Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ETIME/aO7ALMbgof03fTZ0kqy6y8UsTSA.roa
File:                     aO7ALMbgof03fTZ0kqy6y8UsTSA.roa (raw, json)
Hash identifier:          Yx6ZJGctEJlSCCR4Tf8rn6ogKvORChuQsujnucagKq8=
Subject key identifier:   68:EE:C0:2C:C6:E0:A1:FD:37:7D:36:74:92:AC:BA:CB:C5:2C:4D:20
Certificate issuer:       /CN=E0EA885A7E6971C99342777E7DDDBA65D0EB131F
Certificate serial:       0B
Authority key identifier: E0:EA:88:5A:7E:69:71:C9:93:42:77:7E:7D:DD:BA:65:D0:EB:13:1F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4OqIWn5pccmTQnd-fd26ZdDrEx8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/aO7ALMbgof03fTZ0kqy6y8UsTSA.roa
Signing time:             Mon 30 Nov 2020 17:44:00 +0000
ROA not before:           Mon 30 Nov 2020 17:44:00 +0000
ROA not after:            Tue 23 Nov 2021 09:57:13 +0000
asID:                     134823
IP address blocks:        2406:c3c0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0EA885A7E6971C99342777E7DDDBA65D0EB131F
        Validity
            Not Before: Nov 30 17:44:00 2020 GMT
            Not After : Nov 23 09:57:13 2021 GMT
        Subject: CN=68EEC02CC6E0A1FD377D367492ACBACBC52C4D20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b6:59:67:19:7e:48:a4:e7:7d:68:91:61:b1:
                    ea:4a:cb:49:1e:fe:cc:90:67:93:1f:f0:5d:47:b3:
                    31:01:c3:88:c5:aa:46:d1:63:2f:8d:4c:fc:00:27:
                    d8:5e:b2:10:70:07:df:54:d1:1d:97:28:9c:f9:d0:
                    c6:d1:40:bf:89:6f:6d:d4:8f:48:6d:6d:8b:a8:1c:
                    3b:7d:7c:c9:7a:e2:58:90:79:19:b6:6f:6a:a6:58:
                    60:b8:33:77:3f:39:f3:a3:90:3c:f3:e4:86:00:97:
                    3d:b5:06:bd:15:a6:c1:58:43:24:d4:18:33:7b:91:
                    c6:9e:23:d8:37:47:d9:13:d1:38:f0:1d:7b:85:0a:
                    cf:8b:d5:67:af:4c:d1:27:8c:1a:18:c2:2a:0f:c1:
                    86:e4:53:2d:08:28:56:be:c6:8d:92:c2:0c:f7:4f:
                    8b:0b:d3:ef:3b:d9:b0:8a:32:c2:4a:61:a8:90:e4:
                    45:8e:43:51:48:6e:83:23:ba:ec:a5:39:5a:04:06:
                    d6:99:18:5a:3c:fc:90:35:5e:f1:59:b7:63:e1:38:
                    f1:9a:e4:c2:2c:90:b1:09:e9:4c:ef:b7:e6:ab:7d:
                    99:7e:ec:6f:74:13:eb:1a:59:6a:90:04:b0:70:cd:
                    fb:72:8d:6d:e8:a8:87:34:e8:fa:76:39:a4:1f:09:
                    ea:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:EE:C0:2C:C6:E0:A1:FD:37:7D:36:74:92:AC:BA:CB:C5:2C:4D:20
            X509v3 Authority Key Identifier:
                keyid:E0:EA:88:5A:7E:69:71:C9:93:42:77:7E:7D:DD:BA:65:D0:EB:13:1F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/4OqIWn5pccmTQnd-fd26ZdDrEx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4OqIWn5pccmTQnd-fd26ZdDrEx8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/aO7ALMbgof03fTZ0kqy6y8UsTSA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:c3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c5:65:1e:cb:a7:38:06:77:67:d9:42:24:b4:55:02:ea:f1:c0:
         ce:9c:12:0e:eb:dc:71:fc:d8:eb:b7:11:2c:dc:57:5e:cf:69:
         5c:fb:f5:7b:ee:89:e9:ff:30:49:6d:fe:e7:13:38:ca:4f:42:
         ab:d5:06:49:24:7f:df:0d:e2:2c:0a:8d:ec:2e:fe:f7:3c:cb:
         eb:79:60:43:be:ce:7c:11:f5:ab:d5:09:0f:d0:41:99:34:a1:
         9a:2a:f9:40:41:16:ee:ce:66:14:88:52:16:46:af:81:75:dc:
         62:31:6a:2e:6b:0c:01:b7:46:83:89:d2:81:2c:87:9d:48:f5:
         da:89:6f:85:dd:eb:b5:63:26:3a:60:c1:16:08:64:5c:e1:41:
         cf:66:67:5f:93:10:04:33:91:18:ad:6f:01:fb:ce:e9:fd:19:
         4c:14:79:9e:b0:72:bb:a6:d9:c5:b4:7e:fd:85:5c:d5:6d:92:
         04:35:bd:79:ee:c9:93:c7:a9:0b:05:75:ab:d7:da:10:3a:ce:
         b1:cf:82:17:a5:02:7d:d4:37:12:8a:3e:39:7d:f3:cd:d0:ad:
         7a:89:bc:af:95:a7:a7:df:0a:a6:ab:cb:dd:35:ed:55:67:a3:
         21:55:67:36:35:3d:fe:b2:ee:f6:20:57:5b:43:0a:40:dc:58:
         30:eb:ca:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----