Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/2Auzy-_p5wYgIFRHT_UOmT96F00.roa
File:                     2Auzy-_p5wYgIFRHT_UOmT96F00.roa (raw, json)
Hash identifier:          TcOi/LgUwrIK5MMnLSsHp23QkmWWARqMeQskEzy0GA8=
Subject key identifier:   D8:0B:B3:CB:EF:E9:E7:06:20:20:54:47:4F:F5:0E:99:3F:7A:17:4D
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       080D
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/2Auzy-_p5wYgIFRHT_UOmT96F00.roa
Signing time:             Tue 29 Sep 2020 09:57:42 +0000
ROA not before:           Tue 29 Sep 2020 09:57:42 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4662
IP address blocks:        210.62.192.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2061 (0x80d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 09:57:42 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D80BB3CBEFE9E706202054474FF50E993F7A174D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c9:a5:f3:c5:06:85:76:ee:35:06:2b:36:67:
                    95:0b:ef:7f:7b:02:8f:dd:2c:34:52:05:d8:62:0f:
                    ce:63:04:30:3f:46:c5:ca:e8:a7:c2:dc:b4:28:45:
                    66:09:1c:fa:df:ee:e7:30:b7:87:5c:ee:0d:e6:45:
                    1d:90:62:53:9d:7a:ff:8a:10:36:f8:b7:10:66:e4:
                    b6:ba:d5:75:dc:38:25:05:6c:b2:2b:95:a4:be:65:
                    24:9a:e8:a9:99:97:64:56:3e:d7:ab:dd:e7:fd:56:
                    89:ee:10:ee:a6:64:05:d0:5a:75:1d:15:1d:34:ad:
                    f4:b0:c0:e0:9c:88:35:0c:0f:b9:15:24:75:3e:d9:
                    c5:5c:59:bd:cc:dd:16:26:21:03:d2:0f:7b:fe:ba:
                    a0:2a:c7:56:0c:95:51:30:9f:9a:d5:8a:9d:6b:19:
                    f0:a8:e3:81:17:23:a0:06:d7:38:f5:ed:bc:43:13:
                    6c:6e:24:80:80:d7:11:c6:ef:3a:c1:3f:d3:e3:67:
                    41:31:d8:73:2d:11:64:17:81:dd:7f:eb:e0:0e:87:
                    8a:e8:e7:da:54:56:a1:ff:7d:51:b4:06:32:38:02:
                    52:70:62:5c:86:0a:50:9a:48:04:4f:54:8e:b6:d7:
                    49:b6:3c:d2:b8:d8:b9:8d:73:c6:d4:4d:f1:29:b8:
                    a4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0B:B3:CB:EF:E9:E7:06:20:20:54:47:4F:F5:0E:99:3F:7A:17:4D
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/2Auzy-_p5wYgIFRHT_UOmT96F00.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.62.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1e:f3:b8:ec:b8:b0:b3:fc:30:ab:cf:09:0e:9b:f5:5d:f9:30:
         14:d8:2c:f2:9e:67:2e:b7:b0:84:80:1b:73:8a:97:69:a1:29:
         3b:db:56:7f:00:dd:fe:12:f4:b7:a2:a8:34:fb:58:27:d2:07:
         33:b7:ca:ed:ea:56:5f:ea:68:df:83:69:11:21:89:0c:65:09:
         57:3c:dc:e0:78:a3:84:c9:dd:09:72:82:51:7e:2c:18:76:44:
         8a:aa:f6:a2:3e:67:18:3e:3b:0b:19:62:8d:4b:72:b4:19:c7:
         39:15:51:25:56:12:33:b5:80:94:7f:b6:e0:77:97:12:b1:3a:
         cd:85:7f:ad:68:c3:03:07:57:59:f9:24:c0:81:6f:6d:65:3a:
         f3:9c:4e:49:6f:ec:7d:f2:f4:25:24:56:7e:58:01:9f:84:3c:
         a4:d7:25:4d:c4:6b:8a:3d:48:e6:60:69:38:96:96:92:27:72:
         3c:f0:18:c3:b2:85:f6:b9:8f:c0:bd:b3:e9:bd:f4:44:89:ef:
         86:b0:50:62:69:80:c0:46:ac:04:c0:73:7d:74:a8:ef:be:4d:
         ad:cc:78:97:5e:e5:18:67:8e:aa:0f:aa:5f:77:8c:b6:ee:f2:
         8b:db:5a:0f:33:83:40:b0:56:c0:14:82:d6:e1:32:4e:67:a5:
         18:5c:e8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----