Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/4Lzymz1lwjef9koyIuB6pTUnrvM.roa
File:                     4Lzymz1lwjef9koyIuB6pTUnrvM.roa (raw, json)
Hash identifier:          fz1zaq6wztVtay1d/qyvIrAEnRJ/6yR4jMehC/pWfpI=
Subject key identifier:   E0:BC:F2:9B:3D:65:C2:37:9F:F6:4A:32:22:E0:7A:A5:35:27:AE:F3
Certificate issuer:       /CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Certificate serial:       079B
Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/4Lzymz1lwjef9koyIuB6pTUnrvM.roa
Signing time:             Tue 29 Sep 2020 10:02:58 +0000
ROA not before:           Tue 29 Sep 2020 10:02:58 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18046
IP address blocks:        61.65.224.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1947 (0x79b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB
        Validity
            Not Before: Sep 29 10:02:58 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E0BCF29B3D65C2379FF64A3222E07AA53527AEF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2a:31:d4:a4:36:48:18:7f:28:41:cc:aa:24:
                    da:dc:50:8e:3c:fe:87:6e:d6:ff:77:89:59:63:18:
                    f2:cf:34:f8:f6:f3:76:c2:3d:d3:5a:03:9f:2b:49:
                    19:e2:a7:61:ab:50:f6:51:bc:bb:57:dd:39:96:30:
                    3e:b0:1d:24:2a:1c:ec:09:65:14:b5:7e:a0:cf:11:
                    79:9e:a7:13:68:79:65:b2:e9:14:31:49:e1:85:4c:
                    29:b6:4f:92:7f:80:d8:93:75:d0:f6:e6:8d:9a:e8:
                    91:a2:73:2a:3f:d5:61:9f:46:c7:80:9f:e6:44:dc:
                    75:e7:25:1b:bc:69:8d:33:76:a8:55:ca:12:e7:52:
                    ab:d7:1b:ab:39:5c:49:51:db:3c:73:80:66:e3:65:
                    fc:5e:a5:1f:25:d5:6f:93:1d:9f:24:8d:d9:e4:db:
                    27:92:57:bf:d9:d8:8d:0d:9c:0d:78:82:17:3b:76:
                    30:06:be:05:4d:3d:aa:03:6a:15:bf:1d:a7:e2:81:
                    26:bf:21:b1:47:2d:74:6f:0d:40:3c:5b:f2:74:0d:
                    0a:03:16:d0:b8:87:2b:8f:26:dd:be:c0:93:b9:26:
                    13:ff:ca:f8:4f:aa:03:42:81:86:16:a2:10:f7:7d:
                    c1:ed:c7:f7:60:ee:fe:92:3c:ee:f7:8a:d5:ca:a7:
                    76:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BC:F2:9B:3D:65:C2:37:9F:F6:4A:32:22:E0:7A:A5:35:27:AE:F3
            X509v3 Authority Key Identifier:
                keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/4Lzymz1lwjef9koyIuB6pTUnrvM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.65.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         92:42:82:2b:c8:de:17:8f:7e:c8:f8:6c:17:00:cf:ea:7e:15:
         b1:07:89:e3:d4:e2:a3:98:04:d4:7c:6f:c5:07:d7:82:88:72:
         94:82:54:05:ae:fd:88:1d:c9:32:3b:cf:a2:d0:86:d9:a1:ab:
         90:25:a9:7d:d2:3a:f5:3d:88:17:b8:e8:45:a3:64:8f:0d:05:
         c0:5d:c3:4a:4a:19:bc:4d:40:b6:8c:61:9c:61:87:eb:70:c6:
         ca:0f:0e:43:01:9a:4f:fc:6f:fd:b3:d7:bc:fc:2a:a3:bd:90:
         4f:54:85:0a:8d:e3:5d:f7:ae:5c:05:0d:aa:52:25:76:fe:41:
         d9:d7:80:48:b2:2d:29:dd:54:5b:35:7f:12:ed:d3:91:7b:2a:
         0b:7b:3f:03:1b:2f:44:c0:b4:8f:fc:46:fc:07:d5:be:d4:b4:
         ef:b3:74:c8:39:83:2b:54:d8:09:4b:eb:1d:2a:40:53:1e:b9:
         e5:ab:44:ae:3a:60:06:59:17:93:7d:5b:af:e3:19:da:ec:c1:
         50:77:b5:e5:9b:ac:f1:4b:be:e8:bb:3c:b0:3b:b3:fc:95:1b:
         16:d7:fa:a7:66:46:e7:a4:cf:47:c6:88:51:d7:26:bf:04:3b:
         d4:55:28:5c:03:7f:69:05:13:f7:f4:83:08:b8:4e:4e:5a:a8:
         39:94:8c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----