Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MKY/08yVX2xjs0ysKEEjiOM5wNiKURg.roa
File:                     08yVX2xjs0ysKEEjiOM5wNiKURg.roa (raw, json)
Hash identifier:          29D8h5OUKN6XpX/hQYrKJftizhhR8cfJtRIGZkQuuXk=
Subject key identifier:   D3:CC:95:5F:6C:63:B3:4C:AC:28:41:23:88:E3:39:C0:D8:8A:51:18
Certificate issuer:       /CN=9D9E97B00D2E15C41AE7071732018C2B137E53A1
Certificate serial:       08BF
Authority key identifier: 9D:9E:97:B0:0D:2E:15:C4:1A:E7:07:17:32:01:8C:2B:13:7E:53:A1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/nZ6XsA0uFcQa5wcXMgGMKxN-U6E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MKY/08yVX2xjs0ysKEEjiOM5wNiKURg.roa
Signing time:             Sun 07 Feb 2021 12:35:05 +0000
ROA not before:           Sun 07 Feb 2021 12:35:05 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     7478
IP address blocks:        211.76.0.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2239 (0x8bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9E97B00D2E15C41AE7071732018C2B137E53A1
        Validity
            Not Before: Feb  7 12:35:05 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D3CC955F6C63B34CAC28412388E339C0D88A5118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:44:70:01:a4:10:e6:b7:ca:dd:29:44:bd:38:
                    fc:d4:14:f5:09:24:f7:7a:da:dd:a1:c3:20:4a:75:
                    01:e2:1b:ea:12:c7:d9:0b:d9:6a:6e:b1:a7:a7:b8:
                    2e:1d:0a:67:d7:e4:90:bb:ac:06:9e:01:0a:85:2b:
                    36:56:e9:8f:ff:e3:16:95:ef:79:61:6a:02:b9:3d:
                    31:4c:31:c4:cd:3f:5f:ef:89:a0:43:db:c5:38:35:
                    ab:f7:f4:a6:3c:84:26:c3:57:09:9b:f6:78:27:55:
                    31:4e:cf:08:1e:de:22:b5:53:e4:02:95:b6:a2:88:
                    5e:e4:9d:3c:f5:54:00:dd:ac:13:74:b2:26:4b:14:
                    5c:b3:66:70:1f:84:39:03:8e:42:38:36:a5:0d:cb:
                    d8:80:8f:b2:7f:23:bd:2b:3c:ec:0c:77:ec:a8:c6:
                    9a:75:98:dd:c4:d8:9e:17:53:23:8d:83:8a:f8:32:
                    3c:c5:8c:6a:a9:b9:34:8d:35:64:3d:55:7a:27:9d:
                    b8:6d:2a:f9:bd:f9:2b:11:d6:3a:9f:31:81:19:a0:
                    48:ce:54:41:87:44:dd:b8:c7:f1:05:c4:84:91:15:
                    03:0a:2b:8b:b6:93:3e:d1:54:58:b2:fa:03:5e:73:
                    fc:24:2e:10:c6:02:95:76:82:27:60:ed:52:4b:c4:
                    8f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:CC:95:5F:6C:63:B3:4C:AC:28:41:23:88:E3:39:C0:D8:8A:51:18
            X509v3 Authority Key Identifier:
                keyid:9D:9E:97:B0:0D:2E:15:C4:1A:E7:07:17:32:01:8C:2B:13:7E:53:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MKY/nZ6XsA0uFcQa5wcXMgGMKxN-U6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/nZ6XsA0uFcQa5wcXMgGMKxN-U6E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MKY/08yVX2xjs0ysKEEjiOM5wNiKURg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ad:f4:47:6e:1c:50:20:40:9d:0d:73:ee:52:73:6b:0e:a3:99:
         05:79:bc:df:67:8e:9b:33:f8:16:1d:0c:3b:8c:ef:19:e3:8c:
         eb:e9:7a:7c:1f:14:d0:90:e8:cd:a4:60:f1:dc:dc:04:87:5e:
         2a:2f:52:81:6b:e6:cc:01:fe:d9:c3:ad:bc:28:b8:cf:37:78:
         7c:8b:e1:ab:6f:ec:a6:e4:86:75:97:e1:86:63:66:bd:3a:50:
         97:d5:c8:13:80:a4:7a:89:11:af:e7:5e:b2:40:f9:c5:7f:c4:
         d3:24:3f:d4:cb:d6:f7:da:e8:75:4a:2d:10:f7:b1:93:21:a5:
         10:13:1a:1b:0a:54:5a:ba:ec:e1:88:a1:0c:d4:a3:1f:1d:b6:
         a8:96:03:b9:ca:6d:54:59:da:e1:61:03:15:7d:b8:79:b0:f1:
         52:4b:29:43:8f:d7:04:42:6c:48:45:bd:11:43:9a:2a:c9:bf:
         b7:d7:98:dc:e2:b4:59:a7:90:16:3e:ea:73:8c:27:ff:79:83:
         6c:5e:cc:1b:e7:d3:b9:11:3b:ed:d6:72:48:ba:34:a8:2a:d2:
         32:7a:22:38:37:9b:81:f1:59:18:8e:20:38:ae:93:e6:4a:ca:
         42:b9:17:0d:d5:ea:09:da:38:c7:18:e2:2e:74:ca:e0:b4:c6:
         96:b1:52:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----