Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/qG_YEKchldHfSy183_JZUc2WkYg.roa
File:                     qG_YEKchldHfSy183_JZUc2WkYg.roa (raw, json)
Hash identifier:          QtbkgwaB0Az2WzEzvTZDo1ExcwiWX1a9Fg1CI+ygrzg=
Subject key identifier:   A8:6F:D8:10:A7:21:95:D1:DF:4B:2D:7C:DF:F2:59:51:CD:96:91:88
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       085E
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/qG_YEKchldHfSy183_JZUc2WkYg.roa
Signing time:             Tue 29 Sep 2020 09:58:40 +0000
ROA not before:           Tue 29 Sep 2020 09:58:40 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     3462
IP address blocks:        61.217.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2142 (0x85e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 29 09:58:40 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A86FD810A72195D1DF4B2D7CDFF25951CD969188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:21:a0:f1:3d:83:d7:f7:ad:b7:47:32:88:99:
                    56:f4:b9:09:5e:d1:d9:ac:89:16:b1:23:f0:9b:11:
                    c5:23:13:4f:c4:f8:f0:79:50:73:c2:b3:15:10:89:
                    49:4a:71:92:fa:0c:2f:1c:8b:27:23:c0:dc:3e:36:
                    31:fc:1f:0d:76:ed:5a:f1:99:dd:1a:16:7b:a8:78:
                    3a:5c:89:80:17:da:63:ae:48:c1:28:8c:06:e2:13:
                    ce:60:a0:f5:56:00:75:dd:92:21:03:a4:ee:e9:bb:
                    7e:5e:af:a5:08:79:78:83:36:9d:54:93:c1:3e:d5:
                    d6:ab:55:25:f2:09:39:9f:42:20:bb:60:29:c7:70:
                    33:c2:b8:5d:5d:56:b2:a1:b4:4c:2e:53:37:5f:37:
                    32:b4:c9:49:0a:46:54:15:30:62:0d:e0:7e:0d:68:
                    32:dd:3d:a1:99:df:3f:1c:eb:4a:f9:d9:a0:a6:67:
                    49:b3:9f:00:37:fc:c0:72:a4:53:bb:39:14:e7:ce:
                    12:eb:e8:e3:23:aa:5a:75:fa:c2:e0:09:13:1b:0e:
                    c5:48:80:ab:5f:bf:3a:f6:ca:73:50:10:a1:64:37:
                    55:3d:a9:37:39:ee:5b:5d:7a:11:8b:be:59:fc:39:
                    ab:e3:b0:5d:e2:1e:b9:44:52:77:91:2a:e8:67:9c:
                    e2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6F:D8:10:A7:21:95:D1:DF:4B:2D:7C:DF:F2:59:51:CD:96:91:88
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/qG_YEKchldHfSy183_JZUc2WkYg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.217.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4a:6f:94:c3:fd:2c:48:d6:ff:3d:42:54:b0:b8:61:2e:4f:81:
         a9:7b:40:0c:66:dd:bf:f2:ae:5b:3d:61:85:6d:4e:37:47:9d:
         f8:dd:3c:8e:27:c2:f1:d7:e9:20:e6:92:0a:ae:ef:92:67:7a:
         de:a0:18:87:ae:91:55:b9:9d:da:e0:b7:72:7e:8f:9c:ef:e1:
         31:e6:0e:2b:52:df:32:54:0e:db:26:5a:98:fe:24:a4:01:f6:
         b0:cd:a9:da:86:50:5b:65:8e:02:94:aa:ed:54:74:1d:4c:8e:
         4f:4f:95:78:96:f4:68:25:7e:25:80:e9:30:45:0f:dd:c6:62:
         bf:49:a9:53:8b:36:42:0c:6d:86:ec:cb:7a:53:1a:f4:e8:c1:
         fb:01:f2:63:1c:37:19:96:13:a9:8e:e8:de:a4:7d:ba:35:26:
         9d:9a:e4:fe:e0:0f:67:93:36:10:b7:4b:96:d2:fb:91:c6:bb:
         b8:4f:d8:72:60:f4:21:8d:e6:5e:85:b0:fb:4c:20:ca:b5:64:
         74:d4:cd:a2:01:69:7e:7b:b6:7a:3a:97:1d:09:f0:d1:9c:60:
         92:30:75:e6:a6:33:16:d2:e2:c0:f4:50:62:12:a8:06:fd:27:
         2c:25:27:ae:cf:f5:0e:89:9a:2e:3f:8d:61:d7:02:67:10:2d:
         ca:77:63:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----