Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/zzOqqMJmVzIHjt4sslNLovJv7XA.roa
File:                     zzOqqMJmVzIHjt4sslNLovJv7XA.roa (raw, json)
Hash identifier:          U4g0AgljljYK/vu1hyAgizBFJWMwHdnxGUzn6JMs2vM=
Subject key identifier:   CF:33:AA:A8:C2:66:57:32:07:8E:DE:2C:B2:53:4B:A2:F2:6F:ED:70
Certificate issuer:       /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial:       0A14
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/zzOqqMJmVzIHjt4sslNLovJv7XA.roa
Signing time:             Tue 18 Jan 2022 01:27:17 +0000
ROA not before:           Tue 18 Jan 2022 01:27:17 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9584
IP address blocks:        113.21.184.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2580 (0xa14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
        Validity
            Not Before: Jan 18 01:27:17 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=CF33AAA8C2665732078EDE2CB2534BA2F26FED70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:53:e2:8e:60:ef:09:d2:cb:22:84:87:ad:05:
                    5f:e0:d6:a5:fd:6c:48:5f:cf:a5:a4:50:5a:75:cd:
                    eb:a7:c9:7d:87:76:3e:64:2e:4e:3e:5c:bc:b1:79:
                    46:7c:c5:ae:60:9b:a8:04:1d:f9:1c:59:31:c1:56:
                    87:e4:e9:6c:f6:4a:03:27:36:c3:b0:39:3f:fa:b1:
                    af:37:9a:e7:d2:39:7c:b2:f9:b0:1d:d9:39:61:1e:
                    68:29:bb:fd:43:06:9e:f3:43:bb:bf:b2:a3:1a:91:
                    67:21:49:28:29:2a:1e:ea:58:d7:af:7a:66:e2:1e:
                    05:29:e3:fd:2f:51:3f:c5:f7:36:82:52:67:56:c3:
                    f7:ce:8c:51:8c:39:ef:87:84:05:73:5c:d8:80:ed:
                    dc:3d:f2:16:d4:b2:fd:75:bd:4a:2e:50:3d:5f:c1:
                    4b:35:9c:f7:a7:14:08:e4:84:f6:9e:21:1c:58:8e:
                    72:78:e9:1a:69:3a:6b:6e:07:26:65:24:10:f5:33:
                    a6:b3:04:43:58:76:6a:c7:cb:57:7e:34:fa:b4:da:
                    28:ef:48:db:dc:e3:4e:44:26:f8:85:fb:21:4a:36:
                    19:75:c2:14:fd:61:fb:1b:c5:8c:27:a8:d8:20:98:
                    22:4c:27:2a:b5:c0:93:22:89:37:f9:2d:67:f9:bd:
                    34:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:33:AA:A8:C2:66:57:32:07:8E:DE:2C:B2:53:4B:A2:F2:6F:ED:70
            X509v3 Authority Key Identifier:
                keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/zzOqqMJmVzIHjt4sslNLovJv7XA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.21.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:e1:6f:c7:3e:00:64:23:cb:d2:e3:75:b8:c3:50:63:3e:cf:
         01:9b:c4:96:98:09:dc:0e:51:4c:22:52:58:a5:0b:f3:a8:a8:
         0b:22:34:77:66:0e:92:cc:b8:f3:12:05:ad:ac:54:ff:86:be:
         f8:46:c2:17:6e:32:2f:b7:48:16:22:28:45:31:ad:6c:ba:3e:
         88:0a:72:76:e1:1c:fa:85:c5:d2:50:19:de:6a:4e:be:67:c3:
         13:ec:5f:b6:fb:a6:d6:0e:ef:6f:3c:45:a7:ce:e2:20:b1:ad:
         18:d9:8f:5f:0f:c0:73:6b:c9:0c:30:3c:16:60:39:91:ba:2b:
         5e:55:6b:ce:41:9c:10:f4:b1:1b:10:14:07:6f:d5:53:1f:a4:
         33:c7:d0:b6:ff:05:e1:30:6f:e6:d5:a7:cc:09:44:9c:0f:51:
         54:a9:e5:a0:df:c4:15:18:8b:26:61:b0:32:49:7c:55:ed:b4:
         4b:db:23:30:8c:c2:4b:87:b8:cb:97:13:49:06:47:f9:22:ad:
         0e:56:f5:6c:10:ac:60:ca:db:1f:a1:67:99:a2:d3:c9:2a:d2:
         c7:f6:bb:00:51:9d:f4:ed:b3:5b:da:e3:12:7d:21:7e:50:c4:
         fd:6d:55:c3:76:ad:7a:2e:ef:41:b3:4a:9b:ec:25:14:eb:76:
         98:fd:6c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----