Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/n2mQ-oxeDMFn1HFzDxzr9TBpImY.roa
File:                     n2mQ-oxeDMFn1HFzDxzr9TBpImY.roa (raw, json)
Hash identifier:          5/L+d0AM51iCqgj6/Ad+t5TO3WXU+0KP5HDuXn6svA4=
Subject key identifier:   9F:69:90:FA:8C:5E:0C:C1:67:D4:71:73:0F:1C:EB:F5:30:69:22:66
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0858
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/n2mQ-oxeDMFn1HFzDxzr9TBpImY.roa
Signing time:             Tue 29 Sep 2020 09:51:56 +0000
ROA not before:           Tue 29 Sep 2020 09:51:56 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9919
IP address blocks:        218.210.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2136 (0x858)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:51:56 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=9F6990FA8C5E0CC167D471730F1CEBF530692266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4e:50:48:e1:1d:55:82:82:c8:b6:f2:35:b6:
                    dc:12:b8:d5:1b:43:65:76:bb:e8:71:3c:85:67:b5:
                    ab:18:bc:e1:2c:02:87:00:d1:b7:a9:e9:ff:94:56:
                    15:82:77:4c:94:6d:f3:7d:ab:99:25:18:e1:4e:b5:
                    bb:12:04:72:3b:a4:6a:46:7d:51:60:a1:80:ea:3f:
                    76:e5:1b:40:d1:4d:54:4e:4d:70:bd:94:43:67:56:
                    ee:ec:12:45:7f:8f:75:35:5d:54:7d:21:01:6e:d5:
                    ca:d8:5f:02:d6:35:c2:a7:ee:d5:f1:61:81:68:6b:
                    f5:90:ee:a2:55:e8:17:69:5c:62:ce:a3:32:37:15:
                    eb:1a:68:ea:ae:37:7e:4f:3d:45:3f:66:fb:51:71:
                    7f:9f:9b:5f:2f:a8:52:92:40:6b:8d:7f:54:a0:d4:
                    06:02:79:cd:95:56:90:31:55:81:08:f2:b3:4f:60:
                    4c:fe:f6:a2:73:a2:6b:98:c9:3e:76:1b:07:ab:2c:
                    8a:f7:21:1d:f0:0b:53:06:7c:1f:34:16:53:a9:82:
                    bd:19:10:f4:15:97:34:5c:11:a2:a0:a5:9c:e7:07:
                    60:22:e7:88:24:70:f3:cd:89:3e:a6:69:7b:95:b9:
                    89:9a:88:14:12:6f:07:a6:42:18:a4:a0:6c:f5:e1:
                    6b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:69:90:FA:8C:5E:0C:C1:67:D4:71:73:0F:1C:EB:F5:30:69:22:66
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/n2mQ-oxeDMFn1HFzDxzr9TBpImY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.210.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         99:d5:2a:fc:7c:d3:3e:b7:f9:e8:bc:d0:e8:a1:3c:95:bd:68:
         65:2a:7c:84:2a:e0:7d:09:d3:f3:27:01:71:0e:ff:4c:65:7b:
         8b:8a:87:12:77:12:93:26:3f:35:88:2a:0b:e0:f6:d9:d5:6b:
         df:63:43:cf:2b:c2:b7:ae:fb:67:74:9e:6b:11:d3:03:1a:13:
         ee:7e:86:d9:aa:8e:06:10:31:6b:38:69:ee:c1:ea:20:e4:4b:
         6b:fa:6f:cd:31:77:86:8e:cd:87:23:ae:d8:f2:2c:8c:6b:e2:
         fc:57:5d:de:6d:64:3b:a2:aa:00:a2:a8:3b:db:d1:c2:fb:66:
         a1:70:dc:15:87:e0:53:86:22:b6:60:07:76:ec:ee:03:59:81:
         75:7f:8c:79:0d:7a:f7:c9:30:bb:f5:04:3d:bb:30:a8:9d:a5:
         b2:37:4f:88:56:b0:50:93:51:9c:fb:21:f8:9e:2f:c7:90:6b:
         2d:e6:77:ad:32:34:f4:97:1d:b3:a7:9b:c0:73:84:a2:cd:a5:
         89:92:b2:ba:3e:ad:72:0b:cf:f0:98:21:73:d3:4c:c2:1d:e8:
         14:1a:b8:e1:42:07:6b:d0:c8:7e:b5:35:57:0d:2c:a4:26:ad:
         6d:16:63:06:f1:86:ec:b6:c7:8b:b7:4f:2c:93:a6:58:d9:5b:
         27:48:c7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----