Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/blpjtQitVDBFszaPvpf0bNsBrvU.roa
File:                     blpjtQitVDBFszaPvpf0bNsBrvU.roa (raw, json)
Hash identifier:          bera8a4/jqMYGdKQ/EiZnWTzz8RbBBN8u9lAnzmhuvo=
Subject key identifier:   6E:5A:63:B5:08:AD:54:30:45:B3:36:8F:BE:97:F4:6C:DB:01:AE:F5
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0872
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/blpjtQitVDBFszaPvpf0bNsBrvU.roa
Signing time:             Tue 29 Sep 2020 09:52:02 +0000
ROA not before:           Tue 29 Sep 2020 09:52:02 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9919
IP address blocks:        106.106.220.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2162 (0x872)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:02 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6E5A63B508AD543045B3368FBE97F46CDB01AEF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b0:9e:97:78:33:6a:4e:cf:13:ce:94:97:dd:
                    e3:04:ab:d3:f9:8f:43:45:56:c1:d7:02:d3:73:08:
                    b4:b2:18:42:af:f8:8e:ef:ef:68:79:5d:df:42:e5:
                    f6:8b:67:46:a7:04:5f:14:a4:a9:21:19:57:9e:df:
                    d1:a0:f1:32:8e:6b:1d:ff:95:a3:37:91:75:3b:db:
                    cf:f3:6b:9b:0c:f7:fc:cc:0c:e2:fb:e2:1e:2f:65:
                    0c:4e:d0:f5:c3:c3:c7:7f:3c:ca:10:2f:ff:2f:27:
                    8b:27:2c:4c:59:8d:e8:12:b3:61:47:3c:18:75:cf:
                    7f:e0:4a:2d:16:7a:62:e2:77:38:d4:f7:83:0d:e8:
                    7c:48:5d:18:01:16:84:71:a1:0b:a8:d7:b9:04:45:
                    2e:38:25:8e:a2:20:05:53:82:71:17:ed:d5:79:cf:
                    20:0c:25:ef:8b:07:43:4a:2e:d0:c7:fa:d1:00:7a:
                    07:51:12:8a:38:d9:c0:ac:27:99:68:87:f3:01:5e:
                    07:76:22:e2:3a:94:50:cb:e5:c8:e6:a6:25:19:59:
                    24:c3:c3:29:35:9b:b4:3d:c6:d2:ab:ce:c0:65:5f:
                    d2:64:67:ca:66:33:e6:c4:b5:17:d0:8d:90:a6:1a:
                    4d:39:4d:ee:5e:7a:43:53:b2:fe:f1:86:19:1c:28:
                    6b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5A:63:B5:08:AD:54:30:45:B3:36:8F:BE:97:F4:6C:DB:01:AE:F5
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/blpjtQitVDBFszaPvpf0bNsBrvU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.106.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:55:9e:1f:5c:d8:33:f9:5d:95:f5:a2:16:51:62:2d:f6:f4:
         8c:44:8b:49:8b:61:2b:b0:11:47:3f:aa:43:42:ea:25:de:9c:
         52:f6:23:27:46:3e:ee:0e:e9:71:67:ca:bb:b4:37:89:89:3f:
         4b:5f:cb:a8:d7:11:31:92:12:23:60:58:13:7b:c1:e3:b0:ad:
         d8:be:3d:d4:49:c2:65:f7:0c:67:b7:9a:8c:42:16:06:8b:2b:
         79:92:ae:df:07:6a:2e:99:24:1b:dd:25:93:36:6f:27:df:6e:
         55:58:e1:33:14:87:e2:e2:52:18:a5:d2:0f:df:83:73:15:5f:
         b6:61:6f:82:3d:0a:37:d4:0e:7e:f1:d0:16:22:7e:e5:17:26:
         65:94:bd:4d:70:cb:13:ef:06:55:92:48:6e:36:73:1a:67:f6:
         7b:11:8f:cc:96:04:4c:a7:ab:a3:c6:ca:fa:2a:34:70:b9:b8:
         de:08:49:ce:47:42:2a:1f:f8:09:c2:90:b0:50:e5:8a:37:37:
         fb:01:d5:1e:04:56:e7:4e:8e:4c:3d:4e:76:b3:1c:02:89:49:
         98:e2:bd:72:c9:5f:ec:b3:68:21:e4:b6:12:83:02:fc:6d:27:
         1f:33:bf:3f:2e:70:c4:fb:52:93:c7:f4:24:4b:fb:c3:ed:36:
         e1:1e:e7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----