Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Vgnqd5zAZrbTsf3JghzlpLp8W9Y.roa
File:                     Vgnqd5zAZrbTsf3JghzlpLp8W9Y.roa (raw, json)
Hash identifier:          OgaBc3o2zTKshzfzSXgtHICYPk1eWFhrLEJp9JfObDI=
Subject key identifier:   56:09:EA:77:9C:C0:66:B6:D3:B1:FD:C9:82:1C:E5:A4:BA:7C:5B:D6
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0996
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Vgnqd5zAZrbTsf3JghzlpLp8W9Y.roa
Signing time:             Wed 16 Dec 2020 02:34:33 +0000
ROA not before:           Wed 16 Dec 2020 02:34:33 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        210.17.115.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2454 (0x996)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Dec 16 02:34:33 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5609EA779CC066B6D3B1FDC9821CE5A4BA7C5BD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c6:e4:ab:62:90:c2:d7:ec:0d:f6:27:93:0a:
                    b1:4a:2d:7e:81:7e:b5:f7:e2:95:15:c1:2f:2b:3f:
                    e5:ef:7c:96:b2:1f:4f:99:f8:87:8b:a7:1f:44:57:
                    e8:b8:c4:a2:e3:7c:ce:f8:8b:b4:11:1e:79:1d:25:
                    ba:57:60:22:5d:09:18:ba:01:36:89:0b:39:06:8c:
                    39:a6:b9:fb:94:4c:67:13:b0:61:0f:8e:ae:48:fb:
                    3a:1c:97:83:81:18:5a:c2:d1:4c:e9:83:6a:48:5c:
                    86:05:9b:48:98:9f:6e:cb:9c:5f:2a:e1:43:83:c7:
                    6b:23:63:54:59:0d:c7:cf:ef:69:b1:45:41:d3:e4:
                    38:01:d7:32:83:20:35:b8:67:ae:65:40:0e:cf:fe:
                    67:a4:09:60:eb:6c:94:15:3d:93:44:b2:cd:86:fc:
                    63:45:d0:2e:1e:2b:61:0a:2f:ca:1a:ff:8f:e1:78:
                    fe:b0:f4:0c:aa:4a:f2:32:c7:60:d8:27:81:55:bc:
                    bc:bf:40:c8:e2:4b:a6:4e:39:16:35:1a:f2:bf:16:
                    bb:be:06:6e:5e:7e:ba:6f:5f:ac:48:5d:be:92:49:
                    9b:31:ff:54:6b:4e:ef:03:83:a9:5c:6a:62:ac:cc:
                    c3:88:8a:c6:a5:57:a0:b7:21:29:de:ba:5e:2b:0e:
                    a5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:09:EA:77:9C:C0:66:B6:D3:B1:FD:C9:82:1C:E5:A4:BA:7C:5B:D6
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Vgnqd5zAZrbTsf3JghzlpLp8W9Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.17.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:66:06:f0:7d:65:36:3b:f1:03:52:11:62:a9:1d:36:2d:db:
         6d:84:88:10:2d:ba:76:b4:76:00:91:ad:43:4b:50:7c:6e:ac:
         af:b3:ee:92:be:7f:4c:88:36:d4:d3:2f:63:36:9b:12:49:b7:
         1d:9f:d1:81:1f:f2:f5:0e:ab:b4:3a:59:aa:51:f3:94:f4:92:
         32:af:de:53:da:e9:61:0f:94:a4:61:67:e9:74:3c:78:25:16:
         ec:13:17:00:64:d3:6b:ea:df:87:fb:75:49:de:ed:1a:eb:52:
         db:45:5a:81:41:c4:77:3b:9f:c6:66:0a:66:2b:f8:71:44:40:
         01:9a:5a:ea:e4:a0:a9:e6:69:98:a9:f2:80:ee:45:d4:7c:cf:
         18:eb:d1:12:25:98:93:d6:cc:71:83:ab:9e:33:fd:ee:96:39:
         c8:aa:67:70:49:ea:69:93:3e:89:0d:0a:7e:45:c0:4f:ca:c3:
         8b:8e:e9:aa:90:95:a7:8f:00:0b:21:11:42:81:ef:9b:cf:b4:
         c0:71:bc:ab:6f:88:3f:e6:96:48:11:56:8d:32:0c:74:26:01:
         a4:50:dd:92:22:26:1f:d5:a8:30:d8:98:74:97:d3:93:ed:f8:
         a9:b8:cb:da:d5:48:9d:d9:8f:ef:57:d5:5c:d3:c1:c0:af:be:
         c9:74:39:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----