Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/TJ-x749CV1onfAiH5pdDbAFfLdQ.roa
File:                     TJ-x749CV1onfAiH5pdDbAFfLdQ.roa (raw, json)
Hash identifier:          AjDzNLW5xH1DNqkSX8nKFg0RgtOdMUG/vsHv/zON2ew=
Subject key identifier:   4C:9F:B1:EF:8F:42:57:5A:27:7C:08:87:E6:97:43:6C:01:5F:2D:D4
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0884
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/TJ-x749CV1onfAiH5pdDbAFfLdQ.roa
Signing time:             Tue 29 Sep 2020 09:58:50 +0000
ROA not before:           Tue 29 Sep 2020 09:58:50 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9680
IP address blocks:        2001:b000:591::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2180 (0x884)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 29 09:58:50 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4C9FB1EF8F42575A277C0887E697436C015F2DD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:69:2a:d0:4f:66:ea:5e:63:26:83:58:00:44:
                    e6:24:5b:2e:33:55:df:ae:02:9e:89:68:74:e9:dc:
                    8b:8e:88:2e:a1:a8:02:f4:3a:27:17:5b:2a:68:9b:
                    0d:cc:98:60:2b:7d:cc:ea:eb:e5:46:65:5e:d8:f7:
                    86:4d:e4:85:2f:7b:cc:6b:91:b6:ad:d6:bc:95:6b:
                    62:31:bd:18:42:75:1b:7b:e9:5a:d1:82:2c:bb:dc:
                    e8:f0:70:11:e0:55:d6:b2:69:26:64:b8:2d:21:3a:
                    5e:3d:4b:27:a0:13:e5:a0:1f:2a:04:8b:73:f7:45:
                    65:17:a5:cc:8d:15:f8:16:8c:ba:79:dd:9b:fe:1c:
                    5e:b4:46:f7:67:c5:9f:ca:92:5b:1a:74:fd:be:c6:
                    96:09:28:5e:e6:7b:ac:08:1e:60:a5:3f:62:d5:76:
                    10:87:cf:92:be:7b:05:28:37:db:60:d9:cb:76:00:
                    36:11:6a:fc:03:0f:c0:e1:d0:88:55:6e:3d:ad:c0:
                    49:5a:a7:dc:3e:7f:fe:e3:29:3e:7a:da:ab:f0:9b:
                    ee:2a:72:f2:b4:9b:76:25:59:43:80:2c:0c:be:b9:
                    e1:8b:10:75:88:e8:15:f7:d3:1b:17:95:38:86:dd:
                    ac:c7:02:d0:99:a1:53:3b:08:b8:9b:80:f5:4f:83:
                    a8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9F:B1:EF:8F:42:57:5A:27:7C:08:87:E6:97:43:6C:01:5F:2D:D4
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/TJ-x749CV1onfAiH5pdDbAFfLdQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:b000:591::/48

    Signature Algorithm: sha256WithRSAEncryption
         cf:39:d6:1d:e5:f6:c1:1e:11:ac:94:7e:b6:28:ac:9d:9c:4f:
         38:27:c5:6a:e1:99:e8:4f:6f:52:7e:b1:92:15:45:07:1a:54:
         0f:11:17:f5:42:28:85:03:f6:17:b4:a4:a6:7b:92:cb:2c:e4:
         dd:87:a6:5d:1d:07:f6:8c:0e:2a:46:cd:26:67:7d:29:c1:12:
         b1:a2:56:26:05:63:94:f8:56:d4:24:29:73:c0:47:d8:ab:fa:
         8a:38:64:f0:3c:37:6f:ed:49:c2:42:04:85:a7:1e:f0:93:b9:
         04:d1:6c:8d:b5:b7:87:b5:3a:bc:90:ee:13:c6:47:d3:37:25:
         b3:79:fd:a2:fb:06:df:5c:fd:5b:48:9f:c3:b8:7d:24:06:5a:
         bf:53:f1:e6:9a:d8:41:f6:6f:80:03:f6:e5:f1:05:25:18:b2:
         f0:28:58:ca:fc:3b:b4:60:77:5a:8f:42:2f:f1:1d:b9:3d:e4:
         f5:67:19:33:ea:d5:34:d4:05:e6:7a:1c:c3:1f:ac:8f:01:68:
         13:06:0d:fd:b9:4b:55:ca:ca:2b:8e:26:29:c3:24:2e:82:48:
         86:c5:ff:31:7e:ac:2a:fd:a7:fe:57:a3:d1:d4:72:22:f2:29:
         77:19:9b:a9:a0:af:3a:c7:38:5a:7e:4c:d6:31:6b:08:e5:71:
         0a:b9:b2:c5
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICCIQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMDA5Mjkw
OTU4NTBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDRDOUZCMUVGOEY0MjU3
NUEyNzdDMDg4N0U2OTc0MzZDMDE1RjJERDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4aSrQT2bqXmMmg1gAROYkWy4zVd+uAp6JaHTp3IuOiC6hqAL0
OicXWypomw3MmGArfczq6+VGZV7Y94ZN5IUve8xrkbat1ryVa2IxvRhCdRt76VrR
giy73OjwcBHgVdayaSZkuC0hOl49SyegE+WgHyoEi3P3RWUXpcyNFfgWjLp53Zv+
HF60RvdnxZ/KklsadP2+xpYJKF7me6wIHmClP2LVdhCHz5K+ewUoN9tg2ct2ADYR
avwDD8Dh0IhVbj2twElap9w+f/7jKT562qvwm+4qcvK0m3YlWUOALAy+ueGLEHWI
6BX30xsXlTiG3azHAtCZoVM7CLibgPVPg6jrAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUTJ+x749CV1onfAiH5pdDbAFfLdQwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9USi14NzQ5Q1Yxb25mQWlINXBk
RGJBRmZMZFEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAGw
AAWRMA0GCSqGSIb3DQEBCwUAA4IBAQDPOdYd5fbBHhGslH62KKydnE84J8Vq4Zno
T29SfrGSFUUHGlQPERf1QiiFA/YXtKSme5LLLOTdh6ZdHQf2jA4qRs0mZ30pwRKx
olYmBWOU+FbUJClzwEfYq/qKOGTwPDdv7UnCQgSFpx7wk7kE0WyNtbeHtTq8kO4T
xkfTNyWzef2i+wbfXP1bSJ/DuH0kBlq/U/HmmthB9m+AA/bl8QUlGLLwKFjK/Du0
YHdaj0Iv8R25PeT1Zxkz6tU01AXmehzDH6yPAWgTBg39uUtVysorjiYpwyQugkiG
xf8xfqwq/af+V6PR1HIi8il3GZupoK86xzhafkzWMWsI5XEKubLF
-----END CERTIFICATE-----