Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/6DseBvyLj8WqY5qENcKSkQpZkWM.roa
File:                     6DseBvyLj8WqY5qENcKSkQpZkWM.roa (raw, json)
Hash identifier:          oQ07wpeVTDH5+n0gRRTa1LwYJhM6xP5I3tHlIEKcMkM=
Subject key identifier:   E8:3B:1E:06:FC:8B:8F:C5:AA:63:9A:84:35:C2:92:91:0A:59:91:63
Certificate issuer:       /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial:       079F
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/6DseBvyLj8WqY5qENcKSkQpZkWM.roa
Signing time:             Tue 29 Sep 2020 10:03:15 +0000
ROA not before:           Tue 29 Sep 2020 10:03:15 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9244
IP address blocks:        61.56.88.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1951 (0x79f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
        Validity
            Not Before: Sep 29 10:03:15 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E83B1E06FC8B8FC5AA639A8435C292910A599163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:21:42:61:28:61:3d:dd:4d:e0:bd:57:e3:3c:
                    36:50:22:b8:12:e5:19:ab:de:6d:53:e0:99:57:0d:
                    a6:19:dd:a5:6a:85:88:3d:df:ff:9a:15:3c:d5:dc:
                    77:75:ab:12:33:b2:fa:8d:d3:93:61:e3:d1:be:59:
                    eb:cc:b2:8b:7f:4a:3e:38:bf:df:38:43:42:00:62:
                    ea:6c:37:c1:b6:b7:8c:a6:1e:7b:95:52:c1:72:50:
                    1a:6b:ba:0a:f8:25:01:3f:c8:f8:93:18:ae:f7:1d:
                    2b:b6:1a:86:fa:a1:4e:48:3e:30:0e:b5:3e:f1:37:
                    e9:ee:cd:3b:8d:72:cb:c0:93:69:e2:a8:32:e8:f6:
                    9e:99:e5:c2:84:d6:a7:7f:bd:a9:f8:d3:69:d7:cb:
                    8c:27:4a:f4:8b:cb:55:0f:a0:9c:1e:d0:7a:4c:05:
                    b9:c5:38:83:be:17:11:3b:22:50:02:d3:8c:9c:78:
                    7f:e9:b5:6f:2b:db:8f:9b:bf:a0:f9:a9:50:b7:6b:
                    5c:fc:f6:47:0b:01:49:97:75:6e:ba:39:43:aa:2d:
                    f4:5c:d9:42:d0:1c:fb:76:e1:ec:b1:99:d9:0f:b5:
                    71:68:0d:83:06:66:83:4f:0e:cb:57:36:f9:bc:93:
                    6e:88:5c:26:19:37:95:7e:07:db:bb:0d:fc:9a:79:
                    b2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3B:1E:06:FC:8B:8F:C5:AA:63:9A:84:35:C2:92:91:0A:59:91:63
            X509v3 Authority Key Identifier:
                keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/6DseBvyLj8WqY5qENcKSkQpZkWM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c0:3c:d6:06:f9:77:84:31:0c:11:2e:a9:b9:be:d1:7f:21:d4:
         06:d4:21:06:11:e4:36:03:b1:d7:39:9c:af:cc:63:76:3e:ee:
         3b:83:bf:0f:2c:7d:1f:aa:78:0d:4e:ad:b0:33:a3:01:b9:83:
         62:d6:23:66:8c:43:f3:c8:49:6a:64:9c:bf:3b:67:a9:94:da:
         15:84:29:a5:99:b0:6c:a0:bf:4a:9e:0c:71:7c:e8:44:75:c3:
         64:c5:6d:2c:f8:fa:a6:ee:9d:ac:09:4e:85:53:1e:ef:01:cf:
         f4:d1:4c:db:64:b6:9b:cb:14:8e:c3:bb:4e:e9:ea:5e:a7:5b:
         d3:69:01:6a:18:61:f5:c6:2f:1d:3c:ee:8b:6a:09:69:80:53:
         4f:8f:69:d2:40:50:e2:a9:50:44:33:e4:f0:b2:bf:ad:c3:b9:
         d9:c7:7a:e8:81:e9:6e:ce:fe:92:b4:86:a8:52:89:00:f0:16:
         0b:13:2f:49:d2:2b:c5:9d:e1:0f:f9:b6:4d:af:a4:d3:4b:c2:
         ea:d4:63:fe:54:56:c8:39:1e:be:71:09:20:61:76:4f:0a:01:
         10:b6:7d:85:a2:52:38:3d:08:d2:5f:13:ff:75:cb:50:2b:ad:
         c4:bb:8b:d3:5a:76:44:95:7f:29:7b:e9:55:fe:c6:86:a0:ce:
         e5:d1:30:b8
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICB58wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC
M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yMDA5Mjkx
MDAzMTVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEU4M0IxRTA2RkM4QjhG
QzVBQTYzOUE4NDM1QzI5MjkxMEE1OTkxNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDIUJhKGE93U3gvVfjPDZQIrgS5Rmr3m1T4JlXDaYZ3aVqhYg9
3/+aFTzV3Hd1qxIzsvqN05Nh49G+WevMsot/Sj44v984Q0IAYupsN8G2t4ymHnuV
UsFyUBprugr4JQE/yPiTGK73HSu2Gob6oU5IPjAOtT7xN+nuzTuNcsvAk2niqDLo
9p6Z5cKE1qd/van402nXy4wnSvSLy1UPoJwe0HpMBbnFOIO+FxE7IlAC04yceH/p
tW8r24+bv6D5qVC3a1z89kcLAUmXdW66OUOqLfRc2ULQHPt24eyxmdkPtXFoDYMG
ZoNPDstXNvm8k26IXCYZN5V+B9u7DfyaebJpAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU6DseBvyLj8WqY5qENcKSkQpZkWMwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT
KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU
L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVULzZEc2VCdnlMajhXcVk1cUVO
Y0tTa1FwWmtXTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM9
OFgwDQYJKoZIhvcNAQELBQADggEBAMA81gb5d4QxDBEuqbm+0X8h1AbUIQYR5DYD
sdc5nK/MY3Y+7juDvw8sfR+qeA1OrbAzowG5g2LWI2aMQ/PISWpknL87Z6mU2hWE
KaWZsGygv0qeDHF86ER1w2TFbSz4+qbunawJToVTHu8Bz/TRTNtktpvLFI7Du07p
6l6nW9NpAWoYYfXGLx087otqCWmAU0+PadJAUOKpUEQz5PCyv63DudnHeuiB6W7O
/pK0hqhSiQDwFgsTL0nSK8Wd4Q/5tk2vpNNLwurUY/5UVsg5Hr5xCSBhdk8KARC2
fYWiUjg9CNJfE/91y1ArrcS7i9NadkSVfyl76VX+xoagzuXRMLg=
-----END CERTIFICATE-----