcDbO9atjblw5tg.roa
File:                     YrkqmkqFWxbWUcDbO9atjblw5tg.roa (raw, json)
Hash identifier:          6bX7g/NEfd9XzPU7++nFot7lyGYoAYPEFpgc/lbPooM=
Subject key identifier:   62:B9:2A:9A:4A:85:5B:16:D6:51:C0:DB:3B:D6:AD:8D:B9:70:E6:D8
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0896
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/YrkqmkqFWxbWUcDbO9atjblw5tg.roa
Signing time:             Tue 29 Sep 2020 09:52:11 +0000
ROA not before:           Tue 29 Sep 2020 09:52:11 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        218.210.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2198 (0x896)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:11 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=62B92A9A4A855B16D651C0DB3BD6AD8DB970E6D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e3:a5:10:2d:6b:d3:e4:c8:85:85:e2:e7:7d:
                    80:f7:3e:19:5e:4b:bd:79:08:67:9a:90:2c:ae:dd:
                    bd:e0:02:79:c9:8e:01:cd:db:e2:cf:9e:98:07:cd:
                    18:fc:3a:f4:2e:67:27:f9:78:10:f8:73:e8:8f:9a:
                    ce:e8:71:e6:4c:18:0c:9c:c0:00:dc:3e:0a:7b:5a:
                    cd:bc:3b:ab:ab:cc:af:15:fc:ef:3d:75:85:47:e2:
                    47:f1:1d:5f:d0:3a:34:6e:7b:83:08:98:e6:b1:b3:
                    2b:18:12:44:75:59:75:d3:f5:83:40:36:f5:76:3c:
                    3f:ef:c9:f3:b5:c7:9e:c7:4f:b6:ff:95:04:87:65:
                    f0:2c:a7:79:43:72:92:12:4c:e6:39:b2:47:2d:b6:
                    04:a8:1d:31:85:26:ec:85:ef:ee:c1:a2:14:28:79:
                    32:af:c7:38:9e:f0:55:ef:2b:8b:5d:99:ee:13:63:
                    fc:38:7f:15:4c:e4:cf:8c:fc:ed:75:66:34:1a:93:
                    f2:97:52:9c:b0:d4:19:f3:1b:3f:49:06:56:b2:5e:
                    8a:69:55:44:ac:6b:55:b7:da:9a:af:fb:6a:37:4b:
                    3f:e6:3b:f1:03:cc:1a:e7:3c:4b:d2:dc:83:b2:1a:
                    dc:97:e6:d9:0e:1e:6e:fa:2c:48:21:58:24:c0:c5:
                    ac:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B9:2A:9A:4A:85:5B:16:D6:51:C0:DB:3B:D6:AD:8D:B9:70:E6:D8
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/YrkqmkqFWxbWUcDbO9atjblw5tg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.210.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ca:8b:8f:0c:78:02:e7:23:4d:c0:79:7c:28:9c:33:51:12:f7:
         d7:fb:35:67:06:41:c6:fe:ff:c5:c5:80:d6:b5:8a:07:17:9d:
         c3:6d:2a:f9:f0:ce:84:da:93:d0:be:7f:65:eb:6b:66:eb:3e:
         fb:15:18:1a:77:46:5d:14:77:db:1f:db:51:5e:be:00:33:4a:
         7a:7a:48:9c:ba:ce:97:ad:1b:88:e9:5f:2a:97:0e:ee:8c:b9:
         83:c1:6e:62:1a:f8:33:ac:f7:13:0c:75:8b:a4:a7:06:38:0b:
         0b:e5:20:9f:6e:19:db:2d:f4:f1:47:96:51:3a:fc:43:cf:e1:
         0b:8e:6f:fd:5f:dc:c2:9c:85:a2:c7:d6:60:6c:9a:a9:b6:5c:
         56:bf:5e:58:f2:bc:6c:da:6e:42:fc:44:2e:c6:a6:63:69:fa:
         e0:2a:b9:0d:a6:65:af:28:c8:fb:91:f6:7b:a3:d2:93:8e:f5:
         e7:d9:61:69:3f:34:49:e9:ec:67:71:db:c7:a4:eb:2b:60:a8:
         d5:74:20:14:89:d6:43:7f:6f:df:86:1f:4b:a4:62:2e:c7:71:
         b6:48:19:be:87:13:c6:08:8c:fb:07:18:63:25:26:31:bf:d9:
         7a:6e:ef:ab:59:51:07:35:16:6e:b4:af:42:51:89:bb:f5:08:
         51:6c:14:3c
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICCJYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMDA5Mjkw
OTUyMTFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDYyQjkyQTlBNEE4NTVC
MTZENjUxQzBEQjNCRDZBRDhEQjk3MEU2RDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCm46UQLWvT5MiFheLnfYD3PhleS715CGeakCyu3b3gAnnJjgHN
2+LPnpgHzRj8OvQuZyf5eBD4c+iPms7oceZMGAycwADcPgp7Ws28O6urzK8V/O89
dYVH4kfxHV/QOjRue4MImOaxsysYEkR1WXXT9YNANvV2PD/vyfO1x57HT7b/lQSH
ZfAsp3lDcpISTOY5skcttgSoHTGFJuyF7+7BohQoeTKvxzie8FXvK4tdme4TY/w4
fxVM5M+M/O11ZjQak/KXUpyw1BnzGz9JBlayXoppVUSsa1W32pqv+2o3Sz/mO/ED
zBrnPEvS3IOyGtyX5tkOHm76LEghWCTAxaxbAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUYrkqmkqFWxbWUcDbO9atjblw5tgwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvWXJrcW1rcUZXeGJXVWNEYk85YXRq
Ymx3NXRnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANrSMA0G
CSqGSIb3DQEBCwUAA4IBAQDKi48MeALnI03AeXwonDNREvfX+zVnBkHG/v/FxYDW
tYoHF53DbSr58M6E2pPQvn9l62tm6z77FRgad0ZdFHfbH9tRXr4AM0p6ekicus6X
rRuI6V8qlw7ujLmDwW5iGvgzrPcTDHWLpKcGOAsL5SCfbhnbLfTxR5ZROvxDz+EL
jm/9X9zCnIWix9ZgbJqptlxWv15Y8rxs2m5C/EQuxqZjafrgKrkNpmWvKMj7kfZ7
o9KTjvXn2WFpPzRJ6exncdvHpOsrYKjVdCAUidZDf2/fhh9LpGIux3G2SBm+hxPG
CIz7BxhjJSYxv9l6bu+rWVEHNRZutK9CUYm79QhRbBQ8
-----END CERTIFICATE-----