Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKCO/_rErOE5JVTDbRGgH2tnQ9IhNpoI.roa
File:                     _rErOE5JVTDbRGgH2tnQ9IhNpoI.roa (raw, json)
Hash identifier:          zTeDrg5HibtHhmA/KXPR3R1500wQbCNWvC96gIIRnMo=
Subject key identifier:   FE:B1:2B:38:4E:49:55:30:DB:44:68:07:DA:D9:D0:F4:88:4D:A6:82
Certificate issuer:       /CN=828BD19EFA8EBE59EF407BB7FAB6898F754C7EC1
Certificate serial:       0AFC
Authority key identifier: 82:8B:D1:9E:FA:8E:BE:59:EF:40:7B:B7:FA:B6:89:8F:75:4C:7E:C1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/govRnvqOvlnvQHu3-raJj3VMfsE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/_rErOE5JVTDbRGgH2tnQ9IhNpoI.roa
Signing time:             Tue 29 Sep 2020 10:04:38 +0000
ROA not before:           Tue 29 Sep 2020 10:04:38 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131645
IP address blocks:        2404:63c0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2812 (0xafc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=828BD19EFA8EBE59EF407BB7FAB6898F754C7EC1
        Validity
            Not Before: Sep 29 10:04:38 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=FEB12B384E495530DB446807DAD9D0F4884DA682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:89:f7:8a:46:ec:8a:03:47:8b:1b:49:34:3e:
                    89:5b:66:8d:96:ad:47:63:90:bd:75:0e:67:76:2c:
                    ae:29:fd:88:09:27:ee:43:9b:b9:a2:3a:12:2e:1f:
                    6a:1d:3f:cf:8c:18:1b:4b:1e:9d:97:79:df:98:18:
                    4e:9c:b4:95:ae:7c:1b:f4:a7:0f:8d:13:58:10:69:
                    d1:61:ff:0e:0f:68:66:24:13:f3:71:b7:ed:bc:14:
                    55:88:7a:45:52:3d:a9:c1:51:2a:a5:af:e7:1a:bf:
                    e0:7f:d1:8d:22:3e:76:a1:11:d4:53:48:61:8a:20:
                    a9:d0:3a:b0:2d:4e:14:94:4c:3e:fa:8c:52:0e:eb:
                    fe:29:1c:95:48:85:be:52:b1:2c:7f:26:17:ed:51:
                    84:4b:04:c2:86:07:96:5d:7c:c3:b0:f4:7e:2a:0a:
                    6d:5d:ee:68:69:54:69:66:1a:e8:34:76:34:f1:af:
                    0d:04:2e:1a:63:28:75:58:29:2d:73:a3:48:af:12:
                    5f:0d:c1:95:52:60:55:11:01:31:da:60:02:66:5e:
                    9d:8c:a3:46:6f:60:94:09:97:d9:dd:8c:74:2e:2f:
                    64:e3:2e:47:70:88:f9:b6:e2:fb:5c:7a:43:36:96:
                    e8:56:7f:85:1d:79:04:50:69:37:1a:49:59:a8:80:
                    cb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B1:2B:38:4E:49:55:30:DB:44:68:07:DA:D9:D0:F4:88:4D:A6:82
            X509v3 Authority Key Identifier:
                keyid:82:8B:D1:9E:FA:8E:BE:59:EF:40:7B:B7:FA:B6:89:8F:75:4C:7E:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/govRnvqOvlnvQHu3-raJj3VMfsE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/govRnvqOvlnvQHu3-raJj3VMfsE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKCO/_rErOE5JVTDbRGgH2tnQ9IhNpoI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:63c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:0f:9a:9f:3e:75:ec:28:fd:21:61:2e:eb:3f:e7:bb:f7:85:
         00:30:b0:a8:f2:76:42:ad:b1:dc:54:03:5d:61:9d:98:bc:d1:
         59:5d:db:37:0d:bf:04:3a:0b:f8:31:eb:a2:75:aa:bb:de:d3:
         36:63:74:1d:a7:42:e4:cf:9d:ef:1a:80:49:91:81:a0:28:3f:
         4d:db:6e:e0:ee:5d:c7:b7:28:99:89:da:da:d7:66:21:91:15:
         4c:7a:44:be:be:70:6e:23:b1:f6:64:20:3e:eb:a4:70:56:5c:
         c2:29:36:5c:ef:d6:72:cf:f2:ec:a2:13:c6:2d:cf:bc:9d:0a:
         a2:d0:50:77:c4:3d:a0:e5:c0:d7:22:d0:cd:b3:1b:fc:38:d9:
         6d:26:e7:cd:b8:ac:4e:7b:03:90:e3:ec:58:06:96:dd:c0:a6:
         4d:9c:19:48:3d:1c:58:2c:6c:6b:f6:db:ef:08:c3:4e:7f:76:
         43:a8:80:a5:0e:85:b6:83:9d:f7:3c:8c:d3:08:82:d0:ec:b8:
         8a:88:bb:91:6a:2b:ea:bf:fc:24:13:48:b5:ab:76:19:d3:ff:
         25:50:70:44:da:a8:12:7b:67:df:16:56:94:b0:fb:67:17:c8:
         fa:f9:83:8e:70:f7:3d:a3:22:be:23:fe:75:32:90:f2:b2:a8:
         bd:13:2a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----