Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/ImEyur6_zgWx3XrdN0eLVlOZDlA.roa
File:                     ImEyur6_zgWx3XrdN0eLVlOZDlA.roa (raw, json)
Hash identifier:          1zugYxQnHrUDs2tMMN1+Q2d3fSPr1po6uABe1vIPLIM=
Subject key identifier:   22:61:32:BA:BE:BF:CE:05:B1:DD:7A:DD:37:47:8B:56:53:99:0E:50
Certificate issuer:       /CN=165495E8D327E4F62D5A16438F080E608A34D0D3
Certificate serial:       0B78
Authority key identifier: 16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/ImEyur6_zgWx3XrdN0eLVlOZDlA.roa
Signing time:             Wed 29 Sep 2021 02:37:51 +0000
ROA not before:           Wed 29 Sep 2021 02:37:51 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131642
IP address blocks:        2404:bac0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2936 (0xb78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165495E8D327E4F62D5A16438F080E608A34D0D3
        Validity
            Not Before: Sep 29 02:37:51 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=226132BABEBFCE05B1DD7ADD37478B5653990E50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5d:c6:45:f9:e8:8d:fd:1a:fd:c2:e7:df:d2:
                    62:29:ca:07:7e:e0:14:68:80:83:3a:a2:55:78:cb:
                    c0:5b:fb:43:26:7f:37:f3:a3:d0:ba:63:b4:04:cb:
                    98:39:1a:6f:48:d3:3b:f2:2c:58:10:24:79:c9:e2:
                    06:8e:9c:20:49:d2:48:cd:9b:b9:ef:2a:2d:22:90:
                    f2:a2:06:f2:61:32:ba:25:75:a4:03:78:e4:78:6b:
                    21:68:73:73:1a:d6:74:3c:e8:dd:72:82:bb:eb:12:
                    14:94:b0:ef:83:6a:f3:ee:56:b0:fd:71:01:30:10:
                    20:88:95:4e:9d:a3:2a:48:f3:3d:d7:6c:47:ac:44:
                    ff:be:f0:cf:16:ba:0e:a0:a3:0a:4e:cf:2c:67:75:
                    df:11:bf:58:70:ac:68:1a:4b:d1:fd:6e:48:44:64:
                    03:4c:94:a0:19:cd:11:d9:7e:c1:a7:80:60:56:8d:
                    f0:47:ed:5c:92:47:11:2c:8d:62:03:07:ef:c7:e7:
                    82:76:40:5e:3d:67:71:9b:ff:0b:2a:9d:fb:9d:41:
                    8c:d5:da:82:e3:05:64:12:e7:61:0e:ac:89:66:b2:
                    4e:de:a4:bb:95:14:0a:a6:9d:ba:30:b3:77:0f:74:
                    48:01:88:62:7b:eb:ab:53:28:cf:97:20:3a:09:89:
                    81:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:61:32:BA:BE:BF:CE:05:B1:DD:7A:DD:37:47:8B:56:53:99:0E:50
            X509v3 Authority Key Identifier:
                keyid:16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/ImEyur6_zgWx3XrdN0eLVlOZDlA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:bac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:3f:ee:90:58:ee:d4:94:12:07:96:c0:f0:72:21:57:21:8b:
         b8:87:d3:5f:1e:2c:1b:22:25:a3:a5:0d:1f:ed:0e:2f:f1:ef:
         6c:f1:70:67:f6:fd:e9:a8:8f:7e:81:b1:72:56:f7:80:bc:25:
         61:93:cf:c0:77:09:57:cb:31:bc:a3:7f:c4:8b:b1:7d:b0:19:
         90:14:4e:a4:fb:71:0b:3f:34:f8:b9:59:ff:04:af:1e:bf:66:
         55:ce:25:69:60:9b:a6:91:3d:7f:2c:d5:a6:eb:c9:50:49:a1:
         8d:cb:28:c0:1c:37:ee:4b:b1:9a:1a:32:42:4a:9e:da:a0:5c:
         be:5c:9d:56:ce:c9:c0:da:ad:35:fa:4e:24:b5:42:5d:c4:29:
         b7:f9:c7:a1:8e:27:93:86:70:54:29:a8:29:ef:58:73:b4:c2:
         3e:6e:f4:37:99:2b:d4:e1:41:23:94:ba:83:d9:ec:24:27:27:
         e1:92:fe:40:da:c2:25:be:bd:05:54:87:6e:47:d4:0b:c9:a0:
         1b:f4:d5:8e:3b:81:40:5d:e1:e7:55:07:20:12:7d:a7:08:62:
         35:77:2d:02:20:ab:00:d0:b1:12:db:98:96:ae:d7:c6:df:2c:
         df:f3:10:df:88:f6:68:fa:c6:c2:13:45:4e:b2:e1:dc:03:98:
         7b:03:83:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----