Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/v5Zp4XpCy-3Z0JOgGs8H9FjKMa4.roa
File:                     v5Zp4XpCy-3Z0JOgGs8H9FjKMa4.roa (raw, json)
Hash identifier:          G71A3b2fB9HuRS+7RiSoRakBIKCoyOO+ep8EanDNj4I=
Subject key identifier:   BF:96:69:E1:7A:42:CB:ED:D9:D0:93:A0:1A:CF:07:F4:58:CA:31:AE
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0C27
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/v5Zp4XpCy-3Z0JOgGs8H9FjKMa4.roa
Signing time:             Sun 07 Feb 2021 07:05:26 +0000
ROA not before:           Sun 07 Feb 2021 07:05:26 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18049
IP address blocks:        106.105.112.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3111 (0xc27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Feb  7 07:05:26 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BF9669E17A42CBEDD9D093A01ACF07F458CA31AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:65:fb:89:3b:a0:d8:46:65:91:41:6f:89:65:
                    86:db:0d:7c:d9:0b:a1:02:a9:54:0b:84:c3:09:d1:
                    e3:4f:f5:be:b1:27:7a:d8:03:40:06:78:f3:2b:5b:
                    69:1f:f7:cb:ec:d6:4f:4e:51:f4:10:68:0f:44:f7:
                    58:29:db:ce:78:7d:40:12:e8:d6:91:22:95:29:4d:
                    d1:71:1c:aa:dc:a3:32:35:0c:2f:39:f2:8f:d1:bb:
                    0d:70:48:a7:78:9e:b0:25:94:2a:99:51:5b:66:e5:
                    94:12:67:61:1d:be:a0:64:ed:d0:96:ad:01:5a:e3:
                    1f:e6:cd:c8:52:f7:0b:04:5a:e9:05:37:da:c6:25:
                    4f:b6:bb:d4:ab:eb:b6:1f:97:65:6a:f4:f5:6c:a2:
                    14:2d:3c:75:63:41:cc:65:38:45:3f:70:c2:c9:e9:
                    97:56:04:f2:84:98:10:86:20:2b:fa:85:a6:2f:cc:
                    b9:f7:0a:38:ba:bf:35:72:48:72:27:5b:2f:7f:59:
                    4e:3e:e6:0f:ab:8a:1e:09:a3:cf:88:b8:d1:5a:5c:
                    be:df:f7:ec:76:a7:8a:7a:ef:a7:ef:43:00:d3:ba:
                    a6:27:ca:7e:54:df:c3:fd:bd:a2:69:c1:40:7e:35:
                    6c:6d:b4:0f:5b:d9:67:72:e3:68:2f:ea:00:87:66:
                    ba:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:96:69:E1:7A:42:CB:ED:D9:D0:93:A0:1A:CF:07:F4:58:CA:31:AE
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/v5Zp4XpCy-3Z0JOgGs8H9FjKMa4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.105.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b4:34:cb:8c:6d:d0:41:2a:c5:de:cf:ef:63:c6:39:00:8a:e6:
         bb:04:a2:83:53:3c:b7:24:ec:a9:22:37:93:c7:38:b1:0a:98:
         61:b9:61:f9:18:4a:e5:4e:a8:76:a5:50:5b:cd:77:d6:5c:3f:
         7c:82:99:3a:da:74:25:db:68:d8:34:6c:0b:93:88:86:2f:e3:
         24:5a:ac:bc:8a:a2:6d:13:0b:59:9e:b3:4f:23:05:0e:15:c9:
         2f:a1:6c:7c:97:43:3a:78:11:fa:c3:94:41:1c:12:e8:66:78:
         11:fd:e2:5d:f4:31:23:aa:52:78:35:71:08:d6:3c:80:4b:3e:
         8a:11:06:d2:fc:ea:67:eb:51:99:a7:bb:76:ec:90:5f:a4:5e:
         bb:e4:56:68:34:70:79:8b:7e:0a:38:cd:b2:d7:f6:e0:45:77:
         62:ac:de:4f:a0:51:85:59:56:68:32:30:53:d2:61:62:bb:9c:
         88:17:79:7f:09:1c:72:7f:c8:f0:bd:bf:43:84:3d:a9:b9:b4:
         4b:44:c5:2a:d4:33:91:c9:4e:ce:54:a9:97:41:3b:d3:51:99:
         0f:9d:a4:32:80:0d:81:33:cd:03:5c:3c:d5:8e:be:b4:ed:c5:
         e6:b7:dc:67:bc:ce:16:fa:b2:78:2f:bf:d7:a0:46:6b:27:cb:
         9b:62:e4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----