Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/qgd_ArMzfN-KcWeILS8uaKGd8KA.roa
File:                     qgd_ArMzfN-KcWeILS8uaKGd8KA.roa (raw, json)
Hash identifier:          hVqPXJoP54LK6jvjhNfbGLYaX+bSxVvVlddwsWwzsq0=
Subject key identifier:   AA:07:7F:02:B3:33:7C:DF:8A:71:67:88:2D:2F:2E:68:A1:9D:F0:A0
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0E56
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/qgd_ArMzfN-KcWeILS8uaKGd8KA.roa
Signing time:             Wed 29 Sep 2021 02:43:28 +0000
ROA not before:           Wed 29 Sep 2021 02:43:28 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9919
IP address blocks:        218.210.0.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3670 (0xe56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:28 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=AA077F02B3337CDF8A7167882D2F2E68A19DF0A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:75:b0:02:32:08:fa:ca:65:9c:de:48:62:cb:
                    d5:6b:62:51:65:54:36:55:19:19:5a:11:b8:2c:10:
                    a2:07:45:62:65:0d:25:a5:b4:7b:3d:aa:8a:50:a3:
                    1c:0d:0d:4e:74:11:50:79:38:8f:e7:80:5a:a8:52:
                    dc:f5:bf:3a:f9:1c:f2:0b:f1:5c:df:22:54:ce:a4:
                    74:be:9c:3e:44:84:be:f6:45:63:35:10:0b:6f:6a:
                    b1:e8:73:05:27:f0:3e:b4:29:32:8e:26:2d:40:61:
                    d8:5a:14:4c:f1:b5:f2:0b:70:fa:f2:1b:76:8a:82:
                    09:d1:29:46:99:16:ab:38:2e:3f:8f:99:e9:ea:99:
                    c7:58:85:75:6b:f3:91:b6:f4:19:0c:03:fb:0a:80:
                    3d:7d:ac:d6:e3:a2:f3:24:0e:9e:81:67:4a:18:e6:
                    cd:b4:a8:ac:f8:c5:a3:0b:bc:ec:61:01:65:74:4c:
                    3c:9c:2d:ff:4d:68:6d:69:a3:7a:1d:b9:bd:b8:3a:
                    1d:38:de:39:6c:77:c1:27:4a:44:4b:0c:11:fe:de:
                    ac:c7:4a:d1:0a:bb:df:1c:4c:02:7f:75:9f:a9:70:
                    28:c2:54:b4:f4:f6:37:88:d6:71:3a:1f:f4:f2:fa:
                    c7:2b:a9:bf:7a:96:54:c7:6c:0d:56:95:e0:1a:88:
                    bc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:07:7F:02:B3:33:7C:DF:8A:71:67:88:2D:2F:2E:68:A1:9D:F0:A0
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/qgd_ArMzfN-KcWeILS8uaKGd8KA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.210.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ad:9b:f9:ba:26:91:72:82:f5:e3:bd:30:13:a3:3e:44:a3:40:
         d6:ac:9b:31:16:6b:49:b1:d7:76:c3:e5:f8:72:a2:c4:75:e0:
         14:26:ca:94:cf:07:0c:c1:a3:1a:2f:e0:0a:e6:1b:cd:53:0f:
         cd:f2:ad:e8:2c:87:c7:5e:a5:a3:d6:36:eb:b6:31:3d:cf:02:
         fe:cb:a0:b5:f8:65:e1:47:8a:51:02:a1:54:c9:9e:a8:3d:76:
         2c:92:a5:84:ca:cb:10:83:96:4c:89:49:95:01:29:22:b6:55:
         29:88:bb:b8:2e:00:0b:18:07:d1:74:48:01:7d:6b:70:2c:6d:
         58:0f:7a:dc:57:12:75:e2:a1:dc:aa:61:5f:40:6e:b2:b1:96:
         29:f0:78:fa:da:ed:c5:99:82:07:84:b3:da:1d:05:8c:35:4b:
         26:83:56:cc:d3:e4:08:cc:73:bf:ec:42:41:61:c9:bf:ae:91:
         23:ff:96:d7:54:89:fa:b7:8d:d8:c6:1b:11:c9:e4:6d:1d:19:
         e8:1b:e4:5e:7c:b5:9e:60:0f:8c:95:bf:30:5b:ee:67:43:1c:
         12:96:1a:d5:52:3f:d0:d6:64:0c:39:4a:e8:02:82:22:a4:5f:
         ca:19:ca:0c:29:54:69:df:fe:87:33:8c:28:aa:14:20:58:f2:
         0c:3e:f7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----