Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/fFzanaje4fGcoUowYhRxnk9cNGE.roa
File:                     fFzanaje4fGcoUowYhRxnk9cNGE.roa (raw, json)
Hash identifier:          YkgRwZVJWrKIOkK5ooyY6SGKhIHUjg/eVvSlDTFGtiM=
Subject key identifier:   7C:5C:DA:9D:A8:DE:E1:F1:9C:A1:4A:30:62:14:71:9E:4F:5C:34:61
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0DED
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/fFzanaje4fGcoUowYhRxnk9cNGE.roa
Signing time:             Wed 29 Sep 2021 02:43:00 +0000
ROA not before:           Wed 29 Sep 2021 02:43:00 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     4780
IP address blocks:        61.56.224.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3565 (0xded)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:00 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=7C5CDA9DA8DEE1F19CA14A306214719E4F5C3461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f3:2f:95:a6:63:3f:50:6a:59:19:d1:36:93:
                    a2:f3:22:70:3b:34:b1:e3:cb:c8:29:73:62:9a:09:
                    c3:ed:e9:88:e8:d9:22:a1:07:85:57:93:8e:81:63:
                    26:c6:7e:98:b4:5f:d2:9e:ef:f7:7f:d9:31:ba:d4:
                    ab:b5:ec:87:82:35:fd:d2:72:9a:e9:c7:4c:99:c2:
                    7b:17:6f:4e:1c:7a:c4:37:54:8d:a2:8d:34:d3:9d:
                    db:fb:15:15:dd:b9:fd:54:6d:5b:7b:2b:7e:09:2b:
                    19:ca:4b:fe:ae:0b:84:52:0c:8a:85:94:d6:1a:e3:
                    f9:71:44:85:58:de:06:2b:bc:ca:ec:83:20:91:d8:
                    64:c6:93:45:8c:63:a9:3b:2a:3b:36:37:54:9d:5d:
                    cf:8b:a3:0c:e3:90:f1:83:f1:ee:d7:ae:15:6f:65:
                    01:7f:51:f2:81:80:57:5e:39:4f:cd:2f:75:bd:1b:
                    de:04:15:c1:86:f0:d1:5a:d0:87:7c:43:b2:fd:c1:
                    ff:75:0a:7f:0e:a4:92:64:a1:48:a3:53:80:25:b0:
                    cf:3b:6c:8c:4e:ed:da:f3:cc:d6:4a:a4:60:03:c7:
                    d6:e3:9d:7f:61:ac:e2:cd:df:84:3c:dd:1a:89:61:
                    b8:13:08:04:e0:50:f3:9b:ef:c3:ba:7a:45:84:c4:
                    74:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:5C:DA:9D:A8:DE:E1:F1:9C:A1:4A:30:62:14:71:9E:4F:5C:34:61
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/fFzanaje4fGcoUowYhRxnk9cNGE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         44:86:0f:d5:63:e0:96:2e:4a:13:21:68:bd:94:3f:d3:7b:45:
         37:4e:a1:ec:b6:ac:21:5f:fa:ab:3f:08:66:4f:12:e9:41:f9:
         12:d4:66:87:47:c2:7f:b9:41:ad:46:95:18:81:06:2d:7d:51:
         54:8e:a1:54:81:93:b6:0e:e7:2d:87:dc:a8:87:2c:05:0e:5c:
         67:28:60:3b:76:97:3b:0d:55:4f:d2:b2:f6:2a:8f:50:0f:fe:
         cc:42:b4:f1:04:fc:f0:65:0a:76:8c:ee:e8:f4:f7:d4:5b:68:
         ed:fa:d9:d4:99:ad:65:01:df:1c:64:84:45:53:5f:06:70:97:
         19:7d:20:74:70:25:12:24:12:85:94:ba:b2:48:b8:4c:c6:c3:
         37:4d:70:bf:8a:33:b4:ec:7e:dc:0d:0d:3e:3b:0f:fe:b3:86:
         b2:12:6b:28:d1:3b:77:51:7a:4b:92:6c:99:f3:bc:d8:b5:f0:
         d7:7d:f7:39:b8:cc:2f:d3:50:5d:5c:82:24:11:a3:5d:9c:31:
         91:fa:1b:4a:0f:20:60:43:e7:5e:08:23:5c:0a:76:8a:cf:a9:
         2d:e2:8a:a1:e7:af:50:2a:cd:51:16:65:79:43:9f:c6:89:c7:
         df:9f:54:46:f1:11:6b:a1:80:5b:ff:62:4d:0b:c8:0e:1c:43:
         3c:d2:1a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----