Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EASPNET/eMbwBTUAI9wUAxuLFvF9e7JNzuI.roa
File:                     eMbwBTUAI9wUAxuLFvF9e7JNzuI.roa (raw, json)
Hash identifier:          vDHwjfvGKZGhMXS37x0Z+CKF/g4iiByLmp+pxqkBNGo=
Subject key identifier:   78:C6:F0:05:35:00:23:DC:14:03:1B:8B:16:F1:7D:7B:B2:4D:CE:E2
Certificate issuer:       /CN=552B16164C361040D88F32D36509448CF3BB9D25
Certificate serial:       0957
Authority key identifier: 55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/eMbwBTUAI9wUAxuLFvF9e7JNzuI.roa
Signing time:             Wed 29 Sep 2021 02:52:42 +0000
ROA not before:           Wed 29 Sep 2021 02:52:42 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     10135
IP address blocks:        2405:5600::/32 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2391 (0x957)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552B16164C361040D88F32D36509448CF3BB9D25
        Validity
            Not Before: Sep 29 02:52:42 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=78C6F005350023DC14031B8B16F17D7BB24DCEE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:59:c3:68:57:c3:57:0d:23:c0:9f:8d:e3:ab:
                    90:56:d6:66:97:48:e5:1b:f6:e2:1a:35:09:e7:3e:
                    50:45:62:ec:bc:af:a7:a1:97:ff:f0:c1:64:b4:66:
                    60:99:9a:09:ff:e1:91:3e:e7:5a:80:60:3e:1a:52:
                    d2:d2:e9:0a:c6:17:92:63:61:69:d2:d1:9b:81:8e:
                    1a:49:ef:1a:1e:e3:35:82:55:9c:3a:05:06:3f:c1:
                    21:d9:29:1a:7d:e3:aa:d4:35:a2:d5:32:06:bc:33:
                    a4:5a:fe:43:4c:1d:a2:0d:b5:c2:e7:7a:d5:aa:f8:
                    a8:ff:f8:1d:f0:8f:5b:43:d0:b1:6a:c9:da:e8:52:
                    20:8a:1c:08:0e:16:f1:95:51:b0:0f:23:a4:2d:59:
                    4e:02:5e:64:34:54:1f:30:50:65:77:7f:e8:e8:07:
                    22:df:fa:54:a6:46:29:90:db:b7:9c:6f:17:bb:07:
                    70:c2:89:59:cf:9c:3c:79:ef:bd:8e:2d:49:8e:1c:
                    e2:3c:c3:11:39:51:26:00:2d:7e:44:ef:05:ea:26:
                    5b:73:0f:65:7d:68:2c:74:5a:83:ae:fa:6e:27:80:
                    db:67:1d:f9:87:75:be:bf:59:32:9d:e6:84:23:b6:
                    08:90:b7:1e:12:f9:f1:89:cf:25:cc:fd:ca:7e:7f:
                    c1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C6:F0:05:35:00:23:DC:14:03:1B:8B:16:F1:7D:7B:B2:4D:CE:E2
            X509v3 Authority Key Identifier:
                keyid:55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/VSsWFkw2EEDYjzLTZQlEjPO7nSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/eMbwBTUAI9wUAxuLFvF9e7JNzuI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:5600::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:d5:48:58:1a:a6:e0:b8:2a:60:f5:c7:0c:71:a4:90:20:da:
         76:fc:53:59:dd:87:67:6d:52:5a:8d:63:1f:4e:be:1b:b7:32:
         a8:5d:31:09:41:4e:06:7c:1c:37:66:bb:19:b8:16:29:ad:91:
         04:f9:12:e3:0b:55:e1:87:d3:e8:ad:8b:8b:c5:ed:ad:e8:3b:
         d8:db:c6:95:1d:10:e4:2c:cb:7a:d4:11:86:ad:65:e4:37:98:
         39:9b:f0:a1:75:6d:43:a9:7c:a2:0c:61:c3:33:62:dc:89:50:
         e8:0c:0c:bc:5a:75:d4:8a:bf:a8:13:6c:5c:b8:18:eb:79:6f:
         61:fb:cb:16:dd:91:3b:94:c0:09:74:78:69:e1:0b:b1:60:9a:
         90:04:26:54:b0:91:f4:8a:6e:b2:a5:33:b2:10:2f:c8:c2:27:
         b0:30:86:ec:4a:75:33:1f:51:18:41:6e:69:3d:ab:92:3d:9b:
         c7:06:08:88:33:53:92:9e:09:de:69:35:56:85:6d:10:2e:5b:
         65:0c:aa:41:6c:21:90:59:13:43:6d:27:f6:bf:9e:7e:a2:5a:
         af:22:80:6f:d3:41:f0:31:a5:76:eb:7b:16:16:ef:67:06:e0:
         99:4e:e7:70:09:20:f9:2b:3f:ad:9e:08:8d:a3:9b:2b:1c:6d:
         55:a3:b0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----