Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/ut9ppVLmCU8iu1_ceuJvj3tpV0E.roa
File:                     ut9ppVLmCU8iu1_ceuJvj3tpV0E.roa (raw, json)
Hash identifier:          IAdfDTCwPF58/4BpHWbzMwB+mTghV//mx5anwSilv0I=
Subject key identifier:   BA:DF:69:A5:52:E6:09:4F:22:BB:5F:DC:7A:E2:6F:8F:7B:69:57:41
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       08B2
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ut9ppVLmCU8iu1_ceuJvj3tpV0E.roa
Signing time:             Tue 29 Sep 2020 09:52:20 +0000
ROA not before:           Tue 29 Sep 2020 09:52:20 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        60.245.64.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2226 (0x8b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:20 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BADF69A552E6094F22BB5FDC7AE26F8F7B695741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c0:9b:dd:71:f8:7e:ca:a5:c8:db:ff:c9:68:
                    8c:d2:51:f1:0f:f8:a5:02:0c:91:8f:a5:f8:91:e4:
                    17:f9:91:97:0f:15:b9:fb:30:a0:ec:7f:7b:f8:ab:
                    52:e6:0f:2c:4a:61:3c:65:f7:0c:ad:2b:0f:8d:b5:
                    62:8a:b2:68:00:a1:a4:61:88:01:c2:e8:26:c8:6e:
                    fa:d1:50:40:70:29:25:26:53:9b:c3:17:88:81:bd:
                    1f:53:7e:4f:d9:35:7f:7f:19:38:06:6e:70:c8:cb:
                    d2:60:a9:86:41:25:ca:96:ff:09:a2:9c:26:69:72:
                    9a:73:91:69:bf:81:a6:ef:c3:82:c2:a4:ad:6a:45:
                    bb:65:11:34:8e:ee:f6:23:1b:10:37:37:46:4d:1c:
                    05:5d:a8:8b:85:c0:ba:fd:99:25:71:56:4e:5e:f1:
                    36:af:fb:13:52:94:d4:dc:d0:17:db:f1:68:59:b5:
                    8d:ad:b2:1b:5a:7f:ed:21:aa:1b:a8:09:92:0d:07:
                    b7:da:0d:d5:a4:30:e2:07:c5:05:ba:cf:fb:8a:00:
                    25:7d:93:25:09:18:73:74:88:15:6e:8a:9d:c0:75:
                    ef:f8:29:ae:fc:77:2d:28:a0:10:f9:ca:41:5e:78:
                    81:e6:ce:cc:18:5b:94:ba:a4:00:63:61:6a:3c:65:
                    1b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DF:69:A5:52:E6:09:4F:22:BB:5F:DC:7A:E2:6F:8F:7B:69:57:41
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ut9ppVLmCU8iu1_ceuJvj3tpV0E.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.245.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ac:1a:e5:83:ac:bb:71:e0:a7:a6:ea:73:39:33:ca:ac:29:1e:
         fc:74:60:fe:09:0a:a8:c2:ca:bf:c7:22:8c:1c:0c:28:ff:46:
         2b:94:75:05:aa:39:83:dc:e2:53:35:24:7d:3a:b5:57:44:a5:
         94:ca:a9:91:5c:d2:2b:f7:d9:36:81:d7:b0:68:a8:b4:81:b6:
         fa:79:60:8a:14:d1:71:b6:e5:25:0b:2c:71:ab:c8:4b:30:2d:
         65:25:b3:d9:a8:ce:27:55:d8:98:db:03:a1:bb:05:2d:36:9d:
         69:1e:91:ac:32:52:57:e4:21:07:4c:5a:b4:f2:e9:e1:8c:12:
         08:6a:e8:08:f3:7a:5c:d4:2f:5c:b5:30:21:16:2a:36:10:da:
         8c:39:e6:fe:ae:a5:69:6e:ad:37:8d:31:e4:b1:48:19:be:a8:
         5c:be:b4:f4:85:5e:c4:11:d5:55:26:b4:a9:9e:d6:2c:88:de:
         6c:90:27:b5:ac:74:ff:ee:66:fa:aa:6d:69:c2:d3:6a:99:fc:
         95:c6:e2:31:ef:f5:b4:38:c7:85:84:c9:ff:8f:c3:82:89:80:
         26:15:a2:d2:da:6b:6b:9c:fe:f6:ad:83:c7:ca:28:b8:35:b3:
         11:35:c6:4d:5f:2a:73:d6:5f:46:c2:eb:db:7c:66:0d:7b:07:
         14:4d:e8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----