Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/p8fSR3RAD7vDb2NNm7DJlGI_gwk.roa
File:                     p8fSR3RAD7vDb2NNm7DJlGI_gwk.roa (raw, json)
Hash identifier:          ol2GexaDWNZnFnsr1DisjQkcr8DqaZVeRSXMXsXfuRI=
Subject key identifier:   A7:C7:D2:47:74:40:0F:BB:C3:6F:63:4D:9B:B0:C9:94:62:3F:83:09
Certificate issuer:       /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial:       0B78
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/p8fSR3RAD7vDb2NNm7DJlGI_gwk.roa
Signing time:             Wed 29 Sep 2021 02:44:14 +0000
ROA not before:           Wed 29 Sep 2021 02:44:14 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9919
IP address blocks:        192.72.192.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2936 (0xb78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
        Validity
            Not Before: Sep 29 02:44:14 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=A7C7D24774400FBBC36F634D9BB0C994623F8309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:69:41:88:06:6d:fa:3e:1f:e2:24:b5:d0:fc:
                    ac:39:54:bd:d2:11:f3:70:f1:a9:1f:10:7c:af:9e:
                    8d:bf:1b:a8:88:f2:fa:62:8a:be:3f:17:51:31:16:
                    46:96:01:4b:6b:93:bb:24:ce:60:e1:46:1a:e0:02:
                    22:80:00:33:bf:84:d0:52:7a:81:e3:de:a3:86:5b:
                    6c:cd:7c:54:3d:41:15:56:77:8b:73:f2:9f:b1:1d:
                    e6:49:5a:f0:1c:ea:3b:67:f9:2f:4c:40:d8:c1:08:
                    5e:5e:76:4f:34:b5:39:8d:94:55:26:82:ec:a4:fd:
                    fe:cc:65:b4:e0:c5:a8:03:3c:3f:1c:2f:bc:b3:6c:
                    08:d8:4f:36:df:37:a3:06:30:e6:22:d9:9f:24:a2:
                    75:b3:51:92:68:2f:ff:64:ea:d0:c9:44:db:b2:1f:
                    10:90:be:15:80:a6:9e:8e:38:7c:bb:b8:0d:55:c8:
                    93:af:8b:64:90:8b:16:8c:e7:b5:e0:3a:2c:6f:86:
                    12:38:43:ab:ee:52:82:44:e6:18:49:e8:72:74:08:
                    06:a5:60:57:8d:6e:29:7d:66:5c:b2:94:f4:fa:d1:
                    1d:14:38:09:cd:85:d6:89:bd:9e:fb:c2:c8:2f:78:
                    08:6f:87:af:0a:8d:77:78:9c:ba:d5:27:68:8e:f5:
                    66:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C7:D2:47:74:40:0F:BB:C3:6F:63:4D:9B:B0:C9:94:62:3F:83:09
            X509v3 Authority Key Identifier:
                keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/p8fSR3RAD7vDb2NNm7DJlGI_gwk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.72.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         98:7b:a5:24:af:8a:10:e8:d9:7a:f6:58:fe:c6:f2:e8:e3:93:
         50:50:b3:51:e0:55:bc:db:83:05:06:8d:3e:0b:c4:00:1b:ba:
         af:04:b8:4c:5c:43:7f:d9:bd:e7:da:39:dd:19:94:86:59:e2:
         b7:b1:1b:bc:49:58:7c:21:c9:8b:f3:85:07:d8:b5:25:82:e5:
         fc:76:7e:8d:2c:af:bc:78:9f:97:01:80:b2:5c:c5:b5:c3:c4:
         15:55:0d:b6:18:06:af:af:e4:a3:7e:28:87:ac:85:e3:3a:d8:
         7e:b8:63:e1:6a:d2:aa:4d:0c:10:aa:c5:e6:42:a6:e5:e4:e3:
         8e:f9:5f:a8:1b:b4:15:7b:87:69:8b:c6:f2:68:4b:6e:e3:a1:
         ab:ff:7d:0b:9e:a8:d5:ed:f2:84:22:4c:96:44:c9:e1:0f:35:
         74:ae:90:cf:86:d0:56:d6:8c:b8:94:6b:e3:c1:c7:b4:4f:f4:
         34:df:82:c3:19:5a:08:f1:68:6e:3a:62:42:b5:81:db:28:78:
         b7:2b:1d:7c:56:ca:c6:78:24:39:48:1a:d9:cc:a2:47:d0:40:
         1d:b4:df:68:39:55:55:29:d5:10:16:25:64:f5:09:cb:d0:43:
         66:6b:a2:a6:ab:e9:f6:97:d8:55:10:34:03:e1:31:aa:28:c1:
         70:0a:05:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----