Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ITRINET/bXE8jW_8_pr_qKSw7Sv7KsNpG9I.roa
File:                     bXE8jW_8_pr_qKSw7Sv7KsNpG9I.roa (raw, json)
Hash identifier:          lGQ/+a6fv1pfqfTzs14d8tNCjVqE2H28MEVe819RyUM=
Subject key identifier:   6D:71:3C:8D:6F:FC:FE:9A:FF:A8:A4:B0:ED:2B:FB:2A:C3:69:1B:D2
Certificate issuer:       /CN=2F9BECFFE7DA09CA053A2F9681412B19FB004A74
Certificate serial:       0770
Authority key identifier: 2F:9B:EC:FF:E7:DA:09:CA:05:3A:2F:96:81:41:2B:19:FB:00:4A:74
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/L5vs_-faCcoFOi-WgUErGfsASnQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ITRINET/bXE8jW_8_pr_qKSw7Sv7KsNpG9I.roa
Signing time:             Tue 29 Sep 2020 09:59:23 +0000
ROA not before:           Tue 29 Sep 2020 09:59:23 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18422
IP address blocks:        61.61.240.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1904 (0x770)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F9BECFFE7DA09CA053A2F9681412B19FB004A74
        Validity
            Not Before: Sep 29 09:59:23 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6D713C8D6FFCFE9AFFA8A4B0ED2BFB2AC3691BD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bc:16:3f:ed:6b:0b:7b:17:6d:67:f3:6f:d1:
                    9c:5e:3a:f0:13:10:77:64:18:2d:17:32:08:2f:41:
                    fe:04:7d:1e:8e:c8:dd:5e:83:63:ec:6c:e8:ff:eb:
                    34:3c:9d:3e:f8:44:06:d5:9d:91:15:65:9e:cf:48:
                    06:6a:e1:9e:ed:4f:33:4b:2e:0c:67:18:4b:9c:da:
                    a1:bd:79:85:47:79:57:c4:b1:9c:86:c2:56:45:07:
                    cb:da:55:0f:44:94:92:d3:bf:a7:06:07:b5:b6:1c:
                    cf:16:cd:8f:1e:e7:b9:24:8b:0b:53:95:cf:93:1e:
                    5f:b0:44:4f:54:47:ac:bf:f1:27:fe:67:0d:ed:91:
                    b8:21:3f:ce:0d:aa:02:cd:9a:34:c1:c9:b7:ae:51:
                    84:71:fc:f4:e8:96:02:da:62:7a:f5:87:ef:f7:62:
                    c9:9f:00:08:3e:b5:3f:2f:57:25:1d:12:1a:0e:09:
                    36:23:7a:c5:42:12:28:a8:f0:71:7f:aa:0c:f5:ff:
                    6d:34:31:f5:7f:e8:d6:a2:a3:25:86:9b:24:c1:f1:
                    7f:fe:67:55:dc:10:17:61:65:ed:72:93:5c:41:a3:
                    27:e1:6d:66:36:6d:fa:d0:b7:73:34:d9:8b:89:25:
                    38:21:1d:73:70:9d:09:0d:98:46:c3:ba:b8:4b:6b:
                    e1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:71:3C:8D:6F:FC:FE:9A:FF:A8:A4:B0:ED:2B:FB:2A:C3:69:1B:D2
            X509v3 Authority Key Identifier:
                keyid:2F:9B:EC:FF:E7:DA:09:CA:05:3A:2F:96:81:41:2B:19:FB:00:4A:74

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ITRINET/L5vs_-faCcoFOi-WgUErGfsASnQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/L5vs_-faCcoFOi-WgUErGfsASnQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ITRINET/bXE8jW_8_pr_qKSw7Sv7KsNpG9I.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.61.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         92:0e:e5:db:65:d6:aa:96:d8:66:a3:84:4c:80:16:bd:90:05:
         6a:94:d9:a0:97:11:53:ec:37:68:ab:c2:50:71:08:75:79:b4:
         d2:b3:62:aa:c8:c3:a8:a6:43:d9:89:1a:fd:76:3d:7b:5d:c0:
         36:52:dc:9e:6e:57:fd:c9:f4:0a:83:a5:24:cc:78:bc:0d:dc:
         d3:ae:ba:3a:7d:3e:83:2d:b4:6f:1d:c8:40:23:dd:b5:5f:53:
         ca:2b:84:33:d9:a3:c8:a3:f9:2c:77:e9:9b:f7:cf:66:04:ef:
         b3:30:68:2b:4c:20:67:d3:73:24:72:cd:4a:51:e7:8e:d5:f1:
         17:9f:ab:ef:ee:27:c5:09:78:22:68:88:23:4a:2e:da:e7:52:
         cf:cb:6b:3e:99:98:59:1f:9c:62:38:07:0b:58:e2:a1:94:8e:
         6d:32:4d:31:69:d0:9f:06:e8:b0:87:ce:b6:05:97:0c:c1:92:
         91:dc:98:7d:a3:92:21:9d:52:5d:c9:58:0e:31:79:f3:7b:e3:
         17:0d:e3:6c:80:07:8c:4f:d3:32:4b:e4:f7:b0:cf:d0:06:a8:
         b2:16:97:08:10:30:89:dd:2a:55:dc:89:a0:0a:f9:96:2c:d6:
         d0:4f:ca:ae:62:17:1f:23:2a:51:ea:55:c0:a8:01:d7:a0:10:
         ac:c8:51:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----