Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/o227U9OmcyPHJ_tFD75BCaSamFU.roa
File:                     o227U9OmcyPHJ_tFD75BCaSamFU.roa (raw, json)
Hash identifier:          i4G+AHSjpsTwqN5SWyWnkLLnZVxra2qaWDZA119K7M0=
Subject key identifier:   A3:6D:BB:53:D3:A6:73:23:C7:27:FB:45:0F:BE:41:09:A4:9A:98:55
Certificate issuer:       /CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
Certificate serial:       9C
Authority key identifier: 00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/o227U9OmcyPHJ_tFD75BCaSamFU.roa
Signing time:             Thu 10 Mar 2022 15:10:34 +0000
ROA not before:           Thu 10 Mar 2022 15:10:34 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38852
IP address blocks:        2407:a740::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
        Validity
            Not Before: Mar 10 15:10:34 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=A36DBB53D3A67323C727FB450FBE4109A49A9855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:be:bf:64:d2:52:68:5d:b7:ee:71:d5:f6:a5:
                    6f:7a:1b:33:fe:aa:d4:24:a6:47:eb:68:b2:11:be:
                    bd:bc:c1:33:f6:db:16:c1:7a:69:4a:0b:2d:68:9d:
                    f1:26:01:b4:bf:ee:97:17:5f:fe:aa:0d:49:db:e2:
                    95:7f:51:91:14:4e:2e:cd:c5:de:1b:97:db:72:ff:
                    a5:55:05:a4:7b:a1:ed:df:02:0e:5e:90:22:1b:64:
                    f3:35:30:79:23:29:5e:98:b4:83:b2:4e:01:ce:22:
                    ba:86:0c:e4:95:47:1f:86:b7:50:24:03:2d:71:d3:
                    8f:c1:66:ef:d2:f8:66:10:c9:65:21:f0:c9:ee:a0:
                    28:74:fc:77:82:b8:9a:e1:13:9c:0b:45:ac:b8:74:
                    b5:8c:ac:ed:49:99:71:4d:02:02:73:c2:85:39:22:
                    f3:da:f7:46:ee:d4:ad:bb:fc:61:fb:8f:95:d3:ab:
                    62:77:d1:f4:3c:ef:b7:a1:7a:9f:9f:0a:60:0a:1c:
                    89:c2:c8:1e:1e:0e:bb:05:00:54:08:10:b7:0b:e0:
                    c8:ce:7a:57:90:53:a1:c2:26:82:44:98:c0:07:eb:
                    3b:ba:7a:13:bf:45:6c:26:fe:7e:b4:02:9f:05:cb:
                    05:52:41:d8:9c:1d:dd:d5:cb:56:20:ef:bd:0c:03:
                    04:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:6D:BB:53:D3:A6:73:23:C7:27:FB:45:0F:BE:41:09:A4:9A:98:55
            X509v3 Authority Key Identifier:
                keyid:00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/o227U9OmcyPHJ_tFD75BCaSamFU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:a740::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:4a:c4:cc:d1:45:df:87:49:c3:82:cb:db:0b:a0:5c:27:f3:
         2b:cf:03:ce:4a:27:a4:cb:e3:fd:58:52:d0:21:06:74:24:99:
         91:37:3a:f0:41:c7:43:dc:8c:08:d4:85:75:97:f1:e2:32:ca:
         93:20:85:8b:86:1b:36:c8:a2:5f:13:27:29:c5:df:e6:f1:46:
         fd:3e:c9:9a:e3:6f:d0:c2:27:6d:c7:d6:04:7c:82:bb:70:ab:
         4b:24:a3:56:e5:a6:82:e9:69:04:72:1f:e6:eb:4f:6b:cb:71:
         ac:12:cc:dd:d6:9b:56:7c:b2:90:23:32:f4:82:cc:f5:f7:26:
         b1:be:07:e6:71:cb:33:eb:f6:68:0d:c4:b2:4b:dd:0c:53:fb:
         0d:84:4b:fd:8a:80:ad:b6:09:37:4d:86:eb:b9:26:52:47:25:
         f0:4d:65:63:c6:5c:1d:2b:c0:d8:00:09:88:a7:5c:47:a7:c0:
         7d:cc:bc:7a:c4:c2:7f:89:8c:d7:b3:dc:d0:cb:b3:46:e5:09:
         c7:42:a6:15:88:ff:f3:c1:5d:53:b3:54:26:0d:0a:19:a9:72:
         2b:42:bd:af:3e:a9:fe:98:d2:02:29:51:32:16:8f:39:1c:e1:
         b1:a2:9a:ac:f2:36:d9:79:03:b7:28:98:27:bc:06:69:02:8e:
         57:7d:c3:6a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----