Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/INFORICH/IXnxTYEqBJYZYlW39DxoGECjyFw.roa
File:                     IXnxTYEqBJYZYlW39DxoGECjyFw.roa (raw, json)
Hash identifier:          xTFZeqaD32623P2g2IbFrVP0dS0GL+zgzvH0cc+EXOw=
Subject key identifier:   21:79:F1:4D:81:2A:04:96:19:62:55:B7:F4:3C:68:18:40:A3:C8:5C
Certificate issuer:       /CN=9197E979AFBB1BEC2EFC2647207560561BE900B6
Certificate serial:       0A
Authority key identifier: 91:97:E9:79:AF:BB:1B:EC:2E:FC:26:47:20:75:60:56:1B:E9:00:B6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/kZfpea-7G-wu_CZHIHVgVhvpALY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/IXnxTYEqBJYZYlW39DxoGECjyFw.roa
Signing time:             Fri 18 Sep 2020 09:03:43 +0000
ROA not before:           Fri 18 Sep 2020 09:03:43 +0000
ROA not after:            Thu 22 Jul 2021 06:24:06 +0000
asID:                     131677
IP address blocks:        2406:3a40::/32 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9197E979AFBB1BEC2EFC2647207560561BE900B6
        Validity
            Not Before: Sep 18 09:03:43 2020 GMT
            Not After : Jul 22 06:24:06 2021 GMT
        Subject: CN=2179F14D812A0496196255B7F43C681840A3C85C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4b:cb:b6:b2:e7:8d:c7:32:b8:fd:1f:ce:86:
                    01:b0:1b:aa:b5:ab:41:c2:bd:fb:13:6e:ed:5d:04:
                    12:65:eb:af:51:db:3b:b4:70:cb:85:77:43:8a:e5:
                    a6:e5:fe:77:d0:c5:f3:be:24:3e:18:37:4c:49:a7:
                    81:af:54:4f:11:e4:14:fa:ac:1f:6e:28:6d:d2:d3:
                    db:20:93:bf:3e:7e:92:09:a9:52:04:bd:91:8d:a3:
                    55:f8:05:88:f7:11:19:3b:0d:db:a7:ba:45:70:df:
                    84:2b:54:ae:3f:95:2c:c2:55:19:e5:3d:6b:0c:cc:
                    dc:10:63:a8:30:75:93:17:4d:9c:c1:5f:74:26:4d:
                    59:e9:50:47:ab:60:12:ea:65:b7:c9:a4:15:2c:89:
                    b5:ff:e9:b2:16:b2:fb:12:79:be:43:d7:51:0c:ee:
                    df:cb:cb:41:cc:64:88:b5:8f:4c:d0:03:37:3d:94:
                    ff:0d:5b:46:3d:57:2b:d3:e8:17:55:54:8e:92:93:
                    aa:ad:b1:13:46:a5:33:9d:ba:78:6d:ef:ec:aa:1c:
                    8c:ea:f1:a3:f8:30:e9:83:63:41:ff:22:c2:c2:8c:
                    48:13:90:f7:20:6c:36:60:8c:f1:19:32:31:6a:c8:
                    c2:2b:93:da:96:c3:e8:eb:97:55:f0:fa:a0:f1:90:
                    ac:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:79:F1:4D:81:2A:04:96:19:62:55:B7:F4:3C:68:18:40:A3:C8:5C
            X509v3 Authority Key Identifier:
                keyid:91:97:E9:79:AF:BB:1B:EC:2E:FC:26:47:20:75:60:56:1B:E9:00:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/kZfpea-7G-wu_CZHIHVgVhvpALY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/kZfpea-7G-wu_CZHIHVgVhvpALY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/IXnxTYEqBJYZYlW39DxoGECjyFw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:28:e3:e5:59:c9:64:44:af:e0:73:ea:29:20:d2:c6:60:62:
         6c:82:d0:da:a6:5c:ec:26:65:46:07:43:3f:ee:91:ad:1e:a9:
         37:32:16:db:4d:4d:f3:30:6f:b1:81:72:eb:c2:0c:af:69:60:
         92:77:d6:d8:0e:d0:cd:fa:c0:db:77:23:72:1d:c5:2f:2d:33:
         92:a9:a7:39:42:0c:61:8b:fb:aa:9a:de:6c:5b:98:c2:4c:11:
         d8:8a:f9:98:44:16:3e:82:f9:72:fe:bc:d1:5b:87:2b:34:61:
         1d:10:c1:de:fa:e6:50:65:21:d5:93:93:27:fc:95:d1:49:e2:
         24:69:2b:37:4b:d3:e4:7c:24:49:24:20:98:7b:40:91:1d:db:
         51:bf:ad:1b:2b:3a:35:d1:54:86:ed:71:30:3e:dd:ae:99:32:
         25:42:fd:02:57:aa:d1:bc:f1:d5:43:d1:9d:d0:00:16:9e:19:
         26:fe:7d:b1:bf:89:71:d6:44:43:9d:f4:17:5a:e3:21:9f:6d:
         d7:d2:ca:ea:84:7e:8f:d8:9b:8c:b2:c5:b9:2d:cc:73:bd:1d:
         2d:0e:f2:57:c3:2d:f1:4d:78:78:41:c9:71:a0:c5:69:d8:6c:
         7f:3c:41:40:21:4f:06:c4:c5:6a:d2:b7:fd:aa:84:1a:a9:33:
         d6:d1:4f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----