Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/NGhPlojwtEQJVyRejOr23mKW-Ho.roa
File:                     NGhPlojwtEQJVyRejOr23mKW-Ho.roa (raw, json)
Hash identifier:          pROUnp0RzinI2BmtCGDb4mr485rdxe4Fzr4iGRJkpcY=
Subject key identifier:   34:68:4F:96:88:F0:B4:44:09:57:24:5E:8C:EA:F6:DE:62:96:F8:7A
Certificate issuer:       /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Certificate serial:       0774
Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/NGhPlojwtEQJVyRejOr23mKW-Ho.roa
Signing time:             Tue 29 Sep 2020 10:00:14 +0000
ROA not before:           Tue 29 Sep 2020 10:00:14 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        61.60.240.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1908 (0x774)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
        Validity
            Not Before: Sep 29 10:00:14 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=34684F9688F0B4440957245E8CEAF6DE6296F87A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d6:45:60:48:70:66:49:f0:0b:20:ae:b0:af:
                    28:d4:7b:77:64:45:c6:7e:23:85:9b:f4:da:a0:49:
                    c8:92:62:2a:e5:09:62:0f:a8:ac:bf:3f:7b:6a:29:
                    19:4e:f2:59:cb:12:23:50:f7:23:56:ff:9c:7e:55:
                    98:60:8c:b4:f6:e3:fc:dd:de:dd:23:85:97:ce:4b:
                    d8:88:96:32:e1:85:92:4a:1e:4a:3c:77:3f:3f:58:
                    28:54:27:a5:78:cd:1f:e1:2d:b1:1b:ac:96:c3:97:
                    1e:13:78:8b:38:5a:7d:43:37:60:ac:96:db:09:63:
                    f1:60:ad:7d:03:19:86:8b:98:7c:85:c8:5c:66:d1:
                    8c:8e:91:e8:87:d9:ef:1b:37:90:c1:93:5f:ee:3e:
                    b0:10:72:56:35:bd:de:54:f2:41:19:ca:3c:1b:5f:
                    e4:79:83:41:80:61:ab:33:b7:2b:fa:87:42:e6:c3:
                    c6:db:18:f8:8a:77:fe:c7:54:1f:3e:75:dc:9c:08:
                    98:df:4b:a8:e5:56:0d:42:26:7b:ca:e9:1d:02:a3:
                    45:aa:28:db:28:05:ea:7b:40:9d:02:f7:1d:42:99:
                    41:4b:dc:6d:de:0e:44:5b:2b:97:31:6f:c3:6a:ed:
                    db:0e:41:6e:49:6a:f4:bb:79:e4:e5:e9:88:d4:5a:
                    f3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:68:4F:96:88:F0:B4:44:09:57:24:5E:8C:EA:F6:DE:62:96:F8:7A
            X509v3 Authority Key Identifier:
                keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/NGhPlojwtEQJVyRejOr23mKW-Ho.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.60.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         05:bc:7d:87:2d:bd:37:76:9a:cc:4b:03:c3:72:fa:fa:8b:fa:
         d3:51:71:85:1c:1d:94:a9:f0:66:7d:25:cd:4d:d7:f5:ad:f1:
         43:85:c9:a9:a9:29:77:90:c5:6e:d6:f5:01:d0:8c:79:53:3d:
         bd:aa:22:1d:1b:ed:26:52:ce:86:16:8e:f1:33:e9:03:77:41:
         52:1c:a2:71:8f:68:73:1e:a0:b7:58:1a:10:fc:0d:b9:b1:d4:
         3c:da:0a:10:bd:45:e7:1f:4a:8c:df:df:3c:90:1a:11:11:c4:
         10:99:6b:0f:1f:a0:63:31:61:46:9a:6e:be:73:16:58:c7:26:
         8f:38:e4:f9:3b:c3:b0:8a:6d:51:6b:81:91:b2:98:bf:ef:b4:
         45:e6:4a:02:96:2c:e7:bc:dc:b5:e7:e8:ed:15:c1:22:8e:b9:
         1b:8a:d5:5b:df:5e:49:f5:b2:da:67:0b:50:0d:54:4a:6e:95:
         58:13:3c:11:60:e5:9a:f8:bf:ac:61:13:b1:37:a8:20:c8:60:
         53:ba:81:40:36:39:13:bb:18:7f:1a:72:da:d1:09:98:b9:4e:
         f0:dd:64:97:79:85:a9:8e:88:42:1d:0b:52:a5:b4:8f:62:60:
         68:1f:6f:5c:82:46:5a:26:89:83:13:e9:1e:08:1a:7f:8b:bd:
         4c:80:d0:4f
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICB3QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkZE
RUEzNDcwNzE1MjI5MEMxRDI2MDZGRkJGQzY5QjkyN0Q0MEE1QjAeFw0yMDA5Mjkx
MDAwMTRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDM0Njg0Rjk2ODhGMEI0
NDQwOTU3MjQ1RThDRUFGNkRFNjI5NkY4N0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCp1kVgSHBmSfALIK6wryjUe3dkRcZ+I4Wb9NqgSciSYirlCWIP
qKy/P3tqKRlO8lnLEiNQ9yNW/5x+VZhgjLT24/zd3t0jhZfOS9iIljLhhZJKHko8
dz8/WChUJ6V4zR/hLbEbrJbDlx4TeIs4Wn1DN2CsltsJY/FgrX0DGYaLmHyFyFxm
0YyOkeiH2e8bN5DBk1/uPrAQclY1vd5U8kEZyjwbX+R5g0GAYasztyv6h0Lmw8bb
GPiKd/7HVB8+ddycCJjfS6jlVg1CJnvK6R0Co0WqKNsoBep7QJ0C9x1CmUFL3G3e
DkRbK5cxb8Nq7dsOQW5JavS7eeTl6YjUWvMXAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUNGhPlojwtEQJVyRejOr23mKW+HowHwYDVR0jBBgwFoAUb96jRwcVIpDB0mBv
+/xpuSfUClswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1lDQ0FU
Vi9iOTZqUndjVklwREIwbUJ2LV94cHVTZlVDbHMuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL2I5NmpSd2NWSXBEQjBtQnYtX3hwdVNmVUNscy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NZQ0NBVFYvTkdoUGxvand0RVFKVnlS
ZWpPcjIzbUtXLUhvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BD088DANBgkqhkiG9w0BAQsFAAOCAQEABbx9hy29N3aazEsDw3L6+ov601FxhRwd
lKnwZn0lzU3X9a3xQ4XJqakpd5DFbtb1AdCMeVM9vaoiHRvtJlLOhhaO8TPpA3dB
UhyicY9ocx6gt1gaEPwNubHUPNoKEL1F5x9KjN/fPJAaERHEEJlrDx+gYzFhRppu
vnMWWMcmjzjk+TvDsIptUWuBkbKYv++0ReZKApYs57zctefo7RXBIo65G4rVW99e
SfWy2mcLUA1USm6VWBM8EWDlmvi/rGETsTeoIMhgU7qBQDY5E7sYfxpy2tEJmLlO
8N1kl3mFqY6IQh0LUqW0j2JgaB9vXIJGWiaJgxPpHggaf4u9TIDQTw==
-----END CERTIFICATE-----