Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/dnwW10I5fa6vTHJbgAsf6N_lYzU.roa
File:                     dnwW10I5fa6vTHJbgAsf6N_lYzU.roa (raw, json)
Hash identifier:          iCyyEPfVtU88jskATdIwlnOfkybmE3FU+fO/uuM0Jis=
Subject key identifier:   76:7C:16:D7:42:39:7D:AE:AF:4C:72:5B:80:0B:1F:E8:DF:E5:63:35
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0A39
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/dnwW10I5fa6vTHJbgAsf6N_lYzU.roa
Signing time:             Tue 24 Nov 2020 09:24:14 +0000
ROA not before:           Tue 24 Nov 2020 09:24:14 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9919
IP address blocks:        59.104.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2617 (0xa39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Nov 24 09:24:14 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=767C16D742397DAEAF4C725B800B1FE8DFE56335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:94:40:e2:89:0d:f9:86:62:54:bf:b3:80:e4:
                    5f:e4:3c:67:cc:0a:d5:4f:54:ad:89:ad:05:df:b0:
                    9a:09:71:53:f0:73:d2:95:40:a6:1b:78:de:c7:08:
                    68:7a:b4:d9:01:dd:2c:da:e1:37:80:ab:c3:7f:41:
                    41:31:78:44:5d:4f:a1:46:53:6c:ad:ab:2e:be:b1:
                    6d:a0:66:54:26:11:c5:68:d1:8e:77:d2:2a:56:47:
                    dc:f3:d9:10:37:a3:68:ad:33:95:5e:f4:9c:5c:94:
                    c2:1b:e3:29:7f:84:23:5d:4d:cd:e7:4a:77:a8:fc:
                    62:84:84:99:26:c0:76:b6:bd:57:02:63:9c:86:5e:
                    44:6e:7c:c9:c1:82:50:67:f9:ba:05:96:99:66:a3:
                    5e:26:a4:a9:4f:2e:4b:0b:4e:92:da:3e:ac:dd:47:
                    38:01:04:6d:f4:96:40:eb:1e:15:47:c4:02:c3:1a:
                    54:0d:aa:04:c0:7c:42:5d:44:c1:6e:6e:1f:62:5f:
                    73:24:dd:88:ee:bf:d5:86:ff:f7:28:19:a2:0d:f4:
                    f8:35:ca:86:e0:01:a5:b5:b9:a1:e0:4d:58:83:6e:
                    41:f7:15:21:95:50:85:77:79:13:ae:ee:33:72:89:
                    ae:fb:57:2d:7d:99:e3:5e:ea:ce:fc:e8:65:e4:7a:
                    88:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7C:16:D7:42:39:7D:AE:AF:4C:72:5B:80:0B:1F:E8:DF:E5:63:35
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/dnwW10I5fa6vTHJbgAsf6N_lYzU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.104.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         a6:fe:41:e9:f0:7a:6a:ed:a4:c1:1b:3f:58:8d:22:bc:5e:3e:
         e7:c2:5d:e6:11:91:ad:db:85:8c:cc:4f:47:ab:cb:38:f6:68:
         5e:c6:dc:59:a9:13:c2:ef:ca:88:97:28:76:17:72:66:f4:0e:
         d8:8d:6c:6e:ec:76:6f:32:7e:27:80:6a:6a:e1:68:f0:68:5e:
         83:3e:28:dd:7b:3f:0c:20:8e:5a:11:44:6c:4f:c7:25:ac:8f:
         5a:7e:2f:90:bc:bc:7e:91:69:a6:90:9f:3d:8b:f1:76:67:1a:
         2e:9b:ba:a2:ba:e3:fd:9e:f9:35:5a:6e:96:26:43:d8:45:ac:
         e0:03:fa:cd:0a:49:0f:84:ea:13:54:4b:8c:d1:0b:d3:59:9b:
         6f:3c:5c:81:87:57:05:b4:18:56:a3:39:19:d3:39:c8:fa:35:
         06:01:4f:f0:42:55:af:0d:b4:bc:b9:aa:a9:88:fe:a8:45:86:
         9e:06:0d:4a:f7:ef:3a:a0:99:1a:97:5c:f7:5b:d0:21:44:67:
         8e:e6:86:03:c3:da:8a:30:43:6c:90:5c:54:3f:8c:61:7d:33:
         8d:1c:61:98:88:3e:86:46:97:5d:78:ad:d9:c5:e1:93:99:9c:
         b4:43:3e:71:e2:cb:f2:dc:17:48:e6:45:d2:17:6d:28:2b:91:
         0a:cc:9e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----