Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Oo7S3hijz9uIla11tOIYg-L4SiU.roa
File:                     Oo7S3hijz9uIla11tOIYg-L4SiU.roa (raw, json)
Hash identifier:          8x7R44sQKTU/EPSqhzCq0Kk4h3Bp8JiwDEDeK5oOtFc=
Subject key identifier:   3A:8E:D2:DE:18:A3:CF:DB:88:95:AD:75:B4:E2:18:83:E2:F8:4A:25
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       080A
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Oo7S3hijz9uIla11tOIYg-L4SiU.roa
Signing time:             Tue 29 Sep 2020 09:57:42 +0000
ROA not before:           Tue 29 Sep 2020 09:57:42 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4662
IP address blocks:        203.77.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2058 (0x80a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 09:57:42 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=3A8ED2DE18A3CFDB8895AD75B4E21883E2F84A25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:69:64:a9:4b:de:8b:d4:ed:3f:dc:a6:06:d8:
                    44:0e:89:f7:f8:45:68:a6:07:1d:df:9d:3c:a5:8e:
                    3c:d2:6b:ec:d1:39:8d:0e:4a:b8:32:58:57:53:2c:
                    be:44:cd:46:d6:75:67:29:ae:20:38:b2:9a:67:cd:
                    3f:cb:d0:4a:97:83:d5:31:64:52:e1:25:ad:8d:71:
                    05:86:f8:e2:bb:1d:55:77:1b:3c:3c:77:ab:a9:29:
                    92:20:50:e4:99:96:26:8e:6e:e9:8a:b9:47:43:61:
                    a0:65:99:9e:09:93:f9:c3:77:91:10:02:0a:04:c7:
                    ec:c5:2e:35:d5:f6:30:c4:8e:1f:26:a3:0b:bd:c8:
                    7d:41:fe:ec:a2:a6:12:7e:b1:26:c8:93:27:26:8c:
                    8c:e3:e6:a0:b7:0e:1c:30:e5:24:2f:92:65:d8:74:
                    93:e8:42:38:cd:24:20:8b:dc:5d:7c:b7:b7:d5:f0:
                    53:21:ac:95:ac:6e:9e:4e:d2:c8:14:3d:3e:da:d6:
                    75:ba:e6:01:0c:be:21:0f:04:29:bd:2a:f6:6e:b3:
                    6c:fb:eb:a2:7b:d0:23:6e:eb:2e:75:0d:09:1a:ed:
                    cc:a3:d1:60:ae:b9:ba:7f:19:88:e4:57:51:39:0e:
                    6d:7c:42:af:18:5d:02:1d:19:34:af:e5:6e:79:98:
                    7e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8E:D2:DE:18:A3:CF:DB:88:95:AD:75:B4:E2:18:83:E2:F8:4A:25
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Oo7S3hijz9uIla11tOIYg-L4SiU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.77.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         86:3c:57:dc:a0:31:bd:c9:d0:15:ae:16:6d:39:2a:7f:22:3d:
         d5:b6:08:91:45:e4:88:56:2f:c3:38:45:aa:66:c8:8b:08:c0:
         80:72:52:4a:b8:48:b9:29:f0:1f:c6:95:b6:e7:12:eb:08:58:
         fa:8e:42:68:75:ff:57:2b:90:b8:95:86:bf:6f:f7:85:9a:2e:
         85:14:67:d6:64:ef:38:70:dd:63:f8:78:13:09:c1:42:ab:00:
         51:38:4b:e3:bd:e5:4b:0f:bb:22:94:83:30:03:f8:76:ea:04:
         db:be:02:b8:6e:dd:1a:2f:23:9f:f1:13:ae:1b:2f:26:73:41:
         f9:f9:76:df:1f:22:8d:92:70:7c:21:eb:48:c3:27:39:ca:4f:
         1a:8a:91:28:a3:19:58:b0:74:76:6c:ca:d4:ef:51:4b:9f:d0:
         22:dc:29:9d:bc:85:47:7a:8d:ba:fe:61:ea:f9:60:79:03:76:
         6b:d7:7c:6b:6d:74:62:5a:90:6c:90:39:59:1d:95:f4:88:3c:
         76:ab:85:1c:dc:79:e3:53:13:51:34:e8:43:b3:d7:5d:3b:cc:
         13:76:1a:52:7c:4e:b3:9e:25:f9:9d:00:b8:73:9f:e7:ec:5d:
         cd:e5:61:1a:4c:e7:7d:9c:a6:74:ae:c2:8c:5f:52:75:72:92:
         fd:d1:73:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----