Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/2aWGMJszqJ6m8MY0J3H05WlNops.roa
File:                     2aWGMJszqJ6m8MY0J3H05WlNops.roa (raw, json)
Hash identifier:          fJPBanBniyC//5GInW7ZY47BBafAszfR2M+yLxKTU2U=
Subject key identifier:   D9:A5:86:30:9B:33:A8:9E:A6:F0:C6:34:27:71:F4:E5:69:4D:A2:9B
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0845
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/2aWGMJszqJ6m8MY0J3H05WlNops.roa
Signing time:             Tue 29 Sep 2020 09:58:33 +0000
ROA not before:           Tue 29 Sep 2020 09:58:33 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     3462
IP address blocks:        61.216.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2117 (0x845)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 29 09:58:33 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D9A586309B33A89EA6F0C6342771F4E5694DA29B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d3:ec:34:46:dd:41:d3:b6:05:02:45:f1:f6:
                    bc:f8:cd:fc:f7:1a:ce:3d:f9:b8:d5:e3:2e:c8:10:
                    85:b1:f5:b4:f4:4e:aa:98:a5:6c:49:aa:4d:b2:aa:
                    81:70:f9:a9:1c:57:8a:c8:ba:13:af:29:49:9c:a8:
                    8e:d4:36:80:66:9c:b6:e1:61:2a:8a:89:c5:88:5e:
                    de:86:23:34:4b:c6:5d:2e:ab:c1:c2:f5:08:c8:ed:
                    92:66:fe:a3:67:32:4f:2c:e2:8a:ae:46:6d:5d:1a:
                    d4:5b:2e:a0:4d:35:9a:cd:8a:9e:e0:8a:40:ea:f0:
                    17:64:f7:f1:a9:3f:f3:a9:10:8f:f8:be:89:61:b8:
                    c0:8a:db:91:4d:e5:85:b9:85:51:15:a7:7a:21:b2:
                    19:1f:95:8a:e1:63:24:e0:d0:c8:f3:1a:0a:34:26:
                    5b:38:3b:60:d1:f9:0d:c0:ab:9b:59:f2:1f:a2:86:
                    e1:94:6d:c0:59:46:46:e6:18:da:8a:2a:66:19:df:
                    2b:d1:7a:02:43:9f:ea:ad:64:31:79:af:19:da:c1:
                    27:33:55:80:f5:40:d5:37:21:a4:52:e8:dc:29:ac:
                    25:b6:b7:ae:91:a4:cf:e5:d0:02:e5:06:c2:04:b9:
                    49:e8:ac:99:e9:99:b8:34:d3:58:d7:e9:08:b4:3a:
                    a0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A5:86:30:9B:33:A8:9E:A6:F0:C6:34:27:71:F4:E5:69:4D:A2:9B
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/2aWGMJszqJ6m8MY0J3H05WlNops.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.216.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c9:ec:fd:3d:ba:e7:52:dc:20:78:e1:41:63:fd:69:df:24:c5:
         18:5c:f1:db:e3:fa:c0:48:38:b6:b9:96:e4:66:e8:cf:66:75:
         29:ca:fa:df:87:1f:f8:28:94:73:1b:55:af:e5:83:2f:a8:26:
         80:62:b9:6d:a5:0d:0f:bd:4d:e3:bc:a5:9b:92:f0:04:67:3c:
         32:6c:96:62:5b:f6:84:02:b5:f2:fa:e2:e8:34:b8:77:ea:9a:
         8c:61:31:18:19:d3:d2:05:37:b6:63:d0:cc:48:d5:90:9f:9e:
         ab:cb:26:25:16:a9:47:77:d7:4d:46:54:73:39:ce:c0:4c:82:
         c6:27:05:35:b9:b6:45:ca:63:92:68:c0:4d:f5:e3:d2:b7:45:
         01:26:a0:34:22:25:62:35:f1:73:1f:53:81:f8:9c:31:2c:3d:
         6e:0f:3d:e2:39:51:80:43:3d:56:29:e2:47:7c:ed:f5:e9:68:
         b4:0b:9f:0d:02:3c:20:d3:94:45:27:4b:b3:85:db:60:46:f3:
         0d:91:e6:fe:54:13:04:fa:0c:6e:77:2d:51:5c:ef:9a:3b:0f:
         09:68:3c:47:e8:68:43:d7:bd:ea:0b:87:22:4d:2c:43:5d:2a:
         6f:bc:b9:8a:90:c5:da:a3:73:62:3f:fe:c8:14:a0:16:c0:b6:
         87:34:2c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----