Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/48Sp4J2ERxeoDLtFI0Cqgf1iUeY.roa
File:                     48Sp4J2ERxeoDLtFI0Cqgf1iUeY.roa (raw, json)
Hash identifier:          0jwttQc50nTd7CPvd/pET4gJJZi4wHRP3f8XvKOTals=
Subject key identifier:   E3:C4:A9:E0:9D:84:47:17:A8:0C:BB:45:23:40:AA:81:FD:62:51:E6
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0822
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/48Sp4J2ERxeoDLtFI0Cqgf1iUeY.roa
Signing time:             Tue 29 Sep 2020 09:57:48 +0000
ROA not before:           Tue 29 Sep 2020 09:57:48 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        210.192.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2082 (0x822)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 09:57:48 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E3C4A9E09D844717A80CBB452340AA81FD6251E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fa:84:71:98:fb:ac:2d:19:aa:b0:0c:32:03:
                    a6:56:85:4f:ff:0d:33:6e:fd:aa:e3:54:59:3e:74:
                    2a:67:7a:04:c8:9d:84:39:2e:3f:10:bd:91:92:3a:
                    fb:54:eb:0e:1f:5c:91:b6:e0:48:27:0c:b5:71:2f:
                    a3:b6:48:0a:9b:f7:79:0e:40:c0:b2:73:95:1f:b6:
                    ba:af:46:f3:34:b9:bc:17:16:5a:fe:2a:0f:91:73:
                    b9:70:0c:44:21:a3:ab:2c:6e:49:f4:21:e6:4c:a3:
                    c0:c2:64:7a:2e:29:9d:97:63:5e:b7:43:40:a2:5d:
                    e1:8f:93:c9:c5:ef:39:c8:aa:90:17:15:30:9f:63:
                    e5:34:66:2e:51:b5:de:39:84:2e:22:19:68:02:ea:
                    2f:07:56:ba:c9:7a:a8:3c:4c:a9:01:5a:88:4f:e4:
                    1b:67:be:69:3f:34:94:2d:da:f8:52:78:13:fa:f4:
                    5f:7b:4e:c1:4f:0e:f1:44:96:30:b9:68:36:af:08:
                    23:ab:43:77:39:67:db:22:fe:9e:38:2d:96:12:79:
                    fc:0a:b6:cc:66:30:85:b2:1b:58:77:de:be:60:a6:
                    83:f8:b1:7f:81:09:df:55:5b:85:d0:65:cf:c3:19:
                    7c:23:f6:50:a5:e7:87:65:5d:a5:29:33:14:0d:35:
                    4f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C4:A9:E0:9D:84:47:17:A8:0C:BB:45:23:40:AA:81:FD:62:51:E6
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/48Sp4J2ERxeoDLtFI0Cqgf1iUeY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.192.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         94:c4:c3:20:a2:38:11:3b:a7:d3:6e:4d:1b:ae:66:db:5f:d4:
         68:e1:6c:d3:e5:5b:8a:1c:c1:ed:58:4a:98:e3:69:65:20:4a:
         2d:9e:dd:43:43:01:3b:e6:af:71:b3:a4:73:3d:08:6a:f8:48:
         41:98:08:ad:f6:4b:f5:54:30:fc:49:49:cf:2a:34:4e:64:d4:
         0b:82:18:35:38:0d:a9:ae:9e:61:b7:28:ee:18:66:9f:f7:b7:
         e8:ef:b5:49:56:6a:7c:c7:3f:a0:91:34:0c:04:e4:ac:a6:c6:
         c3:ab:ad:bd:8f:e1:88:04:da:fd:af:65:d5:7b:2e:8c:d2:ae:
         2a:ad:df:b7:f1:b5:30:eb:d8:e7:65:a3:6f:e9:ec:dc:e6:25:
         f7:54:fb:d2:80:2c:70:2d:ad:6b:31:5e:c6:4d:df:7a:3f:1f:
         94:ff:3d:37:28:c5:ee:e1:15:52:2f:e7:f6:e8:96:88:bf:e3:
         e6:c9:72:83:1f:0c:0f:69:db:fa:64:b2:30:1c:f4:2b:77:f1:
         61:c2:ba:8b:df:3c:55:f4:de:b0:fe:7d:c0:c0:49:63:5b:45:
         a4:8a:9a:41:4d:39:ae:6d:7c:6b:ff:28:33:54:92:d5:02:1f:
         05:4e:ee:dc:6d:7b:0f:4e:26:55:22:68:29:fc:f4:0e:92:2f:
         6c:51:97:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----