Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/AUCuUG8ztyIqJG329N0VLZD1LBc.roa
File:                     AUCuUG8ztyIqJG329N0VLZD1LBc.roa (raw, json)
Hash identifier:          +IeZVPH0HeWYnvhK+CJO8VaN17WpaxBCYTbeephSXEw=
Subject key identifier:   01:40:AE:50:6F:33:B7:22:2A:24:6D:F6:F4:DD:15:2D:90:F5:2C:17
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0C50
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/AUCuUG8ztyIqJG329N0VLZD1LBc.roa
Signing time:             Wed 29 Sep 2021 02:51:08 +0000
ROA not before:           Wed 29 Sep 2021 02:51:08 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9505
IP address blocks:        203.160.224.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3152 (0xc50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 29 02:51:08 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=0140AE506F33B7222A246DF6F4DD152D90F52C17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7f:5a:8e:cd:e1:15:b8:89:a5:e7:84:60:d0:
                    13:9b:11:0a:d5:52:89:bf:eb:1a:cf:12:79:ba:68:
                    32:3f:4a:40:1f:97:0b:5d:12:77:a4:7a:ad:c7:28:
                    20:e0:a2:85:4c:83:81:c6:71:da:55:70:75:50:99:
                    e8:87:00:e3:1b:dc:26:f5:6d:2a:99:4d:63:16:6b:
                    e5:9e:35:15:b4:e9:d8:d6:74:26:75:a3:d2:9a:40:
                    b4:95:a0:3f:59:76:36:59:8f:36:aa:40:73:37:3b:
                    5e:cb:c3:91:f5:02:ae:1a:09:bc:07:48:13:86:55:
                    78:32:7d:5d:3b:f2:ad:5a:57:01:86:39:15:45:a2:
                    8b:92:53:15:12:71:e0:d5:a8:96:12:f3:36:53:3b:
                    c5:68:5f:2c:90:79:a0:08:12:c7:ca:06:6d:bc:e1:
                    cb:9b:6d:0d:3a:77:ab:5d:85:a0:91:a3:45:62:f0:
                    49:4e:54:cc:a8:48:42:71:ee:30:89:8e:c9:ae:d7:
                    c6:4e:5c:75:e2:cb:42:d2:2b:a6:f8:ec:f2:95:05:
                    5d:bd:63:61:74:0e:21:60:3d:60:4f:ee:19:32:41:
                    e3:0e:b1:05:cb:f8:e3:20:c7:45:c2:9e:67:dc:b6:
                    a5:1b:70:e0:36:53:f0:0e:1a:5e:72:31:8c:09:c6:
                    95:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:40:AE:50:6F:33:B7:22:2A:24:6D:F6:F4:DD:15:2D:90:F5:2C:17
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/AUCuUG8ztyIqJG329N0VLZD1LBc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.160.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         42:68:ff:0a:c6:46:9c:42:f9:6e:6d:8a:72:88:d6:f6:8a:fb:
         c7:22:24:bf:0d:0c:79:a0:c1:37:19:54:ac:e9:d4:c7:94:e8:
         15:39:a2:85:99:bc:b7:f8:58:dd:93:96:e0:46:96:93:21:45:
         b0:bb:31:80:8d:ec:57:ea:e9:8a:3f:9c:a5:b8:c4:5a:8b:94:
         51:62:48:cf:0e:ec:9a:34:a9:e1:0f:3d:76:cb:63:ae:07:84:
         d1:31:06:89:c3:01:89:4b:d0:6f:f3:36:28:3c:75:7b:2c:df:
         38:39:3e:84:35:10:ec:ac:6a:03:2e:f7:78:9d:c2:14:4b:49:
         50:bb:2b:2d:76:ac:2d:89:fb:9c:60:3d:9a:90:a2:55:4e:f6:
         1c:e1:a9:88:81:66:24:8d:70:82:1d:83:a3:86:54:2b:16:cf:
         dd:be:ec:c4:7e:05:74:47:65:22:db:f4:ef:f4:88:a4:24:a0:
         7b:05:60:be:cd:84:96:85:ec:00:6d:11:24:96:0d:9e:ca:11:
         f4:fe:2f:d6:3a:c4:21:ed:30:4f:e3:23:81:4d:cd:9a:53:68:
         09:b8:fe:69:17:50:dd:a2:8b:54:c6:03:3d:57:b6:98:3c:6d:
         8f:fe:45:1e:11:73:4c:37:57:0b:fe:eb:7a:a5:e1:3a:bf:bd:
         8c:08:47:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----