Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/ufA6kiQE28gfKGXocfPW_3Jx0_g.roa
File:                     ufA6kiQE28gfKGXocfPW_3Jx0_g.roa (raw, json)
Hash identifier:          miVZBFBAwtaZoNVnoyC6PZPvxR7ZdgjdaxWbQMj8KTc=
Subject key identifier:   B9:F0:3A:92:24:04:DB:C8:1F:28:65:E8:71:F3:D6:FF:72:71:D3:F8
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0E0F
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ufA6kiQE28gfKGXocfPW_3Jx0_g.roa
Signing time:             Wed 29 Sep 2021 02:43:09 +0000
ROA not before:           Wed 29 Sep 2021 02:43:09 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     4780
IP address blocks:        112.104.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3599 (0xe0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:09 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=B9F03A922404DBC81F2865E871F3D6FF7271D3F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d9:c1:9b:e1:8d:3c:a9:eb:bd:65:e8:59:8a:
                    b7:45:eb:cc:17:f4:2f:87:02:a7:f6:12:dd:f8:07:
                    e1:06:18:3a:fd:38:a6:60:71:85:d6:f3:47:84:2a:
                    c9:08:e2:ca:29:7e:4c:d5:1a:5d:de:ae:c1:14:ca:
                    f6:5c:79:bd:95:33:9d:ba:f6:f6:14:f4:6e:a9:b7:
                    c4:09:61:2c:46:3d:e2:6c:5f:b5:0b:d0:49:0f:a9:
                    c9:72:72:69:fe:10:7e:97:e9:49:0b:1e:de:b7:15:
                    0f:f1:27:aa:a1:9e:2f:68:fa:aa:af:c8:97:c6:60:
                    19:76:0d:65:3f:5b:d8:96:4a:38:47:d5:56:91:98:
                    f3:a5:bd:f2:49:e4:06:a9:50:be:e7:94:16:bb:c0:
                    a4:0e:01:f1:e5:99:cf:a4:6a:bd:72:fe:42:8d:88:
                    4d:69:55:9a:92:1d:71:9e:61:15:bb:58:0a:63:0b:
                    f5:7b:38:13:36:52:51:2a:bb:a7:ed:d7:16:d7:bc:
                    40:4d:66:fc:36:bb:ef:da:9d:f2:c7:00:cf:54:8a:
                    1d:f7:f7:40:28:11:23:b5:b4:3a:76:2e:9a:3a:26:
                    ac:f8:20:4c:b9:d3:e9:12:62:5b:85:55:18:70:2c:
                    40:1d:04:40:56:6e:ab:e1:ab:28:f3:74:84:87:2b:
                    f7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F0:3A:92:24:04:DB:C8:1F:28:65:E8:71:F3:D6:FF:72:71:D3:F8
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ufA6kiQE28gfKGXocfPW_3Jx0_g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.104.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         16:9b:b0:9a:09:db:a3:d5:2c:48:57:06:36:b0:41:dd:3e:39:
         b0:13:1d:70:9f:01:ac:45:e5:23:66:93:4b:46:7c:82:e3:3e:
         61:86:27:53:04:b2:b0:24:4f:07:b5:8f:4e:0d:d4:ab:57:85:
         54:ad:ec:3a:2a:07:11:9e:ea:ef:ae:df:26:70:8b:4e:85:01:
         7d:fe:f2:7c:30:d1:20:fb:72:8f:ce:f2:0f:c3:dc:94:98:b0:
         42:18:4d:18:0a:2e:c0:98:b8:3e:2c:ee:83:4b:04:59:e2:c4:
         ca:27:d8:fd:5b:1e:98:66:70:97:88:53:f8:6c:a3:1e:75:40:
         d6:c7:72:1f:4c:d0:b7:b6:b0:a8:16:b5:50:a7:47:5f:0b:ad:
         42:da:fd:c5:c2:3f:ea:68:03:3a:0a:01:97:a2:74:98:68:ad:
         0d:89:da:c6:f3:79:b2:da:e4:27:8a:d8:9d:2b:41:4c:5c:fd:
         70:23:6b:d0:80:78:52:4e:52:c7:36:cd:83:62:a1:d2:42:69:
         73:7a:07:06:c4:02:bd:73:9b:f9:46:72:e1:57:6d:c9:96:4e:
         f6:68:55:84:d6:4d:fd:9c:6c:0c:bc:55:af:13:bf:30:68:16:
         dc:bb:1f:88:e1:4d:fd:4b:39:7e:c2:9a:ef:e2:43:ef:cc:37:
         5f:7d:d9:e1
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICDg8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTA5Mjkw
MjQzMDlaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEI5RjAzQTkyMjQwNERC
QzgxRjI4NjVFODcxRjNENkZGNzI3MUQzRjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCl2cGb4Y08qeu9ZehZirdF68wX9C+HAqf2Et34B+EGGDr9OKZg
cYXW80eEKskI4sopfkzVGl3ersEUyvZceb2VM5269vYU9G6pt8QJYSxGPeJsX7UL
0EkPqclycmn+EH6X6UkLHt63FQ/xJ6qhni9o+qqvyJfGYBl2DWU/W9iWSjhH1VaR
mPOlvfJJ5AapUL7nlBa7wKQOAfHlmc+kar1y/kKNiE1pVZqSHXGeYRW7WApjC/V7
OBM2UlEqu6ft1xbXvEBNZvw2u+/anfLHAM9Uih3390AoESO1tDp2Lpo6Jqz4IEy5
0+kSYluFVRhwLEAdBEBWbqvhqyjzdISHK/c5AgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUufA6kiQE28gfKGXocfPW/3Jx0/gwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvdWZBNmtpUUUyOGdmS0dYb2NmUFdf
M0p4MF9nLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAXBoMA0G
CSqGSIb3DQEBCwUAA4IBAQAWm7CaCduj1SxIVwY2sEHdPjmwEx1wnwGsReUjZpNL
RnyC4z5hhidTBLKwJE8HtY9ODdSrV4VUrew6KgcRnurvrt8mcItOhQF9/vJ8MNEg
+3KPzvIPw9yUmLBCGE0YCi7AmLg+LO6DSwRZ4sTKJ9j9Wx6YZnCXiFP4bKMedUDW
x3IfTNC3trCoFrVQp0dfC61C2v3Fwj/qaAM6CgGXonSYaK0NidrG83my2uQnitid
K0FMXP1wI2vQgHhSTlLHNs2DYqHSQmlzegcGxAK9c5v5RnLhV23Jlk72aFWE1k39
nGwMvFWvE78waBbcux+I4U39Szl+wprv4kPvzDdffdnh
-----END CERTIFICATE-----