Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/j6OF8BcTKh_YbyGrg0odiPUyj7A.roa
File:                     j6OF8BcTKh_YbyGrg0odiPUyj7A.roa (raw, json)
Hash identifier:          dfRlryuIMzQZ5ZyaXmqmFGSYASNn4jh3POWBXDcqmGA=
Subject key identifier:   8F:A3:85:F0:17:13:2A:1F:D8:6F:21:AB:83:4A:1D:88:F5:32:8F:B0
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0E9E
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/j6OF8BcTKh_YbyGrg0odiPUyj7A.roa
Signing time:             Wed 29 Sep 2021 02:43:47 +0000
ROA not before:           Wed 29 Sep 2021 02:43:47 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9919
IP address blocks:        122.146.96.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3742 (0xe9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:47 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=8FA385F017132A1FD86F21AB834A1D88F5328FB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:f6:d5:9b:de:3e:84:40:d1:17:42:4c:a3:ea:
                    23:d2:c0:ea:f2:98:34:64:0c:75:8c:f8:ec:40:b6:
                    84:91:01:eb:78:d0:f3:92:97:e0:e8:23:a2:37:b9:
                    07:07:9d:30:38:85:21:c3:01:79:36:71:e4:f8:d5:
                    28:36:26:d7:fc:58:8b:19:ef:fe:93:4a:8c:3a:66:
                    15:c8:1f:21:36:b6:4b:53:c9:d0:ea:da:d6:5b:79:
                    23:56:4a:91:c7:bb:d3:3e:99:91:ba:b4:c7:89:ca:
                    06:9b:a3:e3:f9:ab:c7:a5:d9:43:4d:e6:71:28:db:
                    b7:93:cc:15:f3:c5:07:ac:0d:2a:20:3c:4e:fe:a0:
                    5f:7d:9a:46:d3:a7:7b:c6:07:6f:68:ac:37:ec:b5:
                    8c:99:8a:f2:5d:84:26:a9:96:bf:23:10:e3:69:29:
                    ec:55:df:9a:07:9a:28:4a:07:bc:d5:43:26:24:d1:
                    ed:30:23:ef:ca:3d:69:dd:b9:4f:5f:fa:a0:ea:28:
                    e8:b9:93:37:93:3d:11:8e:74:f8:b9:92:1d:b0:a5:
                    80:b2:24:82:07:47:72:a6:7f:2a:bc:7a:eb:98:84:
                    4b:c2:36:c4:fa:b0:eb:e4:5c:45:f2:06:c7:56:8e:
                    9d:9d:3e:6f:3f:20:5e:0f:83:e7:01:80:aa:2d:d5:
                    e1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A3:85:F0:17:13:2A:1F:D8:6F:21:AB:83:4A:1D:88:F5:32:8F:B0
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/j6OF8BcTKh_YbyGrg0odiPUyj7A.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.146.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a5:e6:44:b9:32:68:70:cd:0f:df:6a:5c:e7:55:d1:2d:55:e2:
         b5:ef:98:dc:cf:ec:98:e6:a5:f0:12:9c:77:d4:33:db:e0:3b:
         9a:5d:74:52:e0:91:2a:3c:27:40:49:39:84:7e:2f:76:80:f9:
         f0:65:f2:01:a1:66:92:36:87:ad:e7:bc:25:37:f7:c6:6b:f6:
         4e:cd:29:9a:dc:1c:19:8e:df:4a:a2:f3:70:65:2d:cd:bd:b5:
         74:41:23:93:62:62:63:8f:8d:d0:d9:3b:a2:21:a2:b5:93:ad:
         b6:6d:b1:61:38:cd:d3:d9:51:da:fa:28:69:4c:6d:a9:b7:82:
         2c:f5:5d:86:60:e3:ca:3a:f4:3f:34:19:7b:d8:4b:4d:26:0b:
         24:5d:cc:50:bc:81:d2:a0:46:71:fd:18:f0:5b:62:45:3c:b2:
         a5:52:63:c8:73:f9:11:f0:fb:25:a7:e8:ba:35:d4:73:d5:e9:
         ab:b4:2d:ab:cb:8a:c7:75:43:52:8d:a1:02:f7:50:c4:2d:ee:
         4a:85:cd:7c:27:95:0f:04:19:f0:6a:16:b2:5f:f6:a4:15:dd:
         ed:ae:af:16:b7:08:50:6d:10:db:72:95:01:11:1b:fa:67:a1:
         a0:cb:e0:27:74:99:fe:91:1d:73:a6:62:59:a1:c6:d6:61:45:
         8c:b3:38:38
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDp4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTA5Mjkw
MjQzNDdaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDhGQTM4NUYwMTcxMzJB
MUZEODZGMjFBQjgzNEExRDg4RjUzMjhGQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD19tWb3j6EQNEXQkyj6iPSwOrymDRkDHWM+OxAtoSRAet40POS
l+DoI6I3uQcHnTA4hSHDAXk2ceT41Sg2Jtf8WIsZ7/6TSow6ZhXIHyE2tktTydDq
2tZbeSNWSpHHu9M+mZG6tMeJygabo+P5q8el2UNN5nEo27eTzBXzxQesDSogPE7+
oF99mkbTp3vGB29orDfstYyZivJdhCaplr8jEONpKexV35oHmihKB7zVQyYk0e0w
I+/KPWnduU9f+qDqKOi5kzeTPRGOdPi5kh2wpYCyJIIHR3Kmfyq8euuYhEvCNsT6
sOvkXEXyBsdWjp2dPm8/IF4Pg+cBgKot1eG7AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUj6OF8BcTKh/YbyGrg0odiPUyj7AwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvajZPRjhCY1RLaF9ZYnlHcmcwb2Rp
UFV5ajdBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3qSYDAN
BgkqhkiG9w0BAQsFAAOCAQEApeZEuTJocM0P32pc51XRLVXite+Y3M/smOal8BKc
d9Qz2+A7ml10UuCRKjwnQEk5hH4vdoD58GXyAaFmkjaHree8JTf3xmv2Ts0pmtwc
GY7fSqLzcGUtzb21dEEjk2JiY4+N0Nk7oiGitZOttm2xYTjN09lR2vooaUxtqbeC
LPVdhmDjyjr0PzQZe9hLTSYLJF3MULyB0qBGcf0Y8FtiRTyypVJjyHP5EfD7Jafo
ujXUc9Xpq7Qtq8uKx3VDUo2hAvdQxC3uSoXNfCeVDwQZ8GoWsl/2pBXd7a6vFrcI
UG0Q23KVAREb+mehoMvgJ3SZ/pEdc6ZiWaHG1mFFjLM4OA==
-----END CERTIFICATE-----