Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/5j5N8fAkji2gg1w--WG6Il0JHno.roa
File:                     5j5N8fAkji2gg1w--WG6Il0JHno.roa (raw, json)
Hash identifier:          /8MnRUELpzvjfK2k8vqye09V6ElubM0DsBWVXLi6WsA=
Subject key identifier:   E6:3E:4D:F1:F0:24:8E:2D:A0:83:5C:3E:F9:61:BA:22:5D:09:1E:7A
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       093D
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/5j5N8fAkji2gg1w--WG6Il0JHno.roa
Signing time:             Sun 07 Feb 2021 11:53:04 +0000
ROA not before:           Sun 07 Feb 2021 11:53:04 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24168
IP address blocks:        121.50.144.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2365 (0x93d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Feb  7 11:53:04 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E63E4DF1F0248E2DA0835C3EF961BA225D091E7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bd:18:9e:d4:c4:d5:01:e7:15:48:2f:2d:f4:
                    70:12:68:50:40:9c:db:99:ed:59:9a:8b:f1:4f:3d:
                    9a:86:58:e6:89:f1:f4:8a:b5:c9:9e:ef:70:80:ab:
                    f6:77:06:9f:c7:f9:b3:cd:94:bd:de:7f:fa:9f:54:
                    c9:88:9d:8a:76:bb:4e:cc:57:44:16:6c:68:9f:bb:
                    5b:20:e4:ab:6e:0a:37:f3:ce:d7:1d:96:97:16:d5:
                    fe:d7:21:2f:e4:99:b7:5b:8a:c7:c1:d3:ec:f3:d9:
                    32:c9:77:3c:bf:9c:05:a9:0a:7a:0c:78:c1:bc:d3:
                    75:bb:23:9b:ea:4b:19:9c:16:6a:61:9f:f5:f9:75:
                    68:42:1b:59:e3:9c:fb:b5:9c:34:c3:12:23:d2:31:
                    ca:b6:74:cb:b8:0d:c1:c9:a1:fc:87:e9:b8:8d:1a:
                    c1:6c:f0:cd:be:08:e9:e0:9d:0a:f8:71:92:62:99:
                    00:2d:6a:05:55:f6:58:ef:b1:9b:fe:4b:35:b8:12:
                    10:0f:34:d3:47:3c:3c:2a:cc:ba:ed:79:d1:4d:fd:
                    b4:f5:cb:4a:b6:b8:8e:04:e6:c3:7d:99:63:b5:f2:
                    bf:87:ee:84:9a:2c:1d:ff:b6:b1:5d:47:da:bd:45:
                    52:bc:ea:6d:f7:1a:53:ff:d4:41:20:8f:3b:d8:22:
                    94:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3E:4D:F1:F0:24:8E:2D:A0:83:5C:3E:F9:61:BA:22:5D:09:1E:7A
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/5j5N8fAkji2gg1w--WG6Il0JHno.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:85:c0:b3:bc:0a:a6:b4:71:db:3c:0a:17:ba:08:d9:93:e8:
         08:c2:06:bb:74:88:7a:3d:18:e6:68:49:f5:5b:a3:89:a8:14:
         e8:0d:a7:e9:7a:30:b5:b7:96:f9:c7:0f:cf:fa:2c:ea:f9:53:
         4d:83:5d:d7:c5:d1:bf:d5:de:2e:c2:b1:d8:64:79:fe:2a:86:
         60:3c:5f:3d:9c:bc:20:6c:50:c7:ea:87:7d:a9:54:6e:0d:3b:
         16:e5:98:b3:12:aa:85:68:73:86:66:bc:b2:40:03:74:56:c0:
         0f:06:e2:e9:1e:13:b1:8a:e8:ea:19:f4:fe:c2:30:6c:74:8c:
         0e:2f:a1:44:cf:b7:2b:78:46:9d:42:24:b6:ee:57:0f:22:d6:
         ef:2e:29:50:dc:7f:92:5e:18:07:ce:9d:86:ec:eb:72:14:a4:
         6b:ce:1e:1b:64:c7:9f:23:68:5f:28:de:cc:68:85:1b:e8:cb:
         c0:80:f0:dd:ad:b4:c0:07:0a:84:14:2f:2f:66:d9:a4:79:83:
         76:b7:11:16:0d:30:fc:f1:6d:53:fb:65:62:0e:83:e8:94:ea:
         59:f1:e3:d9:98:eb:06:ab:a7:76:3f:b0:09:d2:54:0c:a5:54:
         48:22:ec:ed:55:b7:68:4c:31:47:f7:b5:f4:c6:9b:1c:e4:25:
         54:91:94:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----