Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NEBULAX/Xy7e09GbKnwxPnq5f7K6jTVS2mk.roa
File:                     Xy7e09GbKnwxPnq5f7K6jTVS2mk.roa (raw, json)
Hash identifier:          vZqIRykkfke44/cuoQ/m57vmSxHTgg1p1DLtJ4hMndY=
Subject key identifier:   5F:2E:DE:D3:D1:9B:2A:7C:31:3E:7A:B9:7F:B2:BA:8D:35:52:DA:69
Certificate issuer:       /CN=1D4D78F56750C7598953366D459A12B658B7FF38
Certificate serial:       010D
Authority key identifier: 1D:4D:78:F5:67:50:C7:59:89:53:36:6D:45:9A:12:B6:58:B7:FF:38
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/HU149WdQx1mJUzZtRZoStli3_zg.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NEBULAX/Xy7e09GbKnwxPnq5f7K6jTVS2mk.roa
Signing time:             Wed 09 Nov 2022 19:18:38 +0000
ROA not before:           Wed 09 Nov 2022 19:18:38 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18041
IP address blocks:        2406:bfc0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D4D78F56750C7598953366D459A12B658B7FF38
        Validity
            Not Before: Nov  9 19:18:38 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=5F2EDED3D19B2A7C313E7AB97FB2BA8D3552DA69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:69:8a:d9:17:b4:e7:ea:3b:87:82:f0:ea:68:
                    6f:86:d8:c8:c9:a7:4c:6d:19:8b:4c:1e:1a:0d:ad:
                    8d:3c:80:41:31:d2:35:74:28:17:8d:44:43:f3:45:
                    0e:b9:19:2a:19:a1:b7:e2:4c:86:d9:7c:d3:d2:71:
                    a3:89:0a:b0:9f:6d:96:6a:80:51:73:39:04:64:e8:
                    84:be:17:b2:91:f2:b9:9b:3e:63:96:51:77:0c:a9:
                    47:6e:3b:b4:6a:76:b8:9c:f5:e2:d5:ac:45:1c:4e:
                    f4:dc:a6:c8:95:c3:78:72:ba:47:de:ed:1f:3d:22:
                    83:d4:29:91:ef:c2:5d:c8:de:c0:d1:5a:7f:a4:1d:
                    fe:b2:22:22:b3:6d:65:f2:eb:2e:38:65:a1:dd:04:
                    01:ac:e1:5f:fa:94:68:fe:fd:11:87:71:a1:8d:e5:
                    d9:ff:c5:94:f5:26:79:34:05:e3:77:62:35:c0:95:
                    21:5c:6b:69:5d:ea:81:a3:46:f2:ce:25:c9:51:82:
                    fa:ab:0f:a7:ef:ff:e5:94:f4:34:ea:d3:7e:75:e7:
                    e7:84:2f:1a:a4:dd:dc:28:d0:e7:c6:61:06:cf:23:
                    be:ec:4e:ac:e8:cd:1f:ee:83:59:e9:a5:31:99:0d:
                    30:b3:36:5a:94:dc:0b:ce:c0:d8:fc:b7:26:b4:f7:
                    c5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2E:DE:D3:D1:9B:2A:7C:31:3E:7A:B9:7F:B2:BA:8D:35:52:DA:69
            X509v3 Authority Key Identifier:
                keyid:1D:4D:78:F5:67:50:C7:59:89:53:36:6D:45:9A:12:B6:58:B7:FF:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NEBULAX/HU149WdQx1mJUzZtRZoStli3_zg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HU149WdQx1mJUzZtRZoStli3_zg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NEBULAX/Xy7e09GbKnwxPnq5f7K6jTVS2mk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:bfc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:e1:0b:20:68:d4:d8:d1:ab:a8:92:e2:26:fc:41:14:f4:7b:
         0b:d0:ad:18:5b:32:fe:bd:b2:8f:db:84:38:a3:04:cc:ab:85:
         e8:13:00:2e:ae:d7:8d:61:52:45:3d:85:8c:0f:2e:f1:d3:2f:
         b9:01:37:67:aa:c4:3a:4a:dd:90:58:c3:77:92:db:15:a9:d9:
         25:98:1f:73:20:46:05:20:2e:1a:2d:23:92:79:8e:47:5a:02:
         a6:55:32:38:42:61:77:89:2e:46:9b:48:e0:0d:63:06:08:65:
         2a:54:24:e8:70:12:5d:8c:65:7b:17:25:a7:70:5c:b1:03:86:
         bc:bb:aa:f1:3c:fb:e0:f9:3d:27:d3:75:e0:4d:d3:3f:b2:27:
         e2:4d:b8:1d:5d:6a:33:60:e1:8d:88:9d:83:9f:26:0b:ba:d6:
         49:09:48:74:18:4f:9e:40:0f:e6:9f:51:94:41:37:a2:6d:2b:
         10:7d:2a:3a:f6:6e:43:75:5e:f6:29:0e:62:3f:27:62:a9:ac:
         27:2f:19:de:72:3b:92:10:59:31:11:ad:bd:bf:c6:c9:39:cd:
         23:83:b7:87:94:e0:78:8b:4a:40:39:51:e3:f0:fa:f0:7a:b7:
         42:21:09:e0:e2:4b:4b:8d:de:2d:34:8d:4e:02:c5:04:9e:a9:
         d5:f0:9f:c5
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUQ0
RDc4RjU2NzUwQzc1OTg5NTMzNjZENDU5QTEyQjY1OEI3RkYzODAeFw0yMjExMDkx
OTE4MzhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDVGMkVERUQzRDE5QjJB
N0MzMTNFN0FCOTdGQjJCQThEMzU1MkRBNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/aYrZF7Tn6juHgvDqaG+G2MjJp0xtGYtMHhoNrY08gEEx0jV0
KBeNREPzRQ65GSoZobfiTIbZfNPScaOJCrCfbZZqgFFzOQRk6IS+F7KR8rmbPmOW
UXcMqUduO7Rqdric9eLVrEUcTvTcpsiVw3hyukfe7R89IoPUKZHvwl3I3sDRWn+k
Hf6yIiKzbWXy6y44ZaHdBAGs4V/6lGj+/RGHcaGN5dn/xZT1Jnk0BeN3YjXAlSFc
a2ld6oGjRvLOJclRgvqrD6fv/+WU9DTq03515+eELxqk3dwo0OfGYQbPI77sTqzo
zR/ug1nppTGZDTCzNlqU3AvOwNj8tya098WlAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUXy7e09GbKnwxPnq5f7K6jTVS2mkwHwYDVR0jBBgwFoAUHU149WdQx1mJUzZt
RZoStli3/zgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkVCVUxB
WC9IVTE0OVdkUXgxbUpVelp0UlpvU3RsaTNfemcuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0hVMTQ5V2RReDFtSlV6WnRSWm9TdGxpM196Zy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL05FQlVMQVgvWHk3ZTA5R2JLbnd4UG5x
NWY3SzZqVFZTMm1rLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF
ACQGv8AwDQYJKoZIhvcNAQELBQADggEBALnhCyBo1NjRq6iS4ib8QRT0ewvQrRhb
Mv69so/bhDijBMyrhegTAC6u141hUkU9hYwPLvHTL7kBN2eqxDpK3ZBYw3eS2xWp
2SWYH3MgRgUgLhotI5J5jkdaAqZVMjhCYXeJLkabSOANYwYIZSpUJOhwEl2MZXsX
JadwXLEDhry7qvE8++D5PSfTdeBN0z+yJ+JNuB1dajNg4Y2InYOfJgu61kkJSHQY
T55AD+afUZRBN6JtKxB9Kjr2bkN1XvYpDmI/J2KprCcvGd5yO5IQWTERrb2/xsk5
zSODt4eU4HiLSkA5UePw+vB6t0IhCeDiS0uN3i00jU4CxQSeqdXwn8U=
-----END CERTIFICATE-----