Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/pPjwrbtbEr6IPeaNCsQyMF7L5kM.roa
File:                     pPjwrbtbEr6IPeaNCsQyMF7L5kM.roa (raw, json)
Hash identifier:          Xwv0kzFyIfnVLsuPTVWLg/rUy8r65r1c1CMJq7D9NY8=
Subject key identifier:   A4:F8:F0:AD:BB:5B:12:BE:88:3D:E6:8D:0A:C4:32:30:5E:CB:E6:43
Certificate issuer:       /CN=165495E8D327E4F62D5A16438F080E608A34D0D3
Certificate serial:       0C65
Authority key identifier: 16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/pPjwrbtbEr6IPeaNCsQyMF7L5kM.roa
Signing time:             Thu 15 Sep 2022 02:50:50 +0000
ROA not before:           Thu 15 Sep 2022 02:50:50 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131658
IP address blocks:        2404:bac0::/44 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3173 (0xc65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165495E8D327E4F62D5A16438F080E608A34D0D3
        Validity
            Not Before: Sep 15 02:50:50 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=A4F8F0ADBB5B12BE883DE68D0AC432305ECBE643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a8:a7:e7:84:16:2b:d3:6e:6f:47:3a:38:d7:
                    53:0b:19:94:26:f2:1a:3e:28:73:75:d8:ec:d6:08:
                    47:92:5c:5d:49:3d:ac:1e:b1:a4:9e:da:f7:a8:d2:
                    b9:7c:d0:ba:61:b6:fd:f7:60:83:e6:66:73:04:1c:
                    c5:49:c0:78:ad:47:2f:15:89:75:90:8c:50:01:4b:
                    17:e1:32:d8:82:3c:98:0c:ee:42:79:51:02:33:f5:
                    41:26:6f:b2:a9:4c:44:e0:70:a6:c8:01:5c:c2:13:
                    d4:38:12:3e:20:1d:30:af:c8:a6:d2:73:51:79:31:
                    ca:2b:9f:8d:17:35:35:5f:12:64:ad:49:ee:d1:c5:
                    17:49:1a:29:03:a4:54:d1:f1:c7:96:1b:9d:73:aa:
                    87:bd:32:b9:e2:63:68:6b:df:5a:cb:55:d5:62:cc:
                    07:ea:d4:68:66:82:5a:65:85:bc:40:49:3d:51:16:
                    7d:fd:fa:ef:e5:28:9c:0d:5a:be:04:fc:96:9f:1e:
                    58:97:83:41:c3:df:87:85:14:00:f2:11:1b:2a:b2:
                    4a:21:83:41:25:88:bf:2c:6a:f3:08:6f:a8:5b:ef:
                    14:b1:7f:d3:2d:68:ca:e3:fb:24:08:02:9d:17:db:
                    a1:7a:0b:f8:c9:37:d0:9b:64:8a:5f:c0:35:74:9f:
                    79:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F8:F0:AD:BB:5B:12:BE:88:3D:E6:8D:0A:C4:32:30:5E:CB:E6:43
            X509v3 Authority Key Identifier:
                keyid:16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/pPjwrbtbEr6IPeaNCsQyMF7L5kM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:bac0::/44

    Signature Algorithm: sha256WithRSAEncryption
         38:81:e7:2b:ae:5a:2a:49:54:e9:db:7b:dc:06:03:8b:d3:fe:
         36:3a:89:6b:63:29:8b:54:c2:2d:7f:bf:5c:7a:3e:49:bc:1f:
         a3:38:13:eb:c9:ec:14:c9:d4:ba:98:3c:5c:e7:ba:00:84:96:
         5a:4c:49:61:d2:1a:74:a6:56:6f:c0:93:48:7c:1d:d1:01:52:
         f2:76:83:49:8d:65:63:da:53:f4:f8:9b:a7:ab:be:ae:bc:5a:
         df:7b:0d:2b:e2:8b:a2:c2:13:bb:29:d1:0e:df:23:a8:f8:7c:
         37:3d:41:05:ad:9f:dc:fe:aa:3e:4e:9b:b8:84:23:a1:f0:be:
         fb:06:d7:d6:bc:a7:50:c5:ab:d5:34:b4:8a:a8:80:62:e0:e4:
         b6:6e:6d:cd:8d:de:25:81:be:ba:0f:fd:1c:e2:eb:2c:40:f0:
         08:ba:3b:fe:f3:4a:2d:bd:23:d4:ae:c7:47:02:54:cd:51:b6:
         ab:a9:e2:ae:e8:36:c9:f9:4f:a2:04:a5:0c:3e:96:aa:a3:bb:
         c5:4f:0e:1c:c7:8d:2a:98:af:79:08:65:f3:62:6f:d4:bf:a4:
         97:a8:6e:05:5e:4f:57:b9:0e:8e:cf:62:10:1d:00:77:19:a5:
         39:d3:fb:7d:65:42:93:48:20:53:ec:f7:de:a2:4a:4a:ad:d5:
         93:89:d0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----