Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/JfYFnj04R-CDr5A6HKaaFPkX_eo.roa
File:                     JfYFnj04R-CDr5A6HKaaFPkX_eo.roa (raw, json)
Hash identifier:          Zau9SOVgaZQ23l4YPTixKC2GzI1vt7Mq1jFP4iJVW9I=
Subject key identifier:   25:F6:05:9E:3D:38:47:E0:83:AF:90:3A:1C:A6:9A:14:F9:17:FD:EA
Certificate issuer:       /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial:       0C1E
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/JfYFnj04R-CDr5A6HKaaFPkX_eo.roa
Signing time:             Wed 29 Sep 2021 02:39:03 +0000
ROA not before:           Wed 29 Sep 2021 02:39:03 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     10133
IP address blocks:        2406:d400::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3102 (0xc1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
        Validity
            Not Before: Sep 29 02:39:03 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=25F6059E3D3847E083AF903A1CA69A14F917FDEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6e:df:3c:b2:eb:8d:d7:9e:e4:99:56:cb:58:
                    4d:cd:01:29:1a:6a:64:6c:40:fc:ab:ae:91:88:15:
                    63:4f:c8:94:f5:38:09:70:c6:d7:ea:61:da:4e:36:
                    b6:c6:e4:a3:91:f0:da:4a:f4:1b:7c:a8:03:c3:50:
                    37:38:e5:59:f2:f0:d8:9e:7a:a1:d6:56:84:f5:58:
                    4a:a9:ee:de:53:02:f6:8c:06:45:da:f4:12:a6:bf:
                    18:86:81:2d:2a:9c:bb:3c:ff:de:05:9b:de:32:72:
                    3c:87:be:42:cb:c2:72:93:5b:78:a7:e5:f0:0a:8d:
                    cd:ec:31:e0:ee:c0:c2:8b:dc:bc:69:1e:d1:0a:ce:
                    9b:4b:f4:5b:98:b5:c6:12:f2:b2:3e:32:7b:5b:c5:
                    a5:1f:55:7c:a3:e9:95:f4:e0:0a:f3:da:5b:a0:fd:
                    68:90:38:86:15:f8:60:79:f1:a3:ea:17:d1:a9:53:
                    bf:d0:ae:98:ac:81:0a:4b:53:8c:7c:c9:27:b8:5d:
                    a5:91:8b:2e:58:7c:83:fe:1a:14:e9:44:1e:43:0c:
                    1c:ae:5c:d0:ac:e4:ed:b5:01:30:94:ca:95:a7:15:
                    8b:a7:92:34:4d:89:09:e3:33:7a:de:17:ea:d6:f2:
                    21:76:99:31:d6:0d:8c:e2:8b:22:4b:a1:df:59:e4:
                    89:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F6:05:9E:3D:38:47:E0:83:AF:90:3A:1C:A6:9A:14:F9:17:FD:EA
            X509v3 Authority Key Identifier:
                keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/JfYFnj04R-CDr5A6HKaaFPkX_eo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:d400::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:8c:50:12:c9:56:5b:3f:d7:4a:6e:86:0b:d4:ae:a4:69:47:
         0c:ea:05:b3:9b:d8:85:da:ff:cf:54:37:0d:ae:07:81:c8:bb:
         72:1d:eb:a0:85:81:e8:ce:38:36:96:5e:ea:8e:d7:68:11:d8:
         ab:53:9f:1c:b2:1e:3d:51:ef:65:56:c7:6b:a0:e8:0b:95:c8:
         65:97:1e:0a:fe:34:00:69:8e:f9:2b:a9:2d:b1:2d:35:ca:db:
         c9:88:7f:d8:8c:7b:0c:06:95:dd:3d:c8:ce:58:84:0b:30:7f:
         c1:c1:b7:31:8b:ce:11:60:fb:7c:c5:eb:4a:83:74:b0:1c:c8:
         b4:77:db:ac:cc:ef:03:f3:6c:fe:2d:68:6f:84:11:e5:64:9f:
         9e:63:6b:e5:73:54:a0:ed:bf:2f:1d:03:23:2a:8c:30:98:10:
         58:76:6c:80:fa:58:de:5c:6c:4c:9e:bb:04:a4:77:c5:c9:12:
         ba:dd:35:94:fb:65:49:9d:49:0c:62:87:59:15:ab:51:68:b4:
         a9:da:e3:c7:55:d4:c4:b8:0a:1c:37:15:6e:f1:94:fc:04:92:
         99:47:b3:86:fc:54:37:77:bb:71:13:77:fd:39:96:5d:e2:c5:
         83:e9:c4:b6:79:6c:3c:12:15:8a:11:40:58:c5:cf:f9:8e:30:
         d1:04:1b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----