Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/6N_KDUB7HwlAiqnfvzC2RB6QBsc.roa
File:                     6N_KDUB7HwlAiqnfvzC2RB6QBsc.roa (raw, json)
Hash identifier:          cbAhSq5cBfldD4Z8t27f8oqZIXkbXhb7/99uk+QQDeY=
Subject key identifier:   E8:DF:CA:0D:40:7B:1F:09:40:8A:A9:DF:BF:30:B6:44:1E:90:06:C7
Certificate issuer:       /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial:       0796
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/6N_KDUB7HwlAiqnfvzC2RB6QBsc.roa
Signing time:             Tue 29 Sep 2020 09:59:44 +0000
ROA not before:           Tue 29 Sep 2020 09:59:44 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        61.61.128.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1942 (0x796)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
        Validity
            Not Before: Sep 29 09:59:44 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E8DFCA0D407B1F09408AA9DFBF30B6441E9006C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:49:6a:59:24:d2:5b:37:d6:ec:a3:b9:7c:90:
                    89:a9:43:32:4f:10:fe:de:f6:fa:d0:98:50:77:65:
                    0c:fe:b1:82:7c:b1:5d:4a:86:4c:aa:3c:d6:62:4c:
                    02:d1:c2:6d:36:a6:da:05:6f:aa:ee:e9:b4:01:24:
                    ba:5d:cc:5f:86:b1:f8:8b:ed:c0:f8:b9:de:34:c5:
                    9c:83:77:28:0f:bf:69:3b:89:2d:5f:d2:cb:9e:97:
                    38:c6:b2:5f:4b:10:fc:79:2a:13:3a:64:6a:68:5e:
                    69:51:d9:65:e2:47:c0:76:c8:69:ae:a6:26:d1:2b:
                    33:d2:8d:27:c2:3e:dc:46:a7:8e:fc:0b:2a:75:33:
                    a8:c5:7e:fa:fb:26:a8:76:37:7f:67:a5:a6:45:bf:
                    1d:60:25:98:62:f2:e0:c8:86:c2:07:55:ff:4e:64:
                    85:b7:74:26:fd:0b:ab:cf:4d:05:86:08:6f:14:a6:
                    56:09:34:87:7b:11:78:43:34:52:16:de:7f:e5:e1:
                    42:e3:0d:40:13:c6:27:15:16:3d:b4:38:75:d1:ef:
                    b5:80:35:41:d1:96:cf:2d:5f:77:1d:9f:e8:e2:b0:
                    ad:bb:83:66:7a:e5:e1:5f:1b:69:ff:7d:39:1f:c6:
                    01:56:eb:8e:7f:55:67:5f:d9:29:9b:13:4d:0f:91:
                    e1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DF:CA:0D:40:7B:1F:09:40:8A:A9:DF:BF:30:B6:44:1E:90:06:C7
            X509v3 Authority Key Identifier:
                keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/6N_KDUB7HwlAiqnfvzC2RB6QBsc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.61.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         71:a3:cc:04:b2:d4:2f:20:55:93:0d:bc:de:3a:e8:20:eb:d2:
         6d:d5:88:1f:c4:d4:16:b7:82:82:89:21:d7:25:88:62:64:99:
         54:c2:11:47:52:8b:82:99:db:fa:2c:47:0b:db:e2:16:9a:7e:
         d5:cc:90:22:e8:34:78:55:e0:44:51:47:d2:32:f0:7f:16:ed:
         78:7f:df:d2:0f:24:79:ed:04:92:cf:8e:3c:67:92:82:0c:c6:
         31:88:14:60:0b:e7:91:13:c7:b5:23:c5:e5:ce:7b:48:ba:7d:
         34:e0:1e:d2:e8:5f:6b:c7:f2:ef:2c:11:84:9c:e1:c8:c2:9c:
         75:bb:38:6c:e6:ab:34:d0:95:19:cf:97:67:c5:00:dd:c9:4d:
         23:a3:0a:7a:eb:01:6f:bf:b8:2d:ae:e0:7f:ca:17:d2:b5:b6:
         09:96:d2:e0:6c:ab:29:5f:24:4e:56:13:08:43:6d:20:57:64:
         b5:f1:f6:43:c0:d6:21:d5:40:a2:eb:13:aa:38:b6:1a:9d:50:
         bc:ae:fd:44:11:19:c1:c7:f6:26:d1:37:e8:02:11:b1:59:63:
         64:61:82:70:a1:4a:7b:3f:72:bd:aa:9f:ca:de:22:0f:2e:99:
         51:41:85:da:52:d1:7d:6d:b3:99:7c:0d:86:c2:5d:15:7c:f4:
         39:0e:aa:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----