Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/krpR_v3j_RI4qZJVtCw4w3Tkbzo.roa
File:                     krpR_v3j_RI4qZJVtCw4w3Tkbzo.roa (raw, json)
Hash identifier:          gRkJlYz6lBbDfP4iyWz/0Dw3X7h6yC4izhfFaXVCwUM=
Subject key identifier:   92:BA:51:FE:FD:E3:FD:12:38:A9:92:55:B4:2C:38:C3:74:E4:6F:3A
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0C4C
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/krpR_v3j_RI4qZJVtCw4w3Tkbzo.roa
Signing time:             Wed 29 Sep 2021 02:51:07 +0000
ROA not before:           Wed 29 Sep 2021 02:51:07 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     21859
IP address blocks:        210.61.104.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3148 (0xc4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 29 02:51:07 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=92BA51FEFDE3FD1238A99255B42C38C374E46F3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c1:76:80:b5:06:c1:51:ee:4f:12:25:d9:f6:
                    d3:a7:a1:c9:e7:3f:5b:0e:89:08:c7:fb:bc:42:22:
                    ee:4e:d1:f8:8f:68:7e:28:c7:4c:a3:03:47:eb:f1:
                    ea:48:17:ec:3c:1b:48:a9:f4:d4:e8:4a:b7:5d:88:
                    53:04:6f:41:6a:94:3d:cd:db:0d:a7:64:e6:f6:40:
                    72:57:b8:89:1b:10:8f:7a:29:99:6c:9e:38:5f:0f:
                    d0:98:88:dd:42:67:b5:f7:2b:71:0a:81:bf:fd:01:
                    88:7b:d7:58:40:56:b4:d5:52:f4:be:31:39:cb:03:
                    d5:bb:76:e2:6f:6a:b5:ab:15:9f:0c:07:d8:74:66:
                    9d:34:e9:d2:67:d7:41:4a:38:f9:45:a8:31:2b:f4:
                    a4:8a:3c:3f:c7:f8:8f:09:b5:a0:27:6a:c9:8d:55:
                    51:37:06:02:1e:69:d3:b8:c1:9d:cb:84:36:c5:91:
                    3d:58:fc:80:18:65:ae:ed:6f:4e:e6:18:0a:0d:ba:
                    1e:51:21:fd:10:15:e1:99:72:f1:de:4c:da:cd:ab:
                    3b:65:8f:d7:ce:47:61:0c:b6:6b:1d:98:84:c2:58:
                    05:39:63:4b:45:d9:fb:fc:6a:1f:61:46:a1:66:27:
                    e8:67:dd:8a:34:e6:5d:5e:03:7e:15:55:9a:a8:65:
                    11:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:BA:51:FE:FD:E3:FD:12:38:A9:92:55:B4:2C:38:C3:74:E4:6F:3A
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/krpR_v3j_RI4qZJVtCw4w3Tkbzo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.61.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:a0:8c:79:77:33:2a:b8:c2:eb:71:b8:78:19:7f:6c:b7:59:
         b4:ce:40:19:4a:7f:37:03:4e:97:ff:d5:c7:99:5f:dc:03:73:
         69:1f:f6:a5:e5:12:e1:44:09:20:6d:3c:3f:b4:c6:65:69:c7:
         2d:db:34:e1:c2:83:e4:05:b2:94:6c:dc:15:f4:f9:fd:19:4e:
         69:eb:f4:2b:89:56:cf:91:1d:93:99:4b:de:f7:ac:67:17:a4:
         b3:4c:44:37:85:9c:e1:55:63:20:3a:ec:7b:cf:65:bc:e5:b1:
         90:54:b6:0a:7f:9a:1e:7d:e0:83:e5:09:be:ca:51:d3:14:e3:
         85:9b:d2:65:ea:72:46:be:ef:22:20:98:69:1c:b8:28:28:d3:
         a5:22:6e:1b:9c:d0:e0:4f:16:40:bd:9a:42:21:a0:9e:0f:8f:
         97:e8:cd:4c:82:1b:a7:12:ce:07:f6:01:db:97:15:d6:d1:ca:
         c8:a8:f4:78:f2:bf:f8:62:20:24:c8:76:90:e6:bc:3f:6c:59:
         5f:b3:71:aa:c1:09:09:b4:51:e4:b5:73:18:b7:b5:cf:b6:52:
         94:ba:2d:54:87:98:02:3b:62:89:2c:aa:4f:02:23:68:ae:9c:
         d2:46:fa:20:8d:ed:21:3b:25:88:e3:3c:fd:b8:c6:37:e3:56:
         7b:ed:41:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----