Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/lUzTfNzWyxcwaX3zRJUjw4_n2Ng.roa
File:                     lUzTfNzWyxcwaX3zRJUjw4_n2Ng.roa (raw, json)
Hash identifier:          nN/9S9UVqjimV2fmSTkM6vueV1/YyNB6FHPpdqPRvLI=
Subject key identifier:   95:4C:D3:7C:DC:D6:CB:17:30:69:7D:F3:44:95:23:C3:8F:E7:D8:D8
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0E00
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/lUzTfNzWyxcwaX3zRJUjw4_n2Ng.roa
Signing time:             Wed 29 Sep 2021 02:43:05 +0000
ROA not before:           Wed 29 Sep 2021 02:43:05 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     4780
IP address blocks:        45.64.228.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3584 (0xe00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:05 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=954CD37CDCD6CB1730697DF3449523C38FE7D8D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a5:dc:48:fa:7b:88:aa:c1:74:ad:54:34:3f:
                    47:ec:97:6e:c5:28:bf:77:e5:6f:c3:b9:0b:0a:6c:
                    5e:97:cb:c5:6d:c7:76:89:ae:39:a8:d5:63:a8:fe:
                    c9:85:da:00:49:45:a5:bf:82:b0:74:8a:d3:eb:fc:
                    d0:31:08:7c:f5:43:bf:f7:9e:f0:7b:2f:9e:e9:60:
                    13:b4:7d:56:7f:5b:58:89:c0:02:af:c0:02:f3:a6:
                    08:60:d9:f6:28:4c:82:80:18:aa:f8:92:a8:52:6a:
                    1b:6b:0c:52:13:90:fb:5d:45:b8:18:6a:29:70:fc:
                    61:59:2c:ef:25:52:79:69:75:58:ce:e1:13:5e:3a:
                    f7:6c:35:d8:b8:4e:92:fc:26:be:b8:f5:18:06:a8:
                    a1:82:c6:d1:05:2e:ac:ee:71:d5:bf:09:14:e8:5c:
                    3d:25:bb:54:a3:ff:d8:95:90:c0:39:54:e0:62:e2:
                    54:01:b5:41:97:b8:74:40:e2:23:b1:2f:e5:a5:8c:
                    ae:cd:f6:c9:0a:4b:4b:9b:ab:35:e7:17:bf:9d:5d:
                    54:95:6b:69:31:70:bf:45:bf:b5:d0:a2:b4:2c:8d:
                    6c:4b:4e:79:bb:8e:f2:5c:33:d7:49:d2:b5:3f:06:
                    ae:3d:d0:d1:9a:37:e3:8e:9e:f6:ec:53:c8:db:69:
                    49:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4C:D3:7C:DC:D6:CB:17:30:69:7D:F3:44:95:23:C3:8F:E7:D8:D8
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/lUzTfNzWyxcwaX3zRJUjw4_n2Ng.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.64.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:7c:f2:6e:05:64:c5:0c:a5:a7:c8:ad:78:f1:4b:c1:58:be:
         74:7a:7f:3b:25:fe:4a:de:45:e8:7b:87:1f:e8:91:dd:6e:0a:
         a8:aa:f6:8f:95:04:81:aa:67:85:9f:b0:87:30:a2:77:2a:69:
         10:46:7a:bb:cb:12:5a:57:64:aa:74:34:0a:0e:5a:d9:53:f7:
         23:2b:eb:0a:71:09:f7:4f:b5:4b:9f:00:85:0c:6a:53:d8:08:
         d2:01:61:a7:79:9a:4a:2a:7a:b3:53:9e:f4:5d:32:86:5a:1a:
         c8:27:cd:9d:06:21:02:fe:b8:97:f3:ad:26:66:a9:80:8f:b8:
         00:89:ea:47:37:4b:6c:31:0d:27:da:6f:03:ae:a6:bb:77:f2:
         28:ea:0e:fe:9a:5e:cf:7e:27:a0:42:b9:fb:80:a5:7d:c3:64:
         5d:f8:99:00:ef:bd:6d:92:3b:88:be:57:09:25:8a:d6:db:fe:
         98:2d:dc:ec:5d:26:36:f8:d4:82:aa:ea:39:82:63:3b:0a:96:
         c7:7f:17:7b:0a:a0:91:2d:12:c2:18:60:ef:4f:f1:74:71:44:
         48:2c:00:26:66:8a:ee:b6:1b:d3:5d:e5:25:75:d6:69:1d:18:
         df:e1:fe:71:73:7e:79:62:fe:ae:f1:d3:63:d0:ec:45:f4:88:
         3a:55:75:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----