Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/sUtg690Sa9MnmRLh3lj81n_d49g.roa
File:                     sUtg690Sa9MnmRLh3lj81n_d49g.roa (raw, json)
Hash identifier:          vo5Ao2DjmSzAzSkufq8CKJTonvg4SZgp9BL5YWdsvV8=
Subject key identifier:   B1:4B:60:EB:DD:12:6B:D3:27:99:12:E1:DE:58:FC:D6:7F:DD:E3:D8
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0928
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/sUtg690Sa9MnmRLh3lj81n_d49g.roa
Signing time:             Tue 29 Sep 2020 10:01:32 +0000
ROA not before:           Tue 29 Sep 2020 10:01:32 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131627
IP address blocks:        219.91.68.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2344 (0x928)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 29 10:01:32 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B14B60EBDD126BD3279912E1DE58FCD67FDDE3D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:93:25:39:7f:68:b8:3d:e2:c0:75:07:7b:5a:
                    19:59:2d:10:7a:d8:11:2f:5b:e1:0c:3d:53:18:82:
                    35:1c:97:7b:67:e7:51:f1:ac:c4:91:ef:ee:74:4b:
                    87:c4:50:6e:5b:94:7f:99:0e:1d:52:32:f5:d9:8e:
                    0d:2d:fc:d2:4b:ae:92:4c:bc:06:b8:55:6f:8f:f3:
                    b1:21:75:c7:2a:13:d7:b9:5a:31:9d:6d:d5:4d:50:
                    65:0c:23:ca:b1:13:76:3c:4c:ae:72:e3:9a:13:60:
                    b5:aa:d9:41:3f:0b:8a:d7:e9:66:c5:33:16:a2:5c:
                    98:f1:e1:1a:08:8c:d2:6c:e2:2e:1d:0c:de:2b:06:
                    95:0d:3d:cf:27:10:84:74:34:cf:4d:4a:69:16:cf:
                    7a:6a:54:48:e3:1c:a2:a9:08:d1:ac:1e:ca:f6:b2:
                    2b:74:40:41:20:5c:e0:bd:b8:61:03:54:44:c0:84:
                    b5:b9:e0:4c:7e:74:21:11:43:3b:39:92:38:6b:5d:
                    c0:68:09:38:db:c0:0c:d9:88:f2:36:92:07:e6:53:
                    f1:ca:84:0f:f3:0c:c7:9e:ed:fd:ad:aa:bf:f9:a0:
                    1a:46:83:83:fb:08:47:94:cd:61:77:4f:58:95:87:
                    08:3a:25:f8:ca:35:8c:3d:e1:b7:6c:6d:55:63:78:
                    c5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4B:60:EB:DD:12:6B:D3:27:99:12:E1:DE:58:FC:D6:7F:DD:E3:D8
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/sUtg690Sa9MnmRLh3lj81n_d49g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.91.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:5f:62:3b:1e:a1:0e:d0:89:9a:cb:e3:d0:e2:39:f7:77:9e:
         d0:e5:28:94:66:78:b2:82:e0:da:38:31:34:43:e4:16:cb:3b:
         44:97:f6:a3:d8:b2:9a:c8:38:86:19:f0:cf:b6:9c:d3:76:bc:
         83:51:c3:c7:31:0d:5f:62:4c:f7:3e:4a:75:bd:ce:65:31:18:
         29:2c:21:15:a6:9b:3c:2f:86:7a:81:91:11:cf:67:ca:ac:a1:
         56:2e:15:75:3f:ef:ce:88:f5:b9:c7:e1:a7:99:0d:7f:8a:09:
         66:39:05:92:3c:42:f7:8a:d1:49:36:cb:d0:a4:7c:70:0c:d8:
         70:95:48:29:aa:f9:f9:be:d1:d0:e8:5d:98:48:bb:28:d5:b2:
         d1:c6:a4:89:8b:a5:b2:2e:41:ba:7e:f1:50:98:d4:70:9b:87:
         db:66:c1:40:c3:6f:e3:df:7e:6e:74:50:f9:b9:5f:ed:5b:2d:
         9c:66:73:bb:03:80:a6:eb:3f:68:1d:d2:f4:5c:a1:d1:a1:f3:
         e9:7f:3e:78:10:a0:b4:52:05:b5:e9:11:a0:c2:45:ff:07:07:
         a7:f9:5e:57:58:00:71:74:ae:5d:c6:3a:13:3e:f0:e3:d8:7b:
         c9:08:07:85:3e:65:85:db:ea:54:73:12:1a:36:7f:97:69:04:
         f5:30:b9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----