Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/jigIdwzobPW-fGCIZdWYwf7nKC8.roa
File:                     jigIdwzobPW-fGCIZdWYwf7nKC8.roa (raw, json)
Hash identifier:          n8wQpWCTWuukNBUsokvraio4xCsQTpFYy/f+p0pVb8w=
Subject key identifier:   8E:28:08:77:0C:E8:6C:F5:BE:7C:60:88:65:D5:98:C1:FE:E7:28:2F
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0948
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/jigIdwzobPW-fGCIZdWYwf7nKC8.roa
Signing time:             Tue 29 Sep 2020 10:01:40 +0000
ROA not before:           Tue 29 Sep 2020 10:01:40 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     7482
IP address blocks:        210.201.192.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2376 (0x948)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 29 10:01:40 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=8E2808770CE86CF5BE7C608865D598C1FEE7282F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1d:bd:11:37:88:63:cb:41:8e:9f:24:2d:1b:
                    61:12:bb:9c:65:1a:e4:80:30:94:f5:b5:d4:0b:0b:
                    3e:68:ec:99:64:f6:0b:7c:1f:f5:b0:97:49:a4:b9:
                    8e:7f:16:53:8a:1c:0f:37:d4:fe:9e:a8:2d:77:43:
                    10:d8:d3:42:c8:34:69:75:e0:55:08:2d:30:fb:16:
                    2d:ee:7b:2d:9c:68:f0:b4:50:f5:0b:52:82:90:fa:
                    af:46:fd:65:84:b6:6f:95:f1:60:18:06:34:96:2a:
                    26:34:86:f0:df:8c:6b:77:9d:58:d1:da:ee:5d:67:
                    df:61:1e:5d:21:31:62:68:55:00:9c:28:85:5f:3b:
                    4b:05:cb:3b:92:1c:e8:e9:d5:fd:03:7c:d6:1d:ef:
                    26:fe:a7:d8:67:40:86:ee:45:07:87:59:c0:7e:c1:
                    7b:3e:9e:b3:ec:03:e3:01:d8:29:0e:f9:4e:4b:6a:
                    6d:14:6e:a2:0c:9a:b9:32:5a:3b:0f:16:0c:b2:04:
                    89:96:46:eb:82:ab:ef:53:20:85:87:47:d2:51:17:
                    42:b8:79:bb:38:bd:2f:d2:6c:f8:48:05:bf:11:05:
                    66:66:52:3f:e0:49:85:8f:08:55:30:40:d6:32:eb:
                    3a:24:6f:14:8b:d2:0c:a8:3c:12:d1:4c:55:18:6f:
                    23:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:28:08:77:0C:E8:6C:F5:BE:7C:60:88:65:D5:98:C1:FE:E7:28:2F
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/jigIdwzobPW-fGCIZdWYwf7nKC8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.201.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4e:5d:bb:eb:a8:41:d6:6f:12:8a:69:4e:8a:5f:12:d4:23:16:
         2e:c9:0c:55:bb:77:c1:3b:cc:a2:73:82:f1:7c:1e:c2:5e:8b:
         88:19:ec:d8:93:ca:01:46:a5:2b:72:7f:18:4c:28:1c:4e:ae:
         3c:9e:96:18:6c:59:50:c4:f0:0d:28:87:d8:b9:a4:1e:e5:0d:
         0e:6d:97:fc:26:c5:e8:9d:21:e7:6a:87:cf:4c:44:82:52:57:
         d7:ab:5c:d6:22:43:c1:f6:9e:85:d2:00:66:3b:e2:23:71:8b:
         3a:50:13:2f:cc:b9:52:91:1d:83:7c:03:56:da:15:e4:7b:cf:
         da:b7:5f:97:74:0b:40:c1:07:30:d2:36:df:8c:9a:22:c6:bb:
         ec:d2:0d:3b:bf:67:08:8e:2b:47:e4:33:aa:ea:03:e4:08:68:
         f5:0c:ef:c5:b1:82:ba:b3:14:c2:df:17:8d:c2:4a:e1:8c:b0:
         66:81:01:64:f2:00:c7:a2:18:bc:c3:2d:19:a0:f2:58:fe:b8:
         54:8f:90:12:86:72:80:1d:e5:85:e2:51:59:4a:0b:0a:13:07:
         00:02:5e:f2:37:b6:8b:a9:df:e4:bf:21:d3:a4:bd:f5:37:a9:
         a4:8b:9e:e1:60:82:1f:cf:8b:58:95:53:a3:7f:52:2f:35:7b:
         f0:dd:a3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----