Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/wpxYfIPSAm0tXN4DgnXn04fjdtA.roa
File:                     wpxYfIPSAm0tXN4DgnXn04fjdtA.roa (raw, json)
Hash identifier:          1/kdVCwzpoZGLqhhbAf9t5Qg9JKO2mFk8RLTN3InlLo=
Subject key identifier:   C2:9C:58:7C:83:D2:02:6D:2D:5C:DE:03:82:75:E7:D3:87:E3:76:D0
Certificate issuer:       /CN=61E0EE79428B85EDABB5F6EB9578EFB19E63C98F
Certificate serial:       0BB7
Authority key identifier: 61:E0:EE:79:42:8B:85:ED:AB:B5:F6:EB:95:78:EF:B1:9E:63:C9:8F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/YeDueUKLhe2rtfbrlXjvsZ5jyY8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/wpxYfIPSAm0tXN4DgnXn04fjdtA.roa
Signing time:             Wed 29 Sep 2021 02:42:17 +0000
ROA not before:           Wed 29 Sep 2021 02:42:17 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     134823
IP address blocks:        2404:a3c0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2999 (0xbb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61E0EE79428B85EDABB5F6EB9578EFB19E63C98F
        Validity
            Not Before: Sep 29 02:42:17 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=C29C587C83D2026D2D5CDE038275E7D387E376D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3b:06:d8:8a:ed:a0:e0:62:6d:6d:fb:d4:f7:
                    0c:bd:72:51:c6:3d:69:ee:8d:ab:07:99:55:bc:a1:
                    c2:d2:6e:e7:54:02:a0:fc:77:03:43:d0:76:53:50:
                    f4:e8:38:53:06:c1:c5:84:ec:33:b9:ac:d8:5e:3b:
                    dd:e4:b7:50:d0:4f:73:34:db:35:f5:cd:82:bf:45:
                    d4:f1:6f:5e:97:c8:9c:69:4f:0c:57:dd:7e:2c:48:
                    0e:77:2b:3e:48:c7:7d:e8:84:32:a2:1c:76:de:c0:
                    bd:14:b1:12:3f:20:27:79:39:71:2c:4a:8b:fd:d3:
                    96:fc:d9:1a:6b:a3:15:67:62:5b:f6:aa:54:bb:8a:
                    e9:df:c6:17:e9:b4:6f:61:3f:24:e6:92:be:af:d1:
                    dc:a6:f0:87:86:65:41:ee:7b:39:02:86:1f:68:cc:
                    39:79:82:ff:2c:40:f7:63:95:36:2b:ad:0d:47:e5:
                    21:d6:15:c6:33:f4:88:03:e5:2e:b2:16:3c:57:6f:
                    40:4a:3e:c4:3f:db:5c:51:dc:dd:e7:f8:67:2c:5b:
                    fb:44:67:e2:f0:da:3a:5f:5a:72:df:b8:64:2f:d6:
                    6f:fc:35:f2:ac:30:47:f2:e0:8c:49:39:85:d1:74:
                    7c:e4:80:01:66:96:90:0a:7e:20:bf:a7:75:31:ba:
                    b0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9C:58:7C:83:D2:02:6D:2D:5C:DE:03:82:75:E7:D3:87:E3:76:D0
            X509v3 Authority Key Identifier:
                keyid:61:E0:EE:79:42:8B:85:ED:AB:B5:F6:EB:95:78:EF:B1:9E:63:C9:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/YeDueUKLhe2rtfbrlXjvsZ5jyY8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YeDueUKLhe2rtfbrlXjvsZ5jyY8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/wpxYfIPSAm0tXN4DgnXn04fjdtA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:a3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:ce:06:c5:78:c8:f5:3d:4a:96:f7:00:8a:30:05:6b:e1:3e:
         76:44:cf:c5:08:66:6a:f3:ee:06:06:28:53:42:c4:de:8b:fa:
         fb:05:0f:6f:71:bc:2c:75:71:bb:19:02:44:0b:e0:32:44:5f:
         ed:4b:07:a9:11:cb:e2:58:47:a0:d6:be:82:26:b2:0e:5d:9a:
         12:25:40:1f:a6:ac:c6:e5:f8:93:86:3b:12:4d:0d:b2:e6:66:
         82:e6:5f:51:a0:f7:1d:41:b8:7b:4f:4d:fc:1e:25:db:40:cc:
         dc:0d:09:34:fe:aa:be:df:9e:87:8b:ab:de:2e:c6:02:19:15:
         f1:fc:28:8a:02:09:cb:f9:ad:bc:66:88:b2:59:d7:ce:fa:1e:
         1b:82:9f:e1:74:93:15:df:a5:0f:cf:bf:f0:e5:0d:25:7f:0f:
         15:79:f4:13:c2:2b:63:c8:ca:cf:4a:33:06:d4:1b:38:dc:7a:
         67:6d:1a:e8:a7:ed:1a:7a:f1:38:a0:9f:76:9c:c9:cb:31:cd:
         65:66:5a:b7:d5:da:f4:ad:9a:db:0a:9f:82:b7:a4:f0:d1:17:
         c9:09:44:86:b2:9e:82:e1:46:a0:35:53:ff:ec:78:a9:e0:00:
         45:d5:69:a4:f0:95:77:de:cd:70:16:48:66:ef:ed:44:1e:c8:
         fe:eb:4c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----