Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/lt6_kBljXXqZ_jzW0OISGLsritw.roa
File:                     lt6_kBljXXqZ_jzW0OISGLsritw.roa (raw, json)
Hash identifier:          m5Bj/Z5pZ+8+AWW2SUj8pPukhtJHuRcqOTf7FmCbrmA=
Subject key identifier:   96:DE:BF:90:19:63:5D:7A:99:FE:3C:D6:D0:E2:12:18:BB:2B:8A:DC
Certificate issuer:       /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial:       09BC
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/lt6_kBljXXqZ_jzW0OISGLsritw.roa
Signing time:             Wed 29 Sep 2021 02:36:44 +0000
ROA not before:           Wed 29 Sep 2021 02:36:44 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9244
IP address blocks:        61.247.168.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2492 (0x9bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
        Validity
            Not Before: Sep 29 02:36:44 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=96DEBF9019635D7A99FE3CD6D0E21218BB2B8ADC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9c:a5:db:2c:cb:1e:0c:7a:9a:59:4d:91:6b:
                    3c:bf:aa:6d:03:96:4b:b1:4b:ae:f6:71:5e:88:ba:
                    84:15:4c:eb:96:a1:d6:97:60:a2:1c:c5:9d:a5:ac:
                    32:dc:9d:03:2a:eb:ed:88:55:e2:ef:65:a5:ab:76:
                    65:f6:4d:c0:4a:cf:cd:3e:7f:91:46:b1:d2:c1:21:
                    44:01:a1:86:96:cb:f5:2d:68:6a:12:a6:df:43:d8:
                    11:96:64:a5:c0:c3:39:39:50:f2:ce:ec:4c:77:a9:
                    c5:25:00:f5:c0:86:ca:13:3c:29:4f:e3:57:5e:d0:
                    16:75:38:78:88:b4:80:5c:88:a5:97:75:62:1c:bf:
                    bb:8e:dc:4c:f5:5a:1b:0c:1d:01:a5:f3:9f:d4:ca:
                    c8:a3:55:a5:d2:a5:d5:05:e7:2b:bd:f5:5c:9e:67:
                    49:5f:71:6b:83:b6:61:df:97:13:df:7b:91:5b:ca:
                    ea:eb:f4:50:ca:4d:6a:19:d0:55:3e:1b:4c:4a:f9:
                    f5:24:b5:08:fd:8c:86:18:ce:e1:06:2a:3f:26:a3:
                    9d:89:e5:73:3e:27:b2:7d:2f:03:db:61:a3:5c:c4:
                    28:0d:52:af:91:23:d4:43:b2:60:08:25:86:52:12:
                    93:dd:40:ac:b5:e5:9d:ca:1c:05:67:0d:9e:4d:ea:
                    fa:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:DE:BF:90:19:63:5D:7A:99:FE:3C:D6:D0:E2:12:18:BB:2B:8A:DC
            X509v3 Authority Key Identifier:
                keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/lt6_kBljXXqZ_jzW0OISGLsritw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.247.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8d:4f:74:53:02:49:1d:6a:99:9b:71:18:11:fb:1c:81:eb:ce:
         f1:d8:6c:5c:0c:0c:27:fc:15:8e:0c:8a:f6:c4:1b:49:08:0b:
         6b:d9:1a:8f:24:04:53:4f:e1:e9:a6:22:9e:ea:b0:51:d0:bd:
         fd:f6:52:5d:bb:2d:12:bc:d5:24:65:ec:ef:e9:4f:cb:20:22:
         48:b5:3c:f3:37:ad:b2:d4:62:bc:c0:0b:3f:0e:97:ed:35:59:
         d9:c8:df:47:ab:c1:6d:31:2e:d7:ba:e8:60:55:df:84:de:ba:
         c8:a1:99:2b:43:20:db:2a:cd:b9:8a:e3:52:10:fb:e1:12:ac:
         f4:d3:4e:a4:5b:8b:4b:0f:72:e1:a0:52:64:57:02:b7:e2:06:
         65:de:b6:e4:15:0e:c1:50:ae:0e:1d:6c:2f:bf:ab:26:03:db:
         55:09:9d:10:91:57:08:64:5b:66:ec:49:57:74:97:01:d1:3e:
         2b:49:e1:a6:77:24:06:52:1e:5d:d6:7a:13:19:fb:aa:a5:bc:
         a3:62:38:56:bb:02:15:57:0f:fa:c9:e4:b3:dc:ed:08:91:8c:
         7f:98:1a:0a:cf:69:80:22:0b:65:bf:56:70:f5:98:69:1a:dc:
         07:80:b5:61:37:75:02:17:8f:80:00:a3:67:c1:31:01:42:b0:
         1e:83:46:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----