Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/ga2Pv_1SnzZLxX_Jgan_jWDdy_A.roa
File:                     ga2Pv_1SnzZLxX_Jgan_jWDdy_A.roa (raw, json)
Hash identifier:          S6wKd5no3G+xrySPkFCPDuXA/eEPGSqyNMWTfFGPSYw=
Subject key identifier:   81:AD:8F:BF:FD:52:9F:36:4B:C5:7F:C9:81:A9:FF:8D:60:DD:CB:F0
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       08F0
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ga2Pv_1SnzZLxX_Jgan_jWDdy_A.roa
Signing time:             Tue 29 Sep 2020 09:52:37 +0000
ROA not before:           Tue 29 Sep 2020 09:52:37 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131627
IP address blocks:        106.105.164.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2288 (0x8f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:37 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=81AD8FBFFD529F364BC57FC981A9FF8D60DDCBF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:16:d0:0a:ba:11:05:c7:d3:bd:f7:79:f2:64:
                    ed:62:ec:88:14:2d:3b:00:ff:d4:1d:cb:eb:8c:9d:
                    26:c9:81:c2:c5:f6:de:37:4f:43:c9:7c:77:97:0e:
                    9f:3b:36:77:f4:97:8e:e4:01:cb:e4:d2:50:36:0e:
                    35:a1:a7:cf:0c:19:21:60:01:64:29:ae:49:cf:23:
                    06:8c:d6:78:f4:71:df:d8:39:f7:f9:0e:c6:cd:1e:
                    5b:7e:28:0e:3e:1c:af:66:1f:87:eb:c5:7d:0f:99:
                    6b:7a:9b:3d:9e:63:55:e8:88:82:c4:74:e5:be:95:
                    65:ac:db:85:c8:0f:eb:b3:51:e3:2c:26:4f:3d:f2:
                    f9:7a:de:12:3c:ad:f8:59:0c:26:83:d3:eb:6f:86:
                    b9:fa:02:53:7e:b7:9a:63:01:3e:d4:c4:77:76:10:
                    82:25:cc:a5:38:eb:c6:69:b8:61:aa:99:36:29:c7:
                    9e:24:84:7e:35:38:6f:e0:66:75:f1:5b:11:a4:da:
                    18:98:2a:88:a2:8b:e6:ba:62:04:0f:9e:25:5d:fa:
                    d7:64:c6:81:46:0d:11:f3:ea:6e:6c:4e:8d:e0:4c:
                    91:e6:65:2b:ce:a2:fb:a7:38:39:0a:dd:15:ba:fb:
                    92:21:3f:d8:1f:22:16:3a:1e:d6:03:f5:fa:58:76:
                    93:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AD:8F:BF:FD:52:9F:36:4B:C5:7F:C9:81:A9:FF:8D:60:DD:CB:F0
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ga2Pv_1SnzZLxX_Jgan_jWDdy_A.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.105.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:cf:fa:3f:95:a6:0c:9b:cc:fe:04:f2:11:f6:d1:1a:f9:f5:
         7f:02:4f:65:64:8d:7c:3d:38:78:5e:da:f4:cb:be:5f:17:f3:
         e7:66:df:1b:ab:b1:3f:84:7c:2e:b0:ef:68:5e:97:fd:25:a1:
         3d:86:e5:bb:4e:06:54:52:0b:e3:21:99:1e:b6:f1:a3:e6:3b:
         d5:0a:bb:03:e8:ec:fe:2b:34:37:81:99:17:b4:be:88:05:76:
         7e:4b:4e:57:98:81:65:b6:11:e7:76:e1:3a:cc:6c:16:10:86:
         6f:fb:25:2f:38:d6:ea:01:f5:d9:ed:a1:27:0d:66:d6:08:b3:
         d0:43:5c:ea:4d:15:d0:fb:d0:cc:f7:cd:2c:c4:ca:18:d4:4f:
         00:fd:1c:6d:d5:d2:02:64:1f:4c:4a:a3:d7:a5:1a:ec:db:19:
         fd:f5:01:f3:42:1f:ac:ec:9d:42:c0:e9:90:8f:cf:3e:8b:43:
         a0:5f:e6:1c:a0:78:35:6d:7e:3b:b7:25:d1:95:82:11:ba:7b:
         76:c0:4c:f4:e0:23:88:39:63:99:0a:a6:6a:e7:45:06:71:c3:
         03:3e:59:6b:d5:69:8c:22:87:83:25:0b:8b:3c:d1:84:61:fc:
         dc:d8:e0:c9:c6:7c:86:f7:df:e8:ae:c7:fc:4a:9e:6e:ec:36:
         82:be:98:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----