Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NEBULAX/VFjlyEonQ-bUwjlUkkzV3DBx820.roa
File:                     VFjlyEonQ-bUwjlUkkzV3DBx820.roa (raw, json)
Hash identifier:          xXkTZByJ3LLjBtFTcqFUNNdcIMzhpZWZi88O0cvJ280=
Subject key identifier:   54:58:E5:C8:4A:27:43:E6:D4:C2:39:54:92:4C:D5:DC:30:71:F3:6D
Certificate issuer:       /CN=1D4D78F56750C7598953366D459A12B658B7FF38
Certificate serial:       011B
Authority key identifier: 1D:4D:78:F5:67:50:C7:59:89:53:36:6D:45:9A:12:B6:58:B7:FF:38
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/HU149WdQx1mJUzZtRZoStli3_zg.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NEBULAX/VFjlyEonQ-bUwjlUkkzV3DBx820.roa
Signing time:             Mon 14 Nov 2022 01:55:17 +0000
ROA not before:           Mon 14 Nov 2022 01:55:17 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18041
IP address blocks:        2406:bfc0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D4D78F56750C7598953366D459A12B658B7FF38
        Validity
            Not Before: Nov 14 01:55:17 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=5458E5C84A2743E6D4C23954924CD5DC3071F36D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:85:ec:8c:4e:dc:10:d6:f9:c8:4b:aa:2f:ec:
                    96:97:f1:98:b9:93:df:87:f5:27:98:04:3b:77:15:
                    cf:97:ba:db:b7:37:01:d5:85:9f:f2:46:67:f5:64:
                    60:f1:06:ca:5a:47:31:57:d2:1b:d4:94:42:23:90:
                    ac:6b:e0:a4:db:f5:f1:75:47:c6:40:43:57:ab:0c:
                    07:db:1c:e9:3b:6d:d7:a3:93:d9:13:f8:8f:ef:99:
                    91:6b:14:9e:ab:d5:a0:76:50:06:d0:a6:6d:39:98:
                    ae:9b:10:65:12:30:47:59:ed:4e:8e:1e:8a:35:02:
                    48:a9:04:cd:dc:c5:17:2a:8d:b4:e0:17:ae:81:91:
                    cc:5d:7e:95:69:77:72:3e:36:a3:bd:e3:e8:93:df:
                    1b:ba:ca:02:b4:74:46:39:f1:c5:73:53:6a:2b:af:
                    02:ff:f6:dc:10:97:81:13:76:fc:7d:00:d3:f0:4c:
                    72:5c:60:e6:5e:84:23:5c:70:b0:1c:eb:b6:6b:fe:
                    89:cc:4a:fe:cf:03:af:3d:00:cd:a7:e3:47:15:1f:
                    a5:77:7f:85:60:b1:f8:f5:3f:bd:6a:b0:bc:34:d5:
                    7b:96:9a:b4:d7:ed:67:72:6d:61:cc:db:bb:ad:c9:
                    69:ee:bf:67:59:16:3b:7f:1e:42:e5:01:ed:b3:ec:
                    73:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:58:E5:C8:4A:27:43:E6:D4:C2:39:54:92:4C:D5:DC:30:71:F3:6D
            X509v3 Authority Key Identifier:
                keyid:1D:4D:78:F5:67:50:C7:59:89:53:36:6D:45:9A:12:B6:58:B7:FF:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NEBULAX/HU149WdQx1mJUzZtRZoStli3_zg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HU149WdQx1mJUzZtRZoStli3_zg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NEBULAX/VFjlyEonQ-bUwjlUkkzV3DBx820.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:bfc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:c4:d5:65:a7:b5:24:ac:79:09:78:56:45:3c:f2:6b:73:2b:
         90:33:b0:49:7e:c2:2d:f9:16:c1:53:dc:5e:f8:d7:51:e1:a2:
         9b:b2:7e:11:19:ce:ff:f0:9b:11:aa:9f:ac:38:b4:6a:7e:3c:
         44:fa:f9:6f:44:9f:62:4d:c8:71:69:ca:db:12:cf:1f:55:77:
         2c:f4:7b:41:fe:39:53:1c:7f:d3:13:85:30:35:68:fe:3d:70:
         64:22:d9:27:3a:ec:1f:03:5b:10:d9:df:a5:56:9f:a9:c3:d9:
         98:02:ba:e2:1f:f6:17:e2:ee:1a:56:95:d0:2d:bc:3e:27:10:
         9e:28:b8:18:da:4b:4a:fd:b3:74:d0:dc:de:87:b7:ae:a9:e7:
         e7:78:68:09:e7:53:8b:31:e6:a5:c3:13:88:3d:e6:21:e8:fc:
         10:23:1c:c9:07:04:04:10:01:1f:1c:c7:ac:fe:cd:80:21:e0:
         85:5c:41:17:86:ce:6a:af:ab:27:9e:a1:1d:d9:d4:4f:5f:2b:
         d4:89:f7:c1:44:3d:ab:07:9e:aa:42:21:9e:ac:b7:c6:cc:46:
         cd:d2:7d:dc:e6:ba:8e:bc:4e:35:bf:06:9e:38:8c:87:4f:74:
         9d:1d:b3:09:47:bb:e6:2e:ae:f0:97:a2:be:5d:39:d4:19:4c:
         0c:54:5e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----