Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/RLLo03fKM8sm8CMumaoGV1KN3LQ.roa
File:                     RLLo03fKM8sm8CMumaoGV1KN3LQ.roa (raw, json)
Hash identifier:          r+/kusSOaI6/Cc0jqQtTuBVUO851kX3ol0tYxsGMByI=
Subject key identifier:   44:B2:E8:D3:77:CA:33:CB:26:F0:23:2E:99:AA:06:57:52:8D:DC:B4
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0B7E
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/RLLo03fKM8sm8CMumaoGV1KN3LQ.roa
Signing time:             Sun 07 Feb 2021 06:22:47 +0000
ROA not before:           Sun 07 Feb 2021 06:22:47 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        60.245.64.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2942 (0xb7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Feb  7 06:22:47 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=44B2E8D377CA33CB26F0232E99AA0657528DDCB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b1:3a:62:c1:95:25:42:13:c3:a8:92:06:66:
                    75:14:2c:77:38:59:5a:cb:22:6b:fb:90:2a:76:cb:
                    50:5f:e6:af:f4:f9:f6:d5:bb:eb:cf:d4:d1:ff:9b:
                    c9:40:c0:c4:50:76:d6:3b:5b:f3:28:9f:3e:88:5a:
                    36:18:1e:7f:2d:45:f6:9c:d2:a2:96:29:cd:65:3a:
                    0d:8b:f7:27:37:27:3a:d1:5d:77:8f:49:90:63:6d:
                    52:4c:39:98:b4:86:3b:2d:a5:32:e4:9c:d5:41:c0:
                    d5:15:46:f6:2a:20:05:cf:9f:13:a6:4a:34:e3:e4:
                    51:7f:af:97:8a:9b:b0:e0:b2:22:36:e0:03:ff:b8:
                    78:96:0d:01:b3:b8:a6:a5:12:3d:04:14:bc:a4:3c:
                    47:27:74:3f:2b:f8:3e:a7:78:32:bd:09:8e:1a:65:
                    2a:8e:05:6b:19:a2:4e:73:7a:9e:02:84:02:cb:f9:
                    72:a3:6e:e3:7b:e7:4d:c7:98:04:64:4a:ad:f6:9c:
                    62:45:15:9c:39:d5:23:09:9d:63:33:5c:ed:01:bb:
                    7e:4c:19:c8:e9:0f:af:5d:55:8a:b2:9a:3f:8d:ec:
                    ea:db:42:79:3b:69:bd:55:92:79:69:64:46:6d:3c:
                    38:28:8e:17:d6:1d:c8:ce:6e:d7:77:83:be:f3:08:
                    26:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B2:E8:D3:77:CA:33:CB:26:F0:23:2E:99:AA:06:57:52:8D:DC:B4
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/RLLo03fKM8sm8CMumaoGV1KN3LQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.245.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         38:ad:1c:11:25:ac:fc:e0:bc:ce:7a:a2:44:84:7b:88:d1:5a:
         dc:d0:26:e9:8a:c5:c7:9d:54:49:f6:b6:d4:d5:eb:70:2c:7c:
         8b:8b:0f:2a:b4:b8:9a:ee:87:52:38:fd:a8:57:89:ab:f5:33:
         86:67:69:18:24:a3:6f:9f:d1:b3:bc:f7:71:3c:f4:c8:81:e6:
         dd:0d:30:58:c7:86:b1:ab:5c:4f:5d:8f:7e:86:6e:e8:c1:52:
         c4:9a:0d:1d:ea:18:aa:b6:cf:fe:20:5d:72:4a:18:6f:03:4a:
         c7:53:ed:3b:91:ac:39:db:ff:64:7e:94:c8:2d:8e:a0:ab:70:
         0e:29:b6:64:56:69:e1:d7:f2:7b:9b:2a:01:cf:de:e5:7c:14:
         04:d7:f2:b7:d3:71:81:fc:1b:a8:a1:58:02:76:4e:e0:47:6b:
         80:5d:15:c9:4b:fc:f4:1e:8b:58:1d:e8:d9:6e:4b:b8:38:27:
         73:59:a7:31:29:d9:79:e0:96:57:31:de:e7:7e:c5:80:8c:38:
         e6:23:bb:f1:2a:0a:cf:73:e3:6e:4a:8b:e6:a1:11:5d:02:9e:
         36:59:1f:8e:60:6a:c9:14:b7:04:76:61:47:82:be:e1:f0:08:
         03:76:c0:c4:f1:d5:c4:4b:b9:fc:9b:1b:b8:f7:42:c4:b6:92:
         2f:b8:57:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----