Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/15vHMGbqp0HOfo5sQ-Wl9vSmen8.roa
File:                     15vHMGbqp0HOfo5sQ-Wl9vSmen8.roa (raw, json)
Hash identifier:          cvatJB23Cr+lyKPEKM9jWp3ZJbz7i66pNhmWyQSG2fA=
Subject key identifier:   D7:9B:C7:30:66:EA:A7:41:CE:7E:8E:6C:43:E5:A5:F6:F4:A6:7A:7F
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0C79
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/15vHMGbqp0HOfo5sQ-Wl9vSmen8.roa
Signing time:             Sun 07 Feb 2021 11:39:44 +0000
ROA not before:           Sun 07 Feb 2021 11:39:44 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24154
IP address blocks:        210.200.0.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3193 (0xc79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Feb  7 11:39:44 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D79BC73066EAA741CE7E8E6C43E5A5F6F4A67A7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ce:bf:d0:bb:09:56:68:da:b1:ca:cc:79:81:
                    ab:70:3e:4e:9e:17:09:58:17:8a:2f:b4:ad:e0:f2:
                    28:1f:b0:73:09:2d:ca:d9:20:fc:a9:26:2f:48:84:
                    ab:ff:f0:e7:55:8f:2d:2e:29:6c:6e:66:b4:9e:a0:
                    73:19:97:11:c6:27:6c:d4:b7:b5:e4:c8:84:6b:88:
                    1a:73:8b:9a:b6:99:7a:98:af:4a:85:af:af:5c:ff:
                    16:63:39:6a:de:a0:6d:cb:ce:73:89:e0:fc:a6:1c:
                    38:ec:39:62:17:30:e7:d2:01:51:81:53:5f:39:9c:
                    e4:ea:c4:f1:50:f5:22:fc:4a:21:79:27:8c:a3:26:
                    19:22:0c:25:23:d4:8e:c4:76:53:ec:00:b2:b7:2f:
                    c5:79:77:00:60:b3:b6:e1:ae:ae:98:2c:3b:56:72:
                    17:87:a5:8a:9f:35:82:1b:c6:c4:0b:2e:0a:28:02:
                    3e:33:b4:8b:72:64:6d:3d:3d:f9:44:26:25:ff:9e:
                    66:c8:5e:d4:0b:45:67:7d:28:fd:a9:ec:bb:0a:2f:
                    ea:29:6a:67:de:81:e6:82:bd:1f:22:82:e5:5d:f6:
                    86:29:61:33:24:8a:d2:9b:81:35:49:ce:32:30:09:
                    f9:20:6b:88:62:57:20:14:82:7c:0f:12:06:d5:13:
                    0c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:9B:C7:30:66:EA:A7:41:CE:7E:8E:6C:43:E5:A5:F6:F4:A6:7A:7F
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/15vHMGbqp0HOfo5sQ-Wl9vSmen8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.200.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         79:7d:dc:ca:16:66:19:77:61:53:34:03:9a:46:b7:b4:0c:d8:
         33:e1:4e:a4:8e:61:7f:44:4b:b5:9f:a3:41:f8:7d:21:90:7c:
         a9:0f:5e:15:e4:95:8a:e8:d6:6c:84:bb:11:4d:55:f9:05:31:
         39:cb:86:1a:80:9c:4a:7e:46:b0:11:95:36:04:e0:da:c9:04:
         e9:f3:ee:98:4d:64:77:c3:fa:ff:43:a8:98:37:40:b8:a2:c1:
         29:1e:2a:fc:9d:7e:db:53:16:b0:d2:5b:76:d6:2f:97:8d:bd:
         ad:35:89:3c:d9:3d:0a:9b:57:ba:b2:16:39:c3:94:46:a9:1f:
         8a:a3:56:07:e4:82:3c:e4:e4:bc:2d:fe:84:18:3c:84:8d:fb:
         c3:e2:2b:4e:f4:b0:2b:9f:c5:95:62:d3:c8:9c:36:5d:ad:69:
         43:e7:2e:83:66:d5:af:6d:2c:48:11:c4:9f:05:90:d4:b5:bd:
         96:0f:6f:e5:52:38:a4:03:9a:62:a5:d3:e6:7d:3e:d8:dc:59:
         41:43:f4:66:3e:c8:03:cf:a7:9c:31:7c:bd:cd:b8:13:d8:2c:
         3a:03:c9:81:2a:fb:d7:e5:62:2a:bf:fb:5f:e2:49:3c:d4:d0:
         14:9f:83:58:13:dd:40:6a:c1:b9:0a:ea:06:68:90:58:b5:6b:
         54:b9:bd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----