Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/RWh4gjyEluKZV5ysZ7zBPifDY6g.roa
File:                     RWh4gjyEluKZV5ysZ7zBPifDY6g.roa (raw, json)
Hash identifier:          dYR+KczTRLNHWcUHlZCZFQJJT+Ib9xnlknGS5TubIMo=
Subject key identifier:   45:68:78:82:3C:84:96:E2:99:57:9C:AC:67:BC:C1:3E:27:C3:63:A8
Certificate issuer:       /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Certificate serial:       08B7
Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/RWh4gjyEluKZV5ysZ7zBPifDY6g.roa
Signing time:             Sun 07 Feb 2021 11:44:56 +0000
ROA not before:           Sun 07 Feb 2021 11:44:56 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        61.58.48.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2231 (0x8b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
        Validity
            Not Before: Feb  7 11:44:56 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=456878823C8496E299579CAC67BCC13E27C363A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:53:58:13:54:12:33:5c:ea:f0:7b:98:6f:2a:
                    c2:bb:7d:6d:1e:82:43:3c:a6:a4:56:35:e6:95:cd:
                    1e:1d:58:aa:5f:62:86:f4:b1:fe:be:3b:bd:4e:f7:
                    44:24:4b:c7:a8:0a:43:bf:c6:2b:00:e9:c9:44:b5:
                    6e:74:85:04:8e:b0:03:b4:0d:a5:7c:db:1b:cf:b0:
                    dc:fb:95:62:4b:0b:0e:f8:42:66:e8:0c:dd:0a:4a:
                    1a:4f:27:4a:70:5f:5f:19:62:c7:e3:88:0a:6f:fe:
                    3f:ad:28:e6:57:6f:f2:04:f6:4d:59:99:e9:ad:87:
                    5b:5e:b2:d8:b6:3e:e6:0c:f8:66:ce:31:d9:1e:c5:
                    47:b8:50:e3:8a:08:15:b0:61:3d:f0:2f:8d:4e:16:
                    39:e8:bf:6d:5d:4b:b3:f3:2b:eb:fe:5c:c5:39:62:
                    51:22:39:f9:fb:f0:4f:63:39:54:d8:1d:f2:1c:51:
                    5d:00:5d:2e:4d:2b:bb:19:63:84:5e:c9:ac:75:b2:
                    ad:e0:a1:9f:94:b6:2e:6f:33:64:c6:d5:18:41:3f:
                    1a:87:e2:b6:35:9d:94:06:8b:22:f2:e3:7e:e5:55:
                    db:47:69:65:ae:75:dd:c2:21:1f:20:12:31:3c:79:
                    2d:43:7e:2f:48:6d:e6:c4:0d:f0:d8:bb:d6:fe:d3:
                    45:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:68:78:82:3C:84:96:E2:99:57:9C:AC:67:BC:C1:3E:27:C3:63:A8
            X509v3 Authority Key Identifier:
                keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/RWh4gjyEluKZV5ysZ7zBPifDY6g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.58.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         06:f4:e4:f9:3e:e5:7f:84:46:86:ac:ae:3f:db:25:96:be:9b:
         75:db:28:aa:74:84:c1:d3:b8:00:9a:90:24:fd:83:00:8a:8a:
         00:59:ed:e7:ad:55:aa:4c:bd:90:f3:97:93:cc:2b:f6:05:fe:
         6e:46:98:c6:9c:01:56:1f:85:af:a6:24:ff:a0:34:7c:d9:b6:
         4f:2c:4e:c4:83:98:36:58:45:14:be:62:81:4c:50:df:fa:6c:
         4c:dd:1f:8b:94:0f:48:fa:32:9f:e6:f5:7b:26:fc:9c:29:38:
         d6:17:f9:ce:83:5a:a5:60:bb:86:b6:35:71:16:b0:83:2e:0f:
         3b:5c:91:18:5b:14:12:89:92:a0:65:b4:ad:b1:ce:a4:a1:df:
         08:bb:7d:f3:6a:6d:b8:02:5e:37:87:1b:77:f5:7a:bd:10:59:
         dd:07:8b:3d:c0:e7:64:e2:98:e8:66:d9:fc:25:54:52:16:f3:
         45:54:b9:e9:65:bf:64:c4:0b:69:f5:9d:e1:62:1c:fe:ee:6b:
         41:65:67:b8:b0:bf:83:93:27:35:4e:98:87:e1:0f:bb:75:bb:
         b9:a2:98:5e:56:73:1a:db:73:41:79:44:b1:dc:b0:5b:66:81:
         e1:c0:69:fd:ca:1a:b9:25:bf:f7:72:8d:24:50:97:29:d4:91:
         a2:5e:d0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----