Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/ivPr6V6RpT51ZqW7sql5btGSEj0.roa
File:                     ivPr6V6RpT51ZqW7sql5btGSEj0.roa (raw, json)
Hash identifier:          OoMoZQdb8FP9PVS7k2ws7J7+Eyw9soxj4h+0716WtmU=
Subject key identifier:   8A:F3:EB:E9:5E:91:A5:3E:75:66:A5:BB:B2:A9:79:6E:D1:92:12:3D
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0E91
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ivPr6V6RpT51ZqW7sql5btGSEj0.roa
Signing time:             Wed 29 Sep 2021 02:43:45 +0000
ROA not before:           Wed 29 Sep 2021 02:43:45 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9919
IP address blocks:        220.229.96.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3729 (0xe91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:45 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=8AF3EBE95E91A53E7566A5BBB2A9796ED192123D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5d:e5:51:45:09:b2:16:18:3e:1d:02:a8:a5:
                    3f:fd:70:26:30:42:08:35:3a:9d:86:0b:d8:fe:e3:
                    80:e8:f3:e9:31:b7:a2:bd:db:11:a3:11:2d:3d:e6:
                    04:8c:2a:32:43:32:d3:5d:11:a5:42:a0:94:a4:86:
                    a5:69:be:e2:35:e8:18:58:0c:1b:05:b2:05:11:57:
                    5d:b7:86:e9:c0:57:43:ce:9c:4f:0e:3a:39:77:14:
                    5d:3a:f6:a4:3d:5d:bf:df:9f:a7:1b:66:1c:81:79:
                    7b:35:0b:b5:54:19:5f:8b:5f:50:8d:c6:93:3f:77:
                    d4:9a:a4:52:47:19:dd:01:63:59:94:e1:3b:86:10:
                    ed:37:cc:26:62:7f:e1:39:1d:72:64:74:33:b0:b5:
                    46:45:a8:e7:fd:46:17:8b:0e:cb:b1:ef:09:09:d6:
                    d8:c6:e1:30:48:aa:66:06:75:c1:65:47:a3:3c:5a:
                    cd:4a:ef:35:08:ae:38:0b:14:8b:1d:97:38:b9:c2:
                    32:3e:40:1b:7f:4f:f4:31:44:01:a1:42:0d:16:29:
                    98:13:fb:97:8b:c7:ef:58:2b:ff:ae:be:6d:dd:34:
                    dd:8b:84:f7:8a:ca:e1:ce:b9:fb:10:79:10:e6:4d:
                    a6:99:55:e1:27:e1:90:69:94:44:58:3e:dd:0f:cf:
                    0b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F3:EB:E9:5E:91:A5:3E:75:66:A5:BB:B2:A9:79:6E:D1:92:12:3D
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ivPr6V6RpT51ZqW7sql5btGSEj0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.229.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4d:e7:2f:b0:0a:e6:c1:76:64:93:a1:e0:33:da:14:98:cc:ba:
         51:b9:1f:fe:37:73:61:9d:60:86:ce:ff:80:8c:57:3e:7f:07:
         dd:64:b6:f7:14:98:a2:5d:93:02:28:5e:29:04:3c:47:51:1f:
         db:01:f0:6d:fc:f8:64:8a:ce:89:97:37:06:cc:f3:53:d2:45:
         74:33:35:91:e1:df:19:a7:a6:88:b4:ab:f2:18:40:e4:f5:e1:
         a3:4f:ed:28:c0:49:ef:fb:75:97:12:78:78:26:27:b1:51:a4:
         08:0b:fd:b9:55:27:fd:7f:08:d1:52:00:d5:0a:2b:3d:e8:c9:
         3a:bd:5b:a3:ca:3f:ea:06:d3:f5:ff:12:39:ff:b8:d4:47:d7:
         b9:00:5a:c2:4b:dd:37:1d:cb:e8:e2:b5:6f:81:81:e6:03:f1:
         86:cf:9b:4c:e6:97:25:67:6d:ec:74:86:2f:11:b9:fc:03:c0:
         b3:14:cc:16:ea:56:bb:fd:be:12:6a:64:19:54:8e:9f:d3:b0:
         e6:7b:36:86:f1:82:19:cc:13:57:91:7e:af:7b:e4:fb:5f:de:
         b3:09:16:a7:49:26:4a:a3:7b:ce:db:fb:ac:9e:ec:f7:75:c3:
         7a:58:d5:a9:1f:3c:c6:39:cf:c1:66:21:58:32:9a:29:75:eb:
         18:6a:1b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----