Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/SAIjJr5XYXbk_W9NRq4Hco4KmY0.roa
File:                     SAIjJr5XYXbk_W9NRq4Hco4KmY0.roa (raw, json)
Hash identifier:          K19GoppM0JjVG1oZv94rNN0Gf/QzijnJ3jiSkBhTTQA=
Subject key identifier:   48:02:23:26:BE:57:61:76:E4:FD:6F:4D:46:AE:07:72:8E:0A:99:8D
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       080B
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/SAIjJr5XYXbk_W9NRq4Hco4KmY0.roa
Signing time:             Tue 29 Sep 2020 09:58:15 +0000
ROA not before:           Tue 29 Sep 2020 09:58:15 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     3462
IP address blocks:        210.241.224.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2059 (0x80b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 29 09:58:15 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=48022326BE576176E4FD6F4D46AE07728E0A998D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:58:53:51:02:90:78:a5:f9:7a:a6:34:6f:22:
                    2b:c5:8e:1d:5f:ad:6a:3b:22:5d:8a:44:5a:ea:08:
                    42:d8:f9:ed:df:7a:8d:07:19:61:64:e3:19:fe:a3:
                    0c:b5:07:07:b8:a7:45:8b:91:24:40:66:32:04:07:
                    85:08:42:af:26:e9:01:af:3e:87:56:d3:a5:40:a8:
                    f6:95:bd:c6:ff:e7:8b:c8:3b:0d:a5:b2:d8:51:1b:
                    5e:c3:da:e1:1a:93:6d:e5:50:ce:ef:d5:d6:c2:42:
                    cc:e2:56:50:24:4d:ad:d3:3d:03:20:fb:f8:dc:70:
                    c6:c4:23:ae:c0:65:2b:21:7d:22:65:5a:c3:13:76:
                    20:e0:85:91:7f:e5:f9:d6:a2:8d:f4:ba:b0:88:cc:
                    ce:0c:72:e2:36:a3:d9:4c:d7:36:b7:d6:0e:b5:93:
                    dc:94:cd:ae:32:d7:94:7c:b1:99:04:a2:3c:83:46:
                    2f:73:5f:a2:38:ea:7c:b8:86:11:eb:a0:0d:7b:b3:
                    fc:7b:c3:1d:fe:ac:d8:bb:3e:77:47:d6:11:63:7a:
                    d4:ff:9c:da:1d:f2:c1:44:68:5d:85:f7:9d:cf:38:
                    e8:b9:80:38:21:d7:95:1f:57:ae:b8:86:6c:f8:d9:
                    ee:ae:68:7a:5e:4a:c9:4c:d4:7c:10:c0:01:58:a5:
                    ed:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:02:23:26:BE:57:61:76:E4:FD:6F:4D:46:AE:07:72:8E:0A:99:8D
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/SAIjJr5XYXbk_W9NRq4Hco4KmY0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.241.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d1:11:73:ae:fc:8e:ac:aa:d7:28:3d:f2:20:7b:77:8c:7c:c9:
         5b:ea:97:53:41:80:94:39:fb:bb:7e:e2:fc:ae:a4:95:af:41:
         7a:cf:59:26:77:5c:41:50:83:d0:b4:fa:ee:ee:c0:c1:4c:ed:
         54:d8:c0:5a:d7:cc:bd:84:3f:28:18:65:1d:32:56:6d:26:d4:
         a4:c8:c3:89:3a:9f:0c:d5:b2:55:e7:89:9c:9e:c7:53:e6:67:
         8d:98:46:3a:a8:6e:87:e4:17:c4:14:b4:68:c3:73:90:84:6b:
         2a:ed:a7:4e:aa:ba:91:db:dc:ab:58:0c:d4:48:2a:c6:b7:20:
         60:78:cb:63:52:c5:c2:54:25:35:67:ae:c5:70:59:e9:33:90:
         d6:fd:c3:f6:66:8a:ec:c2:85:c4:de:1e:4f:c6:2e:31:7a:f9:
         41:cb:d7:30:3f:0a:e0:7f:ba:6d:ff:1c:0a:28:7f:1c:a2:17:
         f1:7b:c9:3d:3e:81:10:03:a9:df:13:d4:9b:03:47:8c:bf:ed:
         01:ac:af:2e:12:8c:fd:e0:71:70:41:07:29:0c:ef:56:83:6b:
         4e:ff:1d:e5:8f:2f:11:0a:3c:ca:59:73:b9:42:36:fe:c1:4f:
         ab:7c:06:f5:20:04:45:74:72:07:3d:55:7a:0a:71:be:de:21:
         53:ed:99:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----