Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/NoZ6i4HluTHulrZa2jXncQEfcU0.roa
File:                     NoZ6i4HluTHulrZa2jXncQEfcU0.roa (raw, json)
Hash identifier:          /M+g7sbMTBMu0o3yXFw1ou7gogfvBnsjVHSnJir6jg4=
Subject key identifier:   36:86:7A:8B:81:E5:B9:31:EE:96:B6:5A:DA:35:E7:71:01:1F:71:4D
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0C0C
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/NoZ6i4HluTHulrZa2jXncQEfcU0.roa
Signing time:             Wed 29 Sep 2021 02:50:48 +0000
ROA not before:           Wed 29 Sep 2021 02:50:48 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     3462
IP address blocks:        114.24.0.0/14 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3084 (0xc0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 29 02:50:48 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=36867A8B81E5B931EE96B65ADA35E771011F714D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a9:c5:cf:af:b1:c0:1a:d6:c5:6b:96:a8:4f:
                    59:77:a6:5b:a1:92:33:a2:fd:03:ce:4d:e5:3e:11:
                    ab:60:58:90:57:66:ac:73:93:1b:01:b0:6b:47:1f:
                    21:8d:83:5e:b5:17:4c:b1:f4:07:4b:3e:e4:95:1d:
                    96:f2:7d:16:fb:94:87:34:a8:18:eb:f5:61:74:df:
                    9b:db:fd:1f:50:fa:a3:1c:8f:de:ce:cb:d7:b0:ef:
                    b5:76:84:63:fa:6e:59:68:01:36:dd:7a:11:b0:b8:
                    b9:d0:ca:e3:78:0e:c1:d7:fd:51:44:87:39:2d:52:
                    dd:8e:0d:11:b0:a5:79:be:59:44:91:67:d6:5f:38:
                    3c:c5:f7:8c:d5:6f:6b:6a:ad:be:a6:3d:44:16:c1:
                    d1:b9:05:16:c6:78:f2:7b:bd:7e:f2:cd:f4:c4:4d:
                    d0:ed:43:23:e2:28:fd:4b:d6:18:bd:c8:04:4e:21:
                    54:ca:56:f5:94:95:21:9a:c9:a4:8c:60:b7:88:10:
                    b5:89:00:0f:56:1e:56:30:45:de:f2:14:6a:05:14:
                    01:fe:64:f3:31:a9:38:87:72:80:ef:48:cf:1b:9a:
                    3a:c3:39:23:2a:3e:a3:27:2a:8a:7a:a1:fe:e2:8e:
                    88:66:d6:63:e0:a5:b9:e0:ed:6d:35:8e:6f:f6:75:
                    f7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:86:7A:8B:81:E5:B9:31:EE:96:B6:5A:DA:35:E7:71:01:1F:71:4D
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/NoZ6i4HluTHulrZa2jXncQEfcU0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.24.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         a0:30:0c:14:97:47:1e:e9:80:99:5e:82:08:17:85:ff:90:99:
         14:bb:2e:16:5c:07:7b:ea:99:10:6e:61:6c:54:16:c6:38:b3:
         1a:91:91:05:48:7c:27:3a:ea:2d:9a:1f:01:8b:1a:89:8b:d6:
         55:22:bd:7a:8f:f6:93:3c:d9:53:b3:a5:a3:66:d9:a7:79:97:
         f8:20:6b:6a:fc:d2:5d:96:99:91:1b:aa:26:93:1a:76:04:2f:
         b3:8a:f7:e8:cd:5b:e5:13:35:58:6e:67:1c:8e:c3:14:3b:ca:
         dc:a2:47:f5:34:5a:cf:2f:e8:94:6a:2b:f2:aa:f6:cb:9f:ae:
         03:3b:f1:d6:91:48:54:c1:cc:aa:da:a7:2b:23:e4:a5:44:86:
         82:3c:77:da:35:22:2d:34:da:31:1a:92:02:31:16:91:dd:52:
         b8:c2:c8:50:41:55:3b:7c:9a:c8:9d:b9:3a:89:5f:c7:38:5d:
         28:7a:d9:c3:04:f9:94:f5:87:2e:ad:de:30:bb:7f:1a:e6:53:
         25:52:43:cd:56:50:d3:58:b7:55:ae:2b:b5:65:b3:39:c6:10:
         e4:e0:a3:cb:1a:1a:9e:4b:1b:ce:af:82:a2:a0:51:48:67:b2:
         d9:56:fb:3a:97:a5:7c:75:96:45:f0:ca:e1:12:30:64:0e:8f:
         6a:59:a9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----