Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/tw8QUjwjaAmE2QzWcad8BQDpzuU.roa
File:                     tw8QUjwjaAmE2QzWcad8BQDpzuU.roa (raw, json)
Hash identifier:          BhwklVEGLZjer4AAK0TTqakSdWSBn8Ya3hfZ7eNqXVM=
Subject key identifier:   B7:0F:10:52:3C:23:68:09:84:D9:0C:D6:71:A7:7C:05:00:E9:CE:E5
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0DFA
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tw8QUjwjaAmE2QzWcad8BQDpzuU.roa
Signing time:             Wed 29 Sep 2021 02:43:03 +0000
ROA not before:           Wed 29 Sep 2021 02:43:03 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     4780
IP address blocks:        218.32.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3578 (0xdfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:03 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=B70F10523C23680984D90CD671A77C0500E9CEE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5f:6c:de:d9:e7:fb:11:13:a9:fd:41:90:a6:
                    b2:4c:44:f0:37:1f:b7:b2:3a:68:d5:de:1e:11:d8:
                    b6:97:d9:d3:60:dc:2a:df:7a:48:18:09:6e:89:66:
                    b9:78:9c:de:34:c4:8e:02:ea:be:5e:ee:b3:37:14:
                    ab:00:6e:67:d9:24:e6:ea:01:0c:c2:01:3a:3e:7b:
                    5f:de:14:89:b7:8c:94:98:da:c7:18:ac:4d:e1:12:
                    94:8f:5b:ab:12:2c:e2:c9:cd:fa:3a:b5:ba:49:ed:
                    57:a4:15:10:8f:01:c6:d1:da:47:dd:3e:05:c0:6a:
                    bf:dc:d7:94:cf:8f:7a:61:c7:72:65:32:d9:cb:a2:
                    78:0f:5f:9d:79:6e:a1:dd:24:6b:13:47:18:48:1f:
                    ed:53:94:98:cb:61:ba:b2:cd:27:92:17:26:3d:21:
                    b6:72:9c:22:8e:7d:08:91:a8:12:80:88:00:f2:6a:
                    92:3e:f3:f4:33:25:f7:dc:08:b9:f5:03:b1:a9:3f:
                    2a:6d:4c:09:ae:14:91:2a:7c:e5:1b:66:09:69:da:
                    0c:74:2f:02:c2:1e:24:74:16:fb:29:d5:3a:51:f9:
                    ea:ab:3b:22:43:ce:42:14:2e:19:2c:73:61:89:e8:
                    1b:ab:59:6a:42:5d:04:21:47:f3:5d:6e:42:4f:9e:
                    27:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:0F:10:52:3C:23:68:09:84:D9:0C:D6:71:A7:7C:05:00:E9:CE:E5
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tw8QUjwjaAmE2QzWcad8BQDpzuU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.32.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0b:44:4b:46:6f:cf:28:12:71:b5:cb:7c:2e:c8:87:47:2e:29:
         39:99:bd:b1:05:ce:dd:3b:df:57:b7:7e:3e:eb:eb:68:0d:ae:
         b6:17:ca:90:95:ff:43:59:91:93:eb:fb:07:64:10:df:ec:70:
         43:f2:63:a1:33:aa:2c:bb:89:c9:52:d8:3b:0e:8f:f8:fa:fa:
         46:3e:85:61:dc:2d:1e:e6:ba:29:f3:94:01:5b:01:9d:2f:61:
         85:a5:df:00:74:d3:49:6f:54:bf:5e:6c:f8:bd:c8:eb:da:21:
         77:e7:fc:c7:07:5e:d8:37:59:dc:ec:0f:07:3b:11:a0:81:f4:
         45:91:5e:3d:49:d8:b5:66:a9:05:15:cf:0c:75:0c:8c:57:d6:
         9a:a5:66:8a:b1:cf:b8:10:b3:d7:ec:13:58:7c:3f:7e:d6:40:
         78:28:31:ba:e6:58:4b:60:d4:01:85:5d:67:5f:71:57:42:eb:
         71:41:1a:f1:6f:c7:2d:50:0c:21:34:d4:51:73:8d:52:67:76:
         c2:8d:3a:88:9c:25:47:7e:1d:72:dd:6d:1c:5c:14:ab:9b:6d:
         4a:5a:dd:d0:8d:df:f4:32:99:bf:3a:17:1a:7f:43:f2:a7:d9:
         3b:08:94:1f:49:47:f9:2e:89:3b:36:40:e4:a3:81:5a:4e:af:
         3e:52:9b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----