Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/TwWsZWY6sMWsIMnIF4c731bImqY.roa
File:                     TwWsZWY6sMWsIMnIF4c731bImqY.roa (raw, json)
Hash identifier:          exmiRxlbk8Bl0DUGfqbGE134j3BVA3cpR2JbtVXihfg=
Subject key identifier:   4F:05:AC:65:66:3A:B0:C5:AC:20:C9:C8:17:87:3B:DF:56:C8:9A:A6
Certificate issuer:       /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial:       013B
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/TwWsZWY6sMWsIMnIF4c731bImqY.roa
Signing time:             Mon 04 Jan 2021 07:54:07 +0000
ROA not before:           Mon 04 Jan 2021 07:54:07 +0000
ROA not after:            Tue 05 Oct 2021 04:04:36 +0000
asID:                     140936
IP address blocks:        2406:8dc0:2003::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
        Validity
            Not Before: Jan  4 07:54:07 2021 GMT
            Not After : Oct  5 04:04:36 2021 GMT
        Subject: CN=4F05AC65663AB0C5AC20C9C817873BDF56C89AA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:30:2c:84:27:61:19:7c:82:00:70:f9:f0:40:
                    bd:6f:90:e2:3f:9a:74:2e:f2:86:c7:28:50:11:f0:
                    e0:68:73:e8:d3:40:92:8c:fe:2d:5b:88:5b:80:50:
                    86:66:64:11:6b:9e:a0:f9:aa:99:6b:48:8e:15:0d:
                    10:47:f5:8c:98:3c:c3:32:26:6c:fa:60:1a:b5:50:
                    8d:84:a5:52:f0:a9:af:36:d6:28:dc:6d:72:40:b5:
                    11:39:5b:aa:fb:47:a4:a9:a1:6a:6e:63:dc:f6:36:
                    aa:87:58:fb:75:e8:af:9c:35:24:15:8d:69:a6:c7:
                    21:40:34:78:ad:62:1a:8b:95:11:6e:33:d3:aa:09:
                    f1:b1:16:2d:19:46:70:39:55:50:30:bf:c6:f2:e5:
                    1b:e6:2e:84:4f:a1:c0:a4:e8:e1:37:f0:c6:0e:d5:
                    30:f1:ff:0c:91:a4:f4:bc:8e:ef:7e:8f:c8:28:66:
                    4c:64:63:de:93:c6:4c:f6:55:4b:0f:1c:d6:f9:f9:
                    11:7d:f1:b2:90:44:2f:57:17:6d:3b:7b:f5:ba:07:
                    50:a6:a9:30:c5:66:39:7b:05:75:4d:23:9d:05:da:
                    7f:9b:38:b2:71:2a:91:4b:08:0b:17:f9:7c:cb:b2:
                    2f:43:92:e8:04:c7:54:99:f1:e1:59:dc:9b:f6:ba:
                    97:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:05:AC:65:66:3A:B0:C5:AC:20:C9:C8:17:87:3B:DF:56:C8:9A:A6
            X509v3 Authority Key Identifier:
                keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/TwWsZWY6sMWsIMnIF4c731bImqY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:8dc0:2003::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:0e:c2:b7:dc:cc:41:b6:a1:8e:7c:1f:db:4c:d4:d0:81:2f:
         0c:0a:11:dd:74:a8:21:48:47:47:d7:ca:0b:4d:bf:98:b6:47:
         c0:13:82:7c:a4:f7:74:19:e2:e8:81:a6:bc:87:af:bb:6a:45:
         63:0d:f8:6e:9a:60:11:83:29:b7:24:5c:e0:be:00:68:ea:9d:
         43:26:0b:17:b9:64:a3:47:92:40:4c:7b:06:00:4f:b2:11:6d:
         21:1d:bd:fd:8f:0f:d7:0f:1f:c6:47:fe:4b:88:75:42:6f:e3:
         29:26:a6:47:c0:7b:87:a6:ed:e2:d2:a8:63:9a:fb:65:04:96:
         0e:75:5e:6a:07:7d:e1:e8:5e:15:59:68:5f:c1:fe:7d:dc:1c:
         c1:21:ac:71:f1:1b:e1:63:b4:b0:3b:58:97:a4:a7:9b:1d:1c:
         50:c6:51:95:f5:61:38:c3:06:21:5c:2e:83:0f:bd:ed:3e:24:
         a7:b4:3f:8f:0d:9c:7d:54:f8:9d:16:1f:2f:67:40:14:fe:a5:
         f7:4f:b1:32:24:2f:97:aa:7a:52:99:47:e8:0f:95:c8:81:d3:
         83:16:e4:f4:ec:5c:b1:23:7b:11:c6:4d:fc:fc:df:51:7d:06:
         00:60:85:e5:e4:a0:54:11:ed:40:45:64:be:e3:cf:98:5a:de:
         34:1d:43:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----