Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/earsNFvJsTI4UCFV075CgWcJP4Y.roa
File:                     earsNFvJsTI4UCFV075CgWcJP4Y.roa (raw, json)
Hash identifier:          ZiZbzm/uZ1lm/EpeYqTjGLUlRDXBdAfwDEtg6R2V9iY=
Subject key identifier:   79:AA:EC:34:5B:C9:B1:32:38:50:21:55:D3:BE:42:81:67:09:3F:86
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0831
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/earsNFvJsTI4UCFV075CgWcJP4Y.roa
Signing time:             Tue 29 Sep 2020 09:58:27 +0000
ROA not before:           Tue 29 Sep 2020 09:58:27 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     54994
IP address blocks:        61.221.181.128/25 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2097 (0x831)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 29 09:58:27 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=79AAEC345BC9B13238502155D3BE428167093F86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:76:d8:66:41:8e:df:df:26:ce:4c:28:35:ef:
                    b4:62:f8:6e:08:52:2b:5e:df:5c:70:13:6b:25:f1:
                    62:9d:69:c0:5f:50:ef:91:0e:20:ac:ba:c8:d4:08:
                    de:c3:aa:e8:f9:c8:bf:d6:4e:88:0b:c2:3b:b7:2a:
                    ce:49:57:57:d1:33:06:c0:26:8b:61:77:97:c6:78:
                    db:9d:3d:c5:78:35:de:86:98:2b:d9:53:df:57:7e:
                    95:cd:0a:0d:6b:21:3f:79:27:10:2e:58:5b:19:76:
                    cd:93:df:99:2d:7d:cf:84:19:07:26:a7:85:e3:f5:
                    69:51:8d:1a:02:f8:32:9f:88:7a:84:4b:5b:f6:90:
                    c9:8f:6a:c8:db:69:a8:af:ea:57:b8:dd:8e:36:0a:
                    d2:57:15:47:60:41:22:93:30:3b:d7:8f:74:ea:7f:
                    7c:b4:9e:49:f8:3d:5f:79:50:e3:f5:c8:6c:74:cf:
                    79:eb:dc:2f:8d:02:3d:af:63:d2:35:c2:f6:95:12:
                    de:e8:ae:32:aa:b2:35:59:bf:49:f7:bb:80:15:bc:
                    da:d2:3b:5b:c0:e0:9a:a7:0a:3c:f3:be:9a:02:b1:
                    07:28:40:c6:c6:09:24:ec:07:c1:96:64:4d:71:44:
                    7e:2b:6e:c7:8f:ff:89:c5:92:07:24:1c:48:31:63:
                    18:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AA:EC:34:5B:C9:B1:32:38:50:21:55:D3:BE:42:81:67:09:3F:86
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/earsNFvJsTI4UCFV075CgWcJP4Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.221.181.128/25

    Signature Algorithm: sha256WithRSAEncryption
         a0:36:40:be:be:2c:4b:54:e7:30:72:44:09:0e:d4:c9:ae:6e:
         0d:0d:6f:af:50:13:97:0a:04:03:80:63:c2:26:47:92:44:89:
         9a:ba:ae:88:07:f2:0a:fa:6f:aa:61:51:1d:d2:06:d0:ee:65:
         56:39:02:27:32:3b:8d:f6:f8:97:c9:3d:8b:ad:26:e0:14:3a:
         eb:81:14:ac:7a:16:c7:ba:13:90:2e:ff:1e:1c:b9:3a:bb:b6:
         35:ed:2f:a1:6d:31:33:37:85:db:4c:1e:c3:3f:a5:0d:d8:8b:
         dc:e4:22:d3:37:61:18:7f:b7:9a:fb:63:86:12:30:78:0e:fb:
         7f:e8:02:17:9e:19:72:23:bb:fd:fb:98:cd:3e:d0:56:19:b9:
         d1:88:a4:5a:e3:e7:e3:b4:07:8b:d3:f5:ab:a2:a0:85:57:cb:
         53:38:b5:f1:93:94:de:b9:cc:5f:c7:f1:c5:df:c6:75:dc:94:
         7d:7c:d4:9c:0c:cf:6c:5c:d8:90:db:af:44:87:a0:fa:06:47:
         19:24:92:60:69:00:04:af:dd:05:dc:88:ca:db:e1:72:e4:7c:
         2d:af:46:59:5a:d2:d2:5a:2d:8b:a1:6e:ab:75:cb:ea:33:00:
         13:34:bf:42:b4:0f:f8:1d:c6:94:c7:92:df:3e:99:6f:06:8a:
         08:e1:93:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----