Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/DJp1rpIxMkeHACCLxz3Qlz5aTYQ.roa
File:                     DJp1rpIxMkeHACCLxz3Qlz5aTYQ.roa (raw, json)
Hash identifier:          oqOk1PGFC2vRuCTZAlfPQbSP6kemAzH1/X4FNeGZlX8=
Subject key identifier:   0C:9A:75:AE:92:31:32:47:87:00:20:8B:C7:3D:D0:97:3E:5A:4D:84
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0AF1
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/DJp1rpIxMkeHACCLxz3Qlz5aTYQ.roa
Signing time:             Sun 07 Feb 2021 11:42:28 +0000
ROA not before:           Sun 07 Feb 2021 11:42:28 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131621
IP address blocks:        203.75.51.0/27 maxlen: 27

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2801 (0xaf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Feb  7 11:42:28 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=0C9A75AE923132478700208BC73DD0973E5A4D84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cc:24:14:37:07:ed:3f:26:93:e7:8a:09:ae:
                    d6:3e:b8:ce:73:f1:6c:77:98:31:86:1b:b7:12:03:
                    0b:ed:26:5c:a5:73:18:8a:e1:e8:a5:8d:1a:52:be:
                    ff:a7:d8:81:fb:58:67:4c:29:7b:76:c3:df:f0:d6:
                    fa:2d:29:12:78:44:de:9c:07:e8:ed:7b:94:9c:4a:
                    82:5b:23:33:0a:4a:4f:12:05:c2:fc:b3:97:7f:bf:
                    c3:15:36:f4:e5:cc:ea:c0:a1:ae:3a:e9:5a:7f:eb:
                    ec:31:16:81:e9:93:8d:df:a3:3f:52:3c:70:12:18:
                    04:1b:28:ed:e9:42:07:23:80:b4:3f:49:8d:51:e0:
                    bc:3c:21:52:5b:5e:45:63:c7:2b:c0:a1:06:36:3a:
                    96:3f:1a:5d:eb:44:0e:bb:aa:33:4e:50:b3:85:65:
                    3d:e3:c6:a4:b4:26:0c:b2:c1:23:67:e9:ab:f2:91:
                    c8:cb:be:2b:6f:54:c5:d5:1e:ac:ef:5f:0e:19:d4:
                    4f:03:bc:1f:c8:6a:a8:b2:c7:3b:98:2b:7f:61:e3:
                    7e:47:e3:73:26:e9:9a:a1:5f:bf:6d:5a:18:d8:50:
                    59:25:97:10:48:42:5d:d1:e4:37:6e:fd:5d:11:52:
                    ee:2a:1f:85:9c:4d:74:47:61:75:91:82:71:43:3c:
                    fa:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:9A:75:AE:92:31:32:47:87:00:20:8B:C7:3D:D0:97:3E:5A:4D:84
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/DJp1rpIxMkeHACCLxz3Qlz5aTYQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.75.51.0/27

    Signature Algorithm: sha256WithRSAEncryption
         41:a7:23:d4:5b:4d:f3:da:a3:76:17:6b:3c:74:b1:d3:ee:c6:
         89:72:a8:b8:64:90:5e:22:45:9c:1c:d1:e6:2d:ad:e7:d9:ec:
         99:20:f3:ae:18:0f:92:b1:90:15:48:12:9a:4f:e9:6d:63:c2:
         88:24:3f:61:58:8f:13:88:f7:3d:e5:3f:2d:7a:3a:31:72:79:
         65:d8:28:fb:e6:9b:1c:67:eb:43:fd:ac:14:32:27:d4:71:62:
         e6:ee:b2:f5:f5:b5:1b:9d:4b:f4:8b:65:73:ae:b5:7d:b7:99:
         ed:0e:0f:13:36:05:58:6a:d7:8e:43:ad:ea:af:09:9e:d6:19:
         2f:4a:72:40:27:5e:2c:70:5f:70:28:f5:8f:ef:59:50:75:a6:
         25:bc:a8:19:39:77:d6:e4:97:b1:10:cf:de:ab:45:73:41:a0:
         3a:e6:59:a4:bd:ec:5a:01:23:4d:ac:55:61:0b:a0:fe:2d:d5:
         b1:34:37:56:f9:96:63:d1:cb:6b:eb:73:3d:4d:05:6d:6f:01:
         9c:53:7f:73:24:dd:62:91:78:66:bf:f2:07:e6:05:de:73:b2:
         15:0e:da:e4:28:be:1c:48:34:e3:8c:7c:1c:ae:b6:fb:9f:22:
         6a:ba:ac:8c:ca:57:ed:00:5c:da:67:fa:d0:87:f3:1d:4e:27:
         bf:f6:79:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----