Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/f50gdLiVIS4Ye8MNEVoGxUBiH34.roa
File:                     f50gdLiVIS4Ye8MNEVoGxUBiH34.roa (raw, json)
Hash identifier:          08bORkiqFNEMtUmvggfLa31dfSLhKR9YZhUY4rxItic=
Subject key identifier:   7F:9D:20:74:B8:95:21:2E:18:7B:C3:0D:11:5A:06:C5:40:62:1F:7E
Certificate issuer:       /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial:       0106
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/f50gdLiVIS4Ye8MNEVoGxUBiH34.roa
Signing time:             Thu 26 Nov 2020 10:54:08 +0000
ROA not before:           Thu 26 Nov 2020 10:54:08 +0000
ROA not after:            Tue 05 Oct 2021 04:04:36 +0000
asID:                     212279
IP address blocks:        2406:8dc0:2100::/40 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262 (0x106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
        Validity
            Not Before: Nov 26 10:54:08 2020 GMT
            Not After : Oct  5 04:04:36 2021 GMT
        Subject: CN=7F9D2074B895212E187BC30D115A06C540621F7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:23:92:13:dd:a5:53:64:46:41:c8:84:43:e9:
                    43:1a:08:36:06:e7:0f:2d:e7:c4:89:c8:08:36:fa:
                    33:a8:a1:10:70:9a:f5:26:ce:b9:0f:c9:23:e6:91:
                    a8:6f:8e:6e:0f:89:b1:d8:76:f9:8f:7b:ec:a4:7c:
                    1c:1f:91:a4:52:4d:86:3e:f9:09:4c:91:f9:1a:15:
                    95:f3:27:00:fb:10:a9:c3:ba:2c:6e:79:3a:2f:06:
                    d1:7b:73:df:09:7e:ac:f5:63:ca:f3:14:55:07:5a:
                    25:c1:dd:9b:a7:65:fa:2c:b7:bd:50:7e:be:ed:97:
                    1d:55:29:b6:85:97:4a:a6:4a:f1:d7:7c:57:6f:ed:
                    4a:2c:2e:e1:04:66:dd:b1:92:4b:04:4f:31:1d:43:
                    8d:ed:a8:60:26:15:33:95:7b:0c:30:b3:e2:81:e8:
                    71:e1:06:00:43:1e:10:a4:20:7c:8e:2c:66:82:e4:
                    54:93:6a:52:4a:78:cf:4a:e5:4f:47:8a:1a:e2:7a:
                    73:0f:c3:eb:e1:07:45:b4:b3:e4:66:14:99:f4:aa:
                    50:06:83:98:ca:eb:1d:7b:c6:83:20:ce:1c:a0:c4:
                    a0:c1:ab:c2:77:25:f4:e6:1d:bb:72:60:e7:41:11:
                    e9:f9:66:60:c8:8d:3a:d7:7a:20:6c:26:dd:90:58:
                    0e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:9D:20:74:B8:95:21:2E:18:7B:C3:0D:11:5A:06:C5:40:62:1F:7E
            X509v3 Authority Key Identifier:
                keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/f50gdLiVIS4Ye8MNEVoGxUBiH34.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:8dc0:2100::/40

    Signature Algorithm: sha256WithRSAEncryption
         e8:95:44:50:9a:6f:8e:24:3e:18:3a:5d:da:21:56:7d:dd:ba:
         d5:0b:89:12:9b:0d:7b:ca:34:ea:7b:6a:ca:ed:33:1a:b3:2f:
         5d:b9:df:bd:23:6d:d1:65:28:6d:33:b0:2d:2c:ec:b5:54:0c:
         bc:9f:6c:36:04:08:73:5f:94:62:23:c6:37:25:e4:ce:46:c3:
         12:9d:33:af:e8:f9:c2:6f:31:96:6b:2f:ec:eb:a3:3c:dc:b7:
         e2:87:4d:2d:a6:fa:d1:28:e0:c8:67:e3:7e:04:05:d3:dd:83:
         46:cb:ec:db:0e:dd:b5:04:79:8b:df:92:03:fc:0b:86:60:9e:
         85:3e:69:6c:26:89:c4:c6:22:11:bb:41:dc:9d:d0:62:90:f8:
         35:1f:00:78:66:85:5b:00:2a:8f:be:c2:9b:73:d9:64:e4:ca:
         01:ce:f2:27:24:00:55:06:3b:c1:cd:35:13:07:a2:65:39:bb:
         64:eb:61:63:73:0e:13:36:ae:4e:da:71:49:b9:9d:c9:b7:2f:
         41:f7:ed:fb:21:60:bd:30:c5:58:36:bf:55:c4:6c:9c:24:73:
         48:24:64:e7:4e:92:7d:68:95:45:e5:a1:55:fb:fe:70:50:5e:
         01:43:b1:a0:07:37:45:36:4d:96:6e:0d:34:90:60:c7:33:f6:
         fd:a1:cd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----