Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/RXUybmC4V-ZsFAeHvsvHVMHrhAU.roa
File:                     RXUybmC4V-ZsFAeHvsvHVMHrhAU.roa (raw, json)
Hash identifier:          aEXxDxDV+7Lo4j+ulujfId7w4rA/9QJb7v851F8szcs=
Subject key identifier:   45:75:32:6E:60:B8:57:E6:6C:14:07:87:BE:CB:C7:54:C1:EB:84:05
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       084C
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/RXUybmC4V-ZsFAeHvsvHVMHrhAU.roa
Signing time:             Tue 29 Sep 2020 09:58:35 +0000
ROA not before:           Tue 29 Sep 2020 09:58:35 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     3462
IP address blocks:        60.248.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2124 (0x84c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 29 09:58:35 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4575326E60B857E66C140787BECBC754C1EB8405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e6:f2:c8:3a:ce:0b:fb:3f:c2:df:df:20:a6:
                    6e:36:23:5c:c1:bc:6c:bb:9e:4a:de:ed:1c:d5:29:
                    ea:86:c4:98:7f:91:f6:09:8d:10:bb:5f:59:2e:ce:
                    fe:9b:4e:e0:4f:4f:bd:51:2b:d7:9e:b3:4c:0c:d1:
                    c0:62:75:2c:6a:a2:6d:c8:1e:c4:5c:f1:5b:da:26:
                    5a:fb:7e:d8:97:63:8e:c1:b8:7d:ea:91:7e:bc:bb:
                    3f:c2:c6:67:a9:fe:90:40:2a:26:21:92:24:ee:8a:
                    39:95:63:65:90:cb:fb:84:98:08:11:31:b8:d3:71:
                    e3:c6:a3:ea:95:03:3b:ed:8f:39:65:bf:53:6a:c0:
                    bb:a1:7d:a2:57:2a:24:7b:8c:7b:28:57:aa:8c:ce:
                    e0:8c:53:39:c7:7f:a3:ee:ab:1d:d0:6e:46:2a:83:
                    eb:3f:73:bd:14:23:75:5a:02:6c:6b:96:37:3b:39:
                    a2:3e:6b:d9:72:a1:a8:f2:61:f0:79:85:a9:db:0e:
                    37:b8:af:31:a8:f3:4b:cb:ed:36:90:95:21:d2:1b:
                    81:ea:a9:38:31:f7:3c:e8:75:a4:7b:22:39:f4:f3:
                    bf:21:ef:c5:ca:7e:55:c8:d7:e1:98:9d:08:b4:31:
                    1c:3a:83:e5:48:14:28:85:8e:00:42:20:70:7d:3d:
                    be:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:75:32:6E:60:B8:57:E6:6C:14:07:87:BE:CB:C7:54:C1:EB:84:05
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/RXUybmC4V-ZsFAeHvsvHVMHrhAU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.248.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3a:4a:5b:4c:ce:6a:49:a5:9f:4e:e9:c2:6d:bd:da:a0:d1:9b:
         ce:49:64:dc:10:b2:95:5a:d7:68:d4:7e:4e:f8:2c:d6:b7:32:
         9e:40:91:0c:9c:a3:5c:08:49:ad:96:4d:91:ce:54:07:73:a2:
         bf:d6:28:40:50:e6:45:88:0a:0f:8f:23:cd:1c:c1:39:a1:e1:
         2b:be:07:ab:26:00:2b:a0:3f:59:73:d8:5a:32:57:90:d3:ef:
         ca:48:3a:ec:56:29:35:1f:e2:a3:08:3e:da:c9:88:bb:c7:7a:
         95:3f:08:97:ef:b3:71:bf:f6:65:e0:6b:06:7a:30:e4:75:13:
         51:3e:3d:e5:2c:be:ae:16:a4:92:7b:db:85:77:f0:c7:14:c7:
         8f:2d:27:42:54:56:f9:92:c3:4f:15:b5:c0:1f:96:f6:fd:ef:
         ef:30:53:de:3e:5e:ae:56:30:b8:c7:77:c3:3d:24:b6:f0:0d:
         cb:7f:d5:e9:63:5d:e9:b7:9d:1b:d5:1f:f0:83:9d:6a:5d:bf:
         96:81:f7:df:25:09:64:9c:34:d9:2c:7b:27:7c:d4:37:39:f5:
         c8:02:f9:1d:ca:8a:8b:59:34:67:20:22:da:ee:27:ea:3f:ff:
         db:6a:8d:f2:3a:99:4a:d9:ea:e4:22:24:0f:a6:53:1c:53:09:
         66:cd:7f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----