Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/c0aoOEu0JcH2rVuwbqhMVSNrKEM.roa
File:                     c0aoOEu0JcH2rVuwbqhMVSNrKEM.roa (raw, json)
Hash identifier:          FvyJ6IKKC04DI/zpiTmcVUKimFHcvOHQGPfz5U4pvVg=
Subject key identifier:   73:46:A8:38:4B:B4:25:C1:F6:AD:5B:B0:6E:A8:4C:55:23:6B:28:43
Certificate issuer:       /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial:       03F2
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/c0aoOEu0JcH2rVuwbqhMVSNrKEM.roa
Signing time:             Wed 29 Sep 2021 02:37:48 +0000
ROA not before:           Wed 29 Sep 2021 02:37:48 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     17415
IP address blocks:        2406:3540::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1010 (0x3f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
        Validity
            Not Before: Sep 29 02:37:48 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=7346A8384BB425C1F6AD5BB06EA84C55236B2843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ee:e7:6c:67:6e:67:c6:bd:53:d8:6c:ca:f2:
                    3a:1c:7d:42:fa:7d:d5:fb:41:d8:d9:f6:6f:90:4a:
                    b8:a1:58:46:35:ed:57:eb:23:2d:30:fb:1c:4f:53:
                    26:bc:6c:6f:aa:5c:88:0a:1e:18:5a:17:a2:f8:cf:
                    bb:bc:68:d4:2a:da:d3:47:a2:73:fa:e9:fa:1c:65:
                    f1:09:20:b5:76:9a:be:6b:ae:cd:b9:a4:9c:52:69:
                    05:f0:19:7a:aa:fd:5e:7b:48:95:04:83:5d:ec:81:
                    d0:22:61:35:b7:34:2d:95:e8:3b:76:ae:52:e4:42:
                    c1:2f:f2:f4:60:84:d3:c0:ab:88:b0:b1:f6:66:cd:
                    32:42:b2:9a:1a:6b:4d:34:f6:40:63:3f:52:b9:b0:
                    87:62:0a:91:20:ee:49:97:69:7e:c6:74:88:6e:80:
                    0e:c3:9e:f3:e7:67:41:3b:0e:37:48:20:d7:e7:c5:
                    dc:c2:1e:58:a4:1f:2d:f8:fd:2a:23:40:d5:e5:9d:
                    d4:54:9b:49:b2:52:86:a8:a8:47:20:34:42:9c:6c:
                    1a:3f:c3:2a:cc:ef:74:69:e0:82:64:b5:5d:12:b3:
                    23:83:01:3c:85:65:b5:b2:9a:c1:a3:c1:4c:a4:dd:
                    bd:b1:b6:26:c2:f5:e0:1c:86:2e:0d:7b:73:ca:ad:
                    56:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:46:A8:38:4B:B4:25:C1:F6:AD:5B:B0:6E:A8:4C:55:23:6B:28:43
            X509v3 Authority Key Identifier:
                keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/c0aoOEu0JcH2rVuwbqhMVSNrKEM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3540::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:28:58:02:a2:dd:fd:44:8e:5c:0e:a0:20:42:d4:80:3c:2f:
         a9:93:07:b9:b4:39:14:ad:b4:f1:bb:1f:a2:04:f0:87:35:a5:
         e3:da:15:17:d2:29:2b:f1:b6:6a:38:03:7e:3a:56:0f:77:b3:
         62:86:5e:20:01:15:2a:11:2e:6a:b5:35:f2:4b:2c:e4:81:b2:
         f7:89:7d:d0:aa:e2:eb:86:dc:45:66:8b:1f:1a:94:73:35:2a:
         bc:ba:ff:4e:fd:ee:62:f1:90:c2:50:14:f8:be:4a:92:36:d5:
         bc:b1:74:bd:dd:8a:24:66:6b:55:63:b0:a2:de:db:8d:15:7b:
         b7:6c:93:42:68:37:b4:20:e9:8b:5a:9d:00:9e:3b:dd:be:c9:
         43:a1:91:c0:98:20:59:4f:d8:f1:11:59:1c:44:30:80:8f:bd:
         2f:5b:46:3a:e3:dd:1c:52:95:cb:bb:e3:2a:c1:b0:57:b7:e7:
         9d:be:72:dc:16:7f:ce:6b:a3:a0:a3:bf:27:8c:6a:e2:6a:fb:
         45:55:98:88:38:7c:1b:f1:0a:a7:0a:90:1c:64:a3:46:f1:53:
         86:fa:55:44:d8:55:99:83:e2:ba:d9:42:79:19:21:47:c9:5c:
         a6:a4:45:36:0f:e5:48:f7:d8:7b:2b:66:92:fe:94:9c:b6:e5:
         91:cd:a3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----