Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/dPFOZV8f6W3xH7NAf4FeUo-O37w.roa
File:                     dPFOZV8f6W3xH7NAf4FeUo-O37w.roa (raw, json)
Hash identifier:          esK3nm5gbUXqtWBIvpsvbie6i+S5Yl4xhD1fgpsJAtw=
Subject key identifier:   74:F1:4E:65:5F:1F:E9:6D:F1:1F:B3:40:7F:81:5E:52:8F:8E:DF:BC
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0883
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/dPFOZV8f6W3xH7NAf4FeUo-O37w.roa
Signing time:             Tue 29 Sep 2020 09:52:07 +0000
ROA not before:           Tue 29 Sep 2020 09:52:07 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18049
IP address blocks:        112.105.32.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2179 (0x883)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:07 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=74F14E655F1FE96DF11FB3407F815E528F8EDFBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:00:e8:60:e0:7a:8a:e0:40:60:8e:2a:41:8a:
                    23:ee:2a:4f:03:3c:ad:fb:c0:ae:f7:45:ec:f9:5b:
                    38:40:2e:9c:82:19:33:b9:23:8c:bb:a1:c0:3d:b9:
                    65:63:57:ed:ef:22:72:1d:9e:85:2e:af:67:73:71:
                    19:e4:91:c1:b3:f1:cb:9a:ec:80:87:07:1f:b5:89:
                    d0:be:50:d0:4b:4b:a5:16:d2:c2:42:f3:c1:f9:b1:
                    57:d2:45:03:28:87:86:2e:d2:af:6a:d3:4e:0d:25:
                    e1:e4:a1:9b:cd:6f:ed:47:19:23:3c:cf:b9:f0:b7:
                    dc:8a:eb:46:61:26:35:79:b0:64:99:84:f7:0a:f6:
                    83:8c:57:88:c4:80:31:9e:37:90:e6:2b:e6:5c:78:
                    86:6c:fd:a1:bc:a8:68:b0:ec:74:86:1f:c3:f5:38:
                    b2:03:24:36:8f:0b:db:40:b1:d7:e1:19:17:41:33:
                    13:7a:ff:b7:a6:d7:bb:a0:8d:43:bc:76:4e:29:ef:
                    5b:24:91:41:89:e1:c0:05:c4:e7:fb:a6:70:bb:d9:
                    dd:4f:97:eb:20:e5:ac:d8:54:19:05:b8:c6:14:21:
                    96:56:a8:cd:ad:b5:58:a6:c8:92:e5:cb:8d:c0:d9:
                    35:22:d9:be:f1:a8:00:88:90:7d:e0:5e:3e:3f:93:
                    a1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F1:4E:65:5F:1F:E9:6D:F1:1F:B3:40:7F:81:5E:52:8F:8E:DF:BC
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/dPFOZV8f6W3xH7NAf4FeUo-O37w.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.105.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         bb:12:5e:79:e2:d6:11:d0:57:fa:df:36:45:ea:9b:aa:e2:b7:
         a5:fa:1f:0b:24:c9:c5:4e:77:f2:14:5d:48:64:e3:dd:a7:95:
         ab:ce:36:83:0c:09:6d:6a:b2:c2:9a:b1:51:54:a5:c4:5d:82:
         88:a4:2e:57:83:f3:77:4e:7e:ed:e4:52:3e:a8:e8:e7:d1:c8:
         f1:f5:c3:1d:b4:73:9d:4d:56:80:17:5d:ac:97:a1:50:57:b3:
         ce:84:2d:bc:45:a5:c5:07:a8:81:68:e1:b3:b8:be:9e:b4:9f:
         ce:d5:b5:35:8b:42:1d:f1:cb:44:6d:46:d4:96:16:70:c2:d7:
         dd:bd:e9:6b:65:0b:50:b5:df:c0:59:b0:b0:68:c1:0d:05:d0:
         66:bb:81:6a:4a:b2:41:0b:60:9d:d3:af:3a:dc:f5:bd:c3:e4:
         6b:d2:cc:2d:46:97:6b:44:b0:43:8a:2b:1d:b2:ac:86:3f:3b:
         d1:bf:12:2b:ee:37:2c:41:ab:dc:a0:a7:07:1c:12:22:44:b9:
         18:60:97:98:d2:3c:62:3a:a8:51:5b:ae:90:bd:e7:6d:51:a8:
         cc:ee:1a:ea:d3:04:52:ed:19:84:f3:b9:36:ad:a6:42:e4:49:
         90:fd:f1:bc:15:ef:61:b1:2a:69:f7:a0:92:41:dd:5b:7e:10:
         b5:8d:f4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----