Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/B_1SrHMrh2ZqMykMCRuDb36z5RU.roa
File:                     B_1SrHMrh2ZqMykMCRuDb36z5RU.roa (raw, json)
Hash identifier:          OIgrdTs9GT0h2yBtI0ZlpYXUU0vurqz7ULUtHah3uz8=
Subject key identifier:   07:FD:52:AC:73:2B:87:66:6A:33:29:0C:09:1B:83:6F:7E:B3:E5:15
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0BF3
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/B_1SrHMrh2ZqMykMCRuDb36z5RU.roa
Signing time:             Wed 29 Sep 2021 02:50:42 +0000
ROA not before:           Wed 29 Sep 2021 02:50:42 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     54994
IP address blocks:        202.39.156.0/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3059 (0xbf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 29 02:50:42 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=07FD52AC732B87666A33290C091B836F7EB3E515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:21:e0:8d:33:20:89:59:ab:28:4e:d4:ab:b2:
                    80:69:25:78:00:b0:d2:20:73:79:6c:0d:11:f5:b0:
                    99:75:2b:bf:a6:f2:c0:68:08:69:f7:a4:fe:81:ed:
                    66:bd:63:44:c2:55:58:12:7e:56:6e:a4:fd:60:70:
                    ba:10:e2:f1:a0:c4:57:c4:26:89:f1:a4:dd:b9:ea:
                    ed:12:81:f5:3d:c7:4d:1d:83:03:43:1f:4d:00:a4:
                    2a:61:24:31:f0:25:53:98:22:99:1c:21:18:cd:8e:
                    6b:91:65:c5:98:73:60:69:97:01:b5:64:22:55:47:
                    e7:f7:d5:9f:dd:ee:e0:5b:90:7c:12:93:23:c2:ff:
                    4d:8e:a6:bb:34:9e:1e:91:2b:40:57:6e:d3:74:b0:
                    fe:c3:5e:db:f2:5d:57:7b:17:18:69:6b:8d:61:c6:
                    54:a2:f2:33:e7:34:54:e4:54:48:69:6e:b5:27:2e:
                    dd:18:00:ad:fa:a5:79:c3:c6:0d:86:1e:38:04:f9:
                    7f:56:b9:65:fc:ba:79:23:62:46:ac:4b:0f:02:f7:
                    18:df:99:9a:bc:cc:71:ef:fa:67:8c:25:e6:eb:c6:
                    00:3a:c4:65:6a:56:3b:87:44:dc:51:46:a3:d1:ce:
                    e1:a7:f1:5d:ac:39:26:85:3c:03:1c:2d:4a:1f:4f:
                    7b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FD:52:AC:73:2B:87:66:6A:33:29:0C:09:1B:83:6F:7E:B3:E5:15
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/B_1SrHMrh2ZqMykMCRuDb36z5RU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.39.156.0/26

    Signature Algorithm: sha256WithRSAEncryption
         89:6d:11:fc:3f:d6:7f:3e:a5:ef:16:fa:82:96:28:5e:c1:ba:
         7c:90:e2:38:4a:cf:5b:62:53:54:6d:a8:3c:06:e7:41:2b:84:
         b1:d3:8a:31:d6:42:30:73:87:15:d1:b5:e5:fc:24:02:2e:8d:
         d5:f4:75:cf:fe:56:4a:d4:b9:7b:0d:e3:76:21:f5:db:a1:df:
         65:ca:c8:91:dc:b7:92:bc:3d:a7:9a:c0:09:9f:57:8b:41:1d:
         a4:3d:35:8c:1a:98:f5:2b:ba:63:2a:cb:ee:55:8f:4a:aa:f0:
         49:fc:aa:e9:0e:a4:89:f8:55:9a:61:f8:d1:12:d4:98:8a:aa:
         6c:5a:8c:1f:e4:38:dd:8b:54:22:25:76:7c:0d:ea:c1:2c:df:
         ba:34:be:c7:1b:fc:5b:c1:f4:ed:05:68:95:0d:ef:94:ac:85:
         6a:af:03:eb:50:ac:a5:32:8d:58:d2:f4:58:5f:35:f8:8f:3d:
         27:94:79:c7:4d:cd:7d:38:38:86:3c:92:ef:f5:48:a9:98:15:
         16:58:53:ab:b2:ac:b9:66:1a:ff:6c:f9:a0:2a:c3:e3:1a:26:
         53:37:c1:b4:b7:1d:b5:d3:59:a0:88:38:6b:93:a4:fa:45:fb:
         71:01:93:a6:36:9f:a2:ba:a1:94:4e:99:5d:e4:f2:b8:f8:c2:
         f6:2a:3e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----