Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/aRQHRr90ZyT-E33-_6kY-72KwE4.roa
File:                     aRQHRr90ZyT-E33-_6kY-72KwE4.roa (raw, json)
Hash identifier:          JtElFiOw8ummOglN0SxAwSYgCI6zsSiupDxjz1oqAmI=
Subject key identifier:   69:14:07:46:BF:74:67:24:FE:13:7D:FE:FF:A9:18:FB:BD:8A:C0:4E
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0852
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/aRQHRr90ZyT-E33-_6kY-72KwE4.roa
Signing time:             Tue 29 Sep 2020 09:51:54 +0000
ROA not before:           Tue 29 Sep 2020 09:51:54 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        123.205.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2130 (0x852)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:51:54 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=69140746BF746724FE137DFEFFA918FBBD8AC04E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1a:f2:32:cc:cb:fa:07:31:6b:3d:04:d1:66:
                    b6:c8:ff:fe:e2:ce:c2:37:80:b4:b5:6b:9e:50:1b:
                    da:37:a7:3d:53:f0:9b:1f:94:49:12:1a:e8:8d:90:
                    90:14:7e:66:8c:10:15:55:f2:9e:c5:61:32:6f:8c:
                    26:38:27:cd:1b:cf:e4:ed:c1:0f:b6:3a:7e:0b:2e:
                    76:9c:98:73:a0:81:f8:1f:55:fe:c1:7d:5f:92:4c:
                    db:9c:41:53:aa:c5:fc:3d:0a:3b:85:26:d0:d0:79:
                    5a:ed:75:5d:2e:6d:1f:ef:62:8e:ff:18:12:eb:3a:
                    3e:4c:03:15:b8:33:a0:ef:99:8c:60:78:f8:15:6c:
                    fb:65:34:df:e9:8b:79:0a:63:17:0b:4b:e8:16:b2:
                    29:1d:89:19:0d:78:15:1e:4f:41:06:2f:fc:d6:9a:
                    4c:66:e0:65:bb:5d:d0:20:9b:df:3f:5c:76:54:07:
                    f6:a2:0c:fc:c2:dc:d4:36:5c:70:5a:5b:10:21:a9:
                    29:95:d4:ee:4e:36:aa:31:f0:fc:3f:b1:96:43:a3:
                    d3:f8:fd:5b:04:98:42:47:a6:fc:7d:d3:62:e7:a1:
                    d7:03:38:6c:47:78:66:15:42:e1:17:57:00:45:86:
                    86:d0:9a:0f:aa:2c:bb:d5:02:d5:79:b2:d2:2b:15:
                    cb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:14:07:46:BF:74:67:24:FE:13:7D:FE:FF:A9:18:FB:BD:8A:C0:4E
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/aRQHRr90ZyT-E33-_6kY-72KwE4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.205.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c4:b1:c8:90:59:ff:f8:68:10:91:ed:c0:d5:f5:39:7a:df:d9:
         65:2b:6b:0d:18:f2:f1:bc:c0:5b:33:7f:86:15:4f:da:39:9f:
         52:ff:fb:34:2b:52:f4:09:b0:60:89:92:a3:c0:8a:ed:4c:23:
         7a:f3:29:f9:c5:74:9e:f5:ce:2d:cf:3d:5b:3e:c5:9d:65:ec:
         a7:25:98:67:2c:61:1e:54:d3:ad:1d:07:a8:a8:8c:54:76:86:
         21:c5:d8:6a:4c:93:48:e2:0f:b5:a9:3e:77:97:aa:af:b4:61:
         22:eb:56:c0:d0:13:c7:93:00:80:40:6d:27:5e:57:30:38:68:
         f4:9f:fa:54:bd:55:4b:75:71:b6:c2:0a:5f:eb:a2:0b:a3:8c:
         65:ec:38:24:7e:4e:4b:1b:b0:68:be:bf:9d:a8:e8:d1:d0:fb:
         8e:03:67:db:32:98:bd:51:1d:97:0c:db:6b:8c:03:b1:31:5b:
         66:6d:0c:85:2b:9e:48:a1:ac:35:1d:e1:0f:5d:f9:ea:0b:5c:
         18:cf:2e:24:09:5c:08:50:d6:6c:6d:74:49:dc:40:32:4c:03:
         2e:2a:e2:a3:35:43:5e:3d:c4:00:a8:7a:29:bb:90:8f:10:85:
         a5:d5:69:4b:06:91:e2:70:d5:e8:87:8c:08:91:3a:25:90:8a:
         0c:8d:e3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----