Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ITRINET/FC8DmhuSZ6javvfh19aWjzSApVg.roa
File:                     FC8DmhuSZ6javvfh19aWjzSApVg.roa (raw, json)
Hash identifier:          42ECqQtAFOMLcF9VhNCEw0FdvVnn/3kPn0vftC01j+k=
Subject key identifier:   14:2F:03:9A:1B:92:67:A8:DA:BE:F7:E1:D7:D6:96:8F:34:80:A5:58
Certificate issuer:       /CN=2F9BECFFE7DA09CA053A2F9681412B19FB004A74
Certificate serial:       0949
Authority key identifier: 2F:9B:EC:FF:E7:DA:09:CA:05:3A:2F:96:81:41:2B:19:FB:00:4A:74
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/L5vs_-faCcoFOi-WgUErGfsASnQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ITRINET/FC8DmhuSZ6javvfh19aWjzSApVg.roa
Signing time:             Wed 29 Sep 2021 02:52:10 +0000
ROA not before:           Wed 29 Sep 2021 02:52:10 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18422
IP address blocks:        2001:ed8::/32 maxlen: 56

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2377 (0x949)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F9BECFFE7DA09CA053A2F9681412B19FB004A74
        Validity
            Not Before: Sep 29 02:52:10 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=142F039A1B9267A8DABEF7E1D7D6968F3480A558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a7:5d:44:ca:b0:17:3b:ce:7e:df:fb:95:9c:
                    04:b5:eb:0f:65:58:c8:bf:6c:53:a4:85:a9:9c:ad:
                    75:cf:02:23:6e:8c:c5:b1:c7:3a:8b:4d:9f:ab:33:
                    3c:fa:68:6b:cc:59:ca:2a:7d:5a:f9:75:dd:99:f6:
                    ea:93:8f:ae:f7:b9:9d:07:c6:2a:35:34:ee:03:76:
                    79:e0:79:62:7f:38:19:64:97:72:3f:2b:7b:22:6d:
                    eb:7d:4b:6c:0d:22:ab:0a:42:2b:1a:3a:71:33:53:
                    81:99:cc:e2:cf:50:86:39:43:31:15:82:93:f2:d4:
                    aa:fa:78:fe:d1:3f:43:4a:c2:03:30:7a:5e:e3:e1:
                    0d:4d:46:6f:74:17:53:a3:93:0c:02:cd:f3:44:31:
                    95:c3:55:6d:ac:e0:4a:78:82:e2:75:a8:00:ef:46:
                    59:ec:e0:db:00:d2:72:a2:75:5f:2b:e5:84:cc:aa:
                    84:46:54:00:da:28:96:b3:e8:26:36:9e:7d:a8:cc:
                    b1:36:ed:25:67:c9:72:d3:a1:4c:6b:58:26:0d:21:
                    b1:96:a0:72:a9:31:af:bf:9c:91:a4:1c:f5:52:6e:
                    82:db:7f:b3:f0:0d:9b:6b:17:74:17:ee:b5:02:c7:
                    24:78:4f:79:cd:03:2a:c9:dd:71:a7:25:7e:fa:e5:
                    da:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2F:03:9A:1B:92:67:A8:DA:BE:F7:E1:D7:D6:96:8F:34:80:A5:58
            X509v3 Authority Key Identifier:
                keyid:2F:9B:EC:FF:E7:DA:09:CA:05:3A:2F:96:81:41:2B:19:FB:00:4A:74

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ITRINET/L5vs_-faCcoFOi-WgUErGfsASnQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/L5vs_-faCcoFOi-WgUErGfsASnQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ITRINET/FC8DmhuSZ6javvfh19aWjzSApVg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:ed8::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:ed:dc:2c:d4:81:89:4b:8b:2b:25:fe:fa:6b:6b:fd:94:2b:
         a6:e2:6d:b8:02:32:dd:62:f2:a7:40:c6:b1:73:e7:a8:45:32:
         02:86:55:5d:84:9b:7c:49:1c:12:3d:5e:ed:f1:fb:b3:be:06:
         09:4a:e2:4f:54:2e:00:70:e5:44:00:e7:44:00:92:d2:1a:ff:
         b8:fc:d7:a9:c9:87:3e:80:03:71:b7:6a:e2:51:cb:87:62:0a:
         50:79:7e:db:3c:a0:f6:38:51:ac:2b:55:b5:07:1c:b0:39:02:
         bc:b6:d8:18:5e:97:f3:f2:ea:aa:c0:50:20:3b:3a:2b:5d:09:
         31:ba:5a:58:fe:7b:5c:1b:02:e2:d2:4c:d8:84:6f:35:e4:d1:
         90:c3:8a:ca:de:40:26:e5:03:a5:b9:4c:36:35:7d:27:8b:1a:
         70:ed:46:55:4a:7a:b6:8b:de:ce:5d:b2:f8:06:bc:6d:e4:59:
         3d:c0:c9:9b:fa:b3:48:99:00:c4:1a:2f:9c:f9:55:2f:7f:a5:
         8b:f0:4b:db:96:79:f2:57:c6:fb:75:e9:35:33:6c:0f:4d:c4:
         a0:99:43:fc:aa:86:65:6c:37:f4:57:7c:6f:9e:c0:20:02:02:
         45:a8:35:a3:9b:27:fc:44:39:32:66:a9:ea:8a:ed:b3:99:6a:
         b0:c9:01:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----