Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/IFDCzxexNXn5MbudqaJ_cEEgy9A.roa
File:                     IFDCzxexNXn5MbudqaJ_cEEgy9A.roa (raw, json)
Hash identifier:          I/wAb/+LPDV85dJWVj8cze0jSak2DYP3L+CdYgGQEC0=
Subject key identifier:   20:50:C2:CF:17:B1:35:79:F9:31:BB:9D:A9:A2:7F:70:41:20:CB:D0
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0A62
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/IFDCzxexNXn5MbudqaJ_cEEgy9A.roa
Signing time:             Sun 07 Feb 2021 11:37:39 +0000
ROA not before:           Sun 07 Feb 2021 11:37:39 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     20940
IP address blocks:        210.65.144.128/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2658 (0xa62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Feb  7 11:37:39 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=2050C2CF17B13579F931BB9DA9A27F704120CBD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1b:46:46:b3:88:a0:08:da:93:10:86:8e:18:
                    98:b8:89:b0:67:93:af:de:cb:bb:be:0e:86:86:28:
                    60:99:26:28:1d:6c:51:42:4f:d0:21:90:f2:2f:d5:
                    06:8c:fc:2a:64:63:96:95:3c:5b:b7:cd:83:39:ea:
                    ec:82:3e:6c:03:28:b5:a6:51:f0:01:43:46:16:e8:
                    d5:c6:e0:8d:77:a7:cf:c0:db:1e:6f:ca:d4:e4:17:
                    08:4b:53:9a:eb:17:fa:15:ff:1b:b5:e1:18:9e:87:
                    35:53:29:b3:60:14:6f:25:a1:98:a0:cc:09:30:cc:
                    f4:5a:43:80:f3:03:42:cd:1b:ff:ad:37:93:ee:e8:
                    d7:be:df:2e:41:cc:71:b6:54:51:6a:f8:21:c1:6c:
                    d5:20:b4:ee:b7:fb:6c:b3:e9:5e:96:f6:bb:c2:c4:
                    92:bc:b7:e7:42:09:2c:b3:9f:21:bc:d7:32:db:8e:
                    c7:07:88:d8:d0:60:15:27:93:0d:ab:7d:92:d5:6b:
                    9d:bc:69:5a:ba:30:77:eb:86:09:6f:ad:a2:e1:8c:
                    8e:39:53:68:44:ae:a7:05:39:1e:75:38:68:90:f1:
                    f5:94:09:cd:fa:b6:fe:ae:fc:41:a7:4a:36:47:32:
                    f4:99:3b:6f:7f:ca:7b:d0:4f:49:a0:8b:22:00:44:
                    3e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:50:C2:CF:17:B1:35:79:F9:31:BB:9D:A9:A2:7F:70:41:20:CB:D0
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/IFDCzxexNXn5MbudqaJ_cEEgy9A.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.65.144.128/26

    Signature Algorithm: sha256WithRSAEncryption
         6f:c2:b7:cc:a2:e3:c1:da:fb:a2:30:7c:0e:4e:ac:16:da:d6:
         c9:c9:59:4e:78:30:f2:23:70:ee:5a:cf:2b:6d:83:06:11:c0:
         29:88:f0:e9:1e:b2:19:b0:6a:0d:a7:ef:09:9a:93:8e:95:7c:
         21:08:e7:44:b7:af:9c:dc:e8:ff:16:b8:eb:0b:98:b0:07:4e:
         2f:43:e5:12:6d:b5:fc:5a:dc:3c:4d:25:ba:f8:14:d9:f5:0c:
         b3:44:45:2a:56:27:c3:62:a9:94:7d:58:08:a6:77:a1:2f:86:
         3e:3d:a7:5e:17:79:0f:9f:81:dd:76:fb:2b:54:1a:b9:cf:54:
         d3:1c:01:5a:ad:7f:c2:e7:f7:11:84:1f:29:e8:80:e7:43:88:
         41:eb:c2:95:d2:1a:de:d9:22:ef:40:60:0b:0c:33:e4:be:ab:
         4c:5a:bc:95:73:42:8f:1d:e4:a4:c3:c6:4d:4b:66:13:5f:74:
         cf:70:f5:7f:c9:3c:c6:6b:8f:79:30:27:3e:df:e1:02:8b:67:
         35:06:90:b4:a1:60:bb:c4:e2:2a:ba:b6:f4:9b:03:17:33:f8:
         68:e9:b0:81:2e:59:4f:2a:9d:6f:1f:f6:f3:09:0c:62:5d:a5:
         ec:52:64:5d:91:5b:4a:11:34:ad:7f:5c:ab:2b:1b:92:d8:a1:
         b6:c5:1e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----