Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/UKaCOt1VcqDyYwnRX09mQK2g3r8.roa
File:                     UKaCOt1VcqDyYwnRX09mQK2g3r8.roa (raw, json)
Hash identifier:          fZboiBaTaUCxRwaXKKjIuc5FiQSKpLHe/FBqV0UN+cs=
Subject key identifier:   50:A6:82:3A:DD:55:72:A0:F2:63:09:D1:5F:4F:66:40:AD:A0:DE:BF
Certificate issuer:       /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial:       0794
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/UKaCOt1VcqDyYwnRX09mQK2g3r8.roa
Signing time:             Tue 29 Sep 2020 10:03:12 +0000
ROA not before:           Tue 29 Sep 2020 10:03:12 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9244
IP address blocks:        113.21.176.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1940 (0x794)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
        Validity
            Not Before: Sep 29 10:03:12 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=50A6823ADD5572A0F26309D15F4F6640ADA0DEBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a3:51:1e:02:52:04:7d:5c:3c:91:dc:a1:5b:
                    ef:ad:0a:ff:b8:d7:20:d3:db:eb:f4:fc:d6:ec:7e:
                    9d:12:2c:2a:06:db:be:b0:f7:ac:10:6a:31:14:bb:
                    21:a8:d0:46:40:20:d1:b7:36:77:4a:a2:44:53:6e:
                    eb:d5:22:7d:42:fc:18:4c:34:87:53:9b:b7:0a:57:
                    c7:cd:51:8c:28:7f:44:89:da:dc:cd:88:7a:79:2c:
                    b6:8b:98:14:3b:cc:bf:87:bb:6d:38:e1:94:c9:b1:
                    be:a4:78:fb:72:25:b8:a5:c2:36:7b:c5:b2:ad:38:
                    54:94:9b:93:e8:56:25:95:72:49:cf:45:6d:d7:8a:
                    aa:f2:a7:7f:21:aa:c2:1e:3b:16:45:bf:e9:97:68:
                    2a:f4:fc:91:5a:a4:68:11:74:2c:46:e6:27:b2:49:
                    84:c6:bf:9f:b2:fa:87:6b:9c:0a:dd:53:7e:dc:2a:
                    7b:13:4a:3a:5f:fe:ab:64:78:fa:43:e8:55:b4:f1:
                    aa:c2:e6:b7:65:63:ed:2c:5c:22:e1:6d:45:af:74:
                    01:25:b3:25:5e:3f:06:6c:e9:aa:3d:e6:99:0c:87:
                    0b:57:4d:4b:c9:c1:44:72:70:a0:34:e1:56:76:88:
                    9a:69:f0:a5:5e:d9:e1:41:d2:34:d1:f3:25:66:a2:
                    6b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A6:82:3A:DD:55:72:A0:F2:63:09:D1:5F:4F:66:40:AD:A0:DE:BF
            X509v3 Authority Key Identifier:
                keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/UKaCOt1VcqDyYwnRX09mQK2g3r8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.21.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3f:d9:64:7f:c6:aa:54:db:67:45:20:63:92:b6:a6:a2:ee:51:
         02:69:71:82:96:ed:a5:9f:c2:61:1b:c0:23:7f:5e:bf:b4:a6:
         72:77:b3:64:11:b3:c4:7d:d9:50:07:20:98:98:62:61:17:dc:
         78:a0:fb:8a:96:dc:aa:c6:7e:31:50:93:47:b4:34:65:98:a1:
         a0:78:ac:0c:fa:e1:de:1f:e8:b8:b1:8d:94:90:ea:3e:a0:ea:
         a1:00:12:21:0b:48:48:d1:71:0f:0a:05:f6:f7:c3:ff:57:08:
         d6:6d:70:98:62:4f:d6:ea:46:19:69:b6:00:a0:9a:0f:cf:16:
         d8:d1:74:25:48:17:cf:dc:4a:1c:20:77:43:0c:b2:08:3a:48:
         22:42:ee:ff:33:ab:f9:21:26:c4:7a:1b:22:bf:13:03:26:25:
         fc:2f:37:05:9b:11:e4:ae:b2:d3:2b:24:07:1b:0b:ed:c9:90:
         b9:d8:a3:c9:df:a8:e2:2b:50:9c:6c:53:79:35:48:63:b2:6c:
         36:6d:54:58:d7:b0:09:02:a8:95:ed:d5:87:11:f1:0d:55:1c:
         49:01:e2:1c:ec:c1:bd:d4:6d:f9:cb:28:0c:e9:ee:24:c7:57:
         35:4d:32:c9:1e:83:12:b7:ad:6f:82:ea:71:71:24:14:b9:68:
         f7:3f:cf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----