Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/enwMMxcSlcHQpQ5Zz09NNSkUlPI.roa
File:                     enwMMxcSlcHQpQ5Zz09NNSkUlPI.roa (raw, json)
Hash identifier:          zPOnxDW9mGcrKO5Bzk6vCeYKsfDREQRRIeBTSOZZBRQ=
Subject key identifier:   7A:7C:0C:33:17:12:95:C1:D0:A5:0E:59:CF:4F:4D:35:29:14:94:F2
Certificate issuer:       /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
Certificate serial:       088E
Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/enwMMxcSlcHQpQ5Zz09NNSkUlPI.roa
Signing time:             Wed 02 Dec 2020 03:39:19 +0000
ROA not before:           Wed 02 Dec 2020 03:39:19 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18018
IP address blocks:        122.255.94.64/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2190 (0x88e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
        Validity
            Not Before: Dec  2 03:39:19 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=7A7C0C33171295C1D0A50E59CF4F4D35291494F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:33:46:50:d4:36:53:1b:c6:44:2f:dd:98:9e:
                    8c:44:d0:1e:ee:53:c4:d9:b1:1c:f9:54:b4:8d:19:
                    fb:60:54:81:54:83:42:7d:a1:a1:d1:cf:2b:2f:12:
                    fb:73:0b:73:71:48:9e:a6:96:0d:51:aa:d4:da:c6:
                    3d:40:a3:44:bc:9b:51:f0:2f:a3:76:bd:df:6c:29:
                    a9:62:33:18:52:30:9e:f3:37:61:7f:c9:ee:b7:14:
                    54:86:2f:fc:d3:e0:2a:8d:7b:89:19:60:df:96:95:
                    f7:82:9f:b5:b2:82:30:09:6b:c9:f3:15:ed:20:c7:
                    f4:52:a3:5b:c2:c9:4f:1c:a9:ed:b1:46:87:0c:40:
                    fe:a4:f0:12:23:75:53:d7:13:6b:13:98:c9:0c:35:
                    6f:7b:38:49:7d:b9:bc:18:59:2e:7a:99:61:3e:47:
                    69:26:cd:24:a3:21:cc:b5:e3:06:10:16:3b:bc:56:
                    ea:f5:05:9e:bf:fd:8a:fc:9c:42:fb:c3:e4:6e:c7:
                    10:c1:bd:14:75:57:5b:7f:bd:e6:72:34:15:e5:51:
                    81:88:9a:19:6f:93:c0:b9:db:0c:e9:b5:0c:fa:c3:
                    3f:0d:11:40:11:30:43:22:af:ea:18:7b:f0:4c:5a:
                    b9:82:cd:26:db:ed:cf:77:ca:a9:c6:35:9f:bd:dc:
                    9b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:7C:0C:33:17:12:95:C1:D0:A5:0E:59:CF:4F:4D:35:29:14:94:F2
            X509v3 Authority Key Identifier:
                keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/enwMMxcSlcHQpQ5Zz09NNSkUlPI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.255.94.64/26

    Signature Algorithm: sha256WithRSAEncryption
         9a:2f:f3:4c:f1:a9:b1:16:b7:7d:2b:b5:16:9e:d1:dc:40:cc:
         12:eb:d4:bc:20:d5:73:8f:75:88:f3:7c:c9:21:62:3f:77:c6:
         23:7d:ce:92:7d:98:ac:6b:62:07:27:70:4c:bc:25:be:a7:ca:
         3b:84:a9:56:a5:24:d1:2f:9d:bf:de:53:67:53:9d:f3:11:07:
         97:9c:01:24:02:6d:36:5d:1e:9e:ae:cf:b4:d9:47:20:a8:c6:
         a1:46:65:30:0b:0d:d9:ee:91:15:d4:d3:26:0b:f5:07:eb:bf:
         c1:5e:81:e9:0e:e5:42:9f:cc:06:28:98:2d:03:ea:1f:12:6e:
         b8:42:74:f9:e1:fd:2e:fe:24:c2:e3:d3:82:4c:34:dc:6e:a7:
         f8:26:b5:18:e6:98:25:e3:d4:0f:4f:7c:13:c7:4e:e0:20:30:
         79:2b:ab:cd:85:b6:eb:c7:d4:da:25:4f:c8:7f:74:36:1a:11:
         11:9b:99:00:57:a6:68:2d:8c:f9:4e:db:54:de:c6:a6:7b:06:
         14:df:31:bd:9b:a6:4d:a3:8d:60:55:1f:32:96:52:81:4b:46:
         3c:22:83:35:85:06:91:c4:d5:18:27:a6:58:a1:9d:3b:65:65:
         45:75:ca:36:c8:b0:df:a7:3d:d7:c5:c5:90:78:33:f4:39:d3:
         64:7d:b1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----