Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/bMBHkR6fp_cJSFp_acmTk1Rr7xM.roa
File:                     bMBHkR6fp_cJSFp_acmTk1Rr7xM.roa (raw, json)
Hash identifier:          gGQ1sAKXk4DIpaNoLMOKg1K151A5Ark9nYhOc1DLglk=
Subject key identifier:   6C:C0:47:91:1E:9F:A7:F7:09:48:5A:7F:69:C9:93:93:54:6B:EF:13
Certificate issuer:       /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial:       09A2
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/bMBHkR6fp_cJSFp_acmTk1Rr7xM.roa
Signing time:             Wed 29 Sep 2021 02:42:35 +0000
ROA not before:           Wed 29 Sep 2021 02:42:35 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9674
IP address blocks:        2401:e180::/32 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2466 (0x9a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
        Validity
            Not Before: Sep 29 02:42:35 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=6CC047911E9FA7F709485A7F69C99393546BEF13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b1:23:79:8e:e1:7f:8a:35:67:1b:28:f9:2f:
                    7a:fd:35:90:6d:bd:69:1a:f1:74:c3:5d:a5:82:07:
                    96:00:b0:e8:83:23:bb:98:92:1a:bc:9c:d2:e0:77:
                    cc:a7:df:e5:5a:c5:6e:3f:12:c1:f9:74:66:61:1a:
                    24:32:62:43:7e:f6:6e:cd:80:9e:8f:ef:6d:16:42:
                    1d:f8:fa:30:28:98:1f:c4:87:a0:43:8c:00:78:7c:
                    62:01:86:80:c5:ca:bc:09:d9:40:fa:74:6d:e3:c5:
                    ce:57:08:28:78:60:ac:23:80:48:5f:19:52:8a:b2:
                    5e:06:e3:47:2e:6e:2c:9b:d2:8e:63:2d:ff:5d:21:
                    14:74:db:d9:d3:30:ef:95:59:d5:90:0d:9d:19:ed:
                    9e:40:b6:7d:3b:da:b3:75:fb:bb:97:74:80:05:09:
                    50:b4:96:0a:4f:e7:93:7d:d8:56:5d:62:20:0b:97:
                    8a:3c:ca:cf:2a:92:0a:d9:92:1c:a6:2a:1e:b4:46:
                    c1:bb:91:c8:ff:f8:bd:b9:53:ab:af:39:df:5d:49:
                    f3:98:f0:03:30:1c:17:3c:fe:2d:ca:21:8f:55:fa:
                    a7:17:b0:53:0a:4f:5a:bf:07:e5:c9:38:75:ae:95:
                    b0:07:a3:29:f6:50:dc:13:81:4c:15:49:8a:3c:39:
                    1a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C0:47:91:1E:9F:A7:F7:09:48:5A:7F:69:C9:93:93:54:6B:EF:13
            X509v3 Authority Key Identifier:
                keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/bMBHkR6fp_cJSFp_acmTk1Rr7xM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:e180::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:c4:f9:e6:e0:b5:94:66:28:db:ed:42:7c:e2:55:3f:42:ce:
         32:81:37:8e:c4:20:fd:39:ee:41:22:21:73:2c:75:d2:31:65:
         84:ea:50:65:dc:7f:e0:bd:5d:d1:cd:97:42:ac:17:74:94:38:
         7a:a8:d9:e5:b7:90:7f:a2:41:e9:46:0d:e6:53:01:1a:6e:cd:
         b6:a9:92:8f:18:8a:a7:36:97:74:2c:0a:9d:a8:8c:3f:47:2a:
         23:91:2d:da:76:59:e5:e9:ba:88:bd:d3:2d:8e:3f:ab:4c:e4:
         ed:3c:8c:76:2d:20:a0:94:f5:76:5d:8b:ae:57:03:ff:df:4e:
         64:13:0e:f3:08:b4:9d:c2:f5:2b:c4:1a:74:5b:16:01:81:c0:
         46:6c:eb:0b:d7:a3:d7:f8:e1:f3:41:9a:a6:19:dd:30:32:38:
         69:6f:93:aa:f9:78:f5:d9:ca:a2:88:e2:0c:bb:7f:1b:cf:53:
         0e:b8:e8:69:ea:77:93:07:41:61:fb:5c:c4:5e:b8:e0:77:96:
         42:62:e2:2c:5a:e7:0f:06:0f:3e:50:7f:4d:56:40:47:d8:bb:
         cb:13:3f:22:22:bd:4a:24:54:23:d1:20:b1:8e:e5:88:43:ac:
         a4:50:48:56:de:f1:8e:22:c0:6c:b4:c8:86:51:e8:57:1a:95:
         a8:1f:3a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----