Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Xg7HXvYfiH41bNZH2Dybgc7pokI.roa
File:                     Xg7HXvYfiH41bNZH2Dybgc7pokI.roa (raw, json)
Hash identifier:          ElimnaW6ByXvQ8ssd02maDtqlKHYdK40B9yl2eVMZK4=
Subject key identifier:   5E:0E:C7:5E:F6:1F:88:7E:35:6C:D6:47:D8:3C:9B:81:CE:E9:A2:42
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0C49
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Xg7HXvYfiH41bNZH2Dybgc7pokI.roa
Signing time:             Wed 29 Sep 2021 02:49:38 +0000
ROA not before:           Wed 29 Sep 2021 02:49:38 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        61.30.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3145 (0xc49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 02:49:38 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=5E0EC75EF61F887E356CD647D83C9B81CEE9A242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:49:68:31:cc:16:94:4b:e3:f3:fe:d0:ed:f4:
                    f3:e0:7e:99:5c:aa:9c:10:a8:fc:41:e8:67:53:d6:
                    1a:a8:51:68:8c:51:bd:c4:b7:e5:59:c8:ba:92:7a:
                    51:ca:17:47:7c:5e:73:6b:1a:1b:ea:21:8e:e6:f7:
                    b1:9e:67:14:28:cc:20:6a:f4:f9:1b:5d:b7:fb:94:
                    e4:46:67:f5:df:69:90:88:d5:60:27:c8:13:c3:46:
                    a4:e0:28:f8:0d:d0:e5:d1:4e:22:f2:d1:7b:c4:51:
                    7e:a2:ee:d1:cb:31:b7:9a:0e:b0:fd:8b:f4:cc:3b:
                    0c:ea:56:0d:70:cf:48:2e:76:5f:27:1a:83:e9:d9:
                    d1:e5:2d:78:10:2a:08:24:d2:bc:6d:84:55:ef:fb:
                    8f:74:9f:6f:10:da:45:aa:b6:4f:a7:8c:3c:d4:f2:
                    bf:02:9f:af:93:ad:9f:ad:9f:6a:8c:42:79:e0:fe:
                    87:41:8f:33:ba:c1:e4:bf:a7:b5:aa:70:e0:dd:7a:
                    b5:b0:d9:f0:52:9c:01:40:50:b1:c7:ee:e4:16:ec:
                    98:76:ea:d9:e3:64:8f:e4:b7:8d:43:0c:3f:f5:f9:
                    07:65:83:ff:d4:36:db:4b:b4:c6:20:46:36:e7:e8:
                    96:a2:30:36:57:61:76:ec:4d:62:1e:27:84:ca:4b:
                    cb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0E:C7:5E:F6:1F:88:7E:35:6C:D6:47:D8:3C:9B:81:CE:E9:A2:42
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Xg7HXvYfiH41bNZH2Dybgc7pokI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.30.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         94:4f:7e:a8:1c:5a:c3:66:d4:f3:b6:5c:7f:75:52:e8:40:01:
         5d:48:98:a1:60:4d:6b:2b:a3:f3:70:02:53:1d:7b:13:97:25:
         e8:ba:fb:2e:48:da:1d:50:7b:e7:94:9c:f7:bd:be:3c:7f:25:
         6e:bc:6e:88:6c:96:91:20:81:48:e0:e3:80:e6:f6:5e:ed:11:
         d0:a4:8e:1f:5e:be:5e:45:7c:8e:1d:7f:cf:ec:0d:ec:37:e4:
         f4:96:45:bf:fd:a1:79:44:c2:a2:78:05:b0:c0:3a:34:65:72:
         c0:9b:cb:45:12:cc:98:8e:c7:91:07:cb:76:c9:33:f4:40:b8:
         e0:b6:d1:03:0a:e3:c2:95:f4:74:95:97:07:20:ef:d1:18:ab:
         7e:01:5b:9b:4e:28:a1:3a:60:e4:c8:1f:be:d6:69:4d:ee:32:
         f4:18:e1:75:a8:84:39:79:3b:5b:9b:20:ea:3d:cc:6c:99:da:
         08:1b:3a:6c:4e:b6:0b:5f:6e:55:87:62:34:c1:fb:9c:8d:32:
         67:0c:95:d9:41:ca:0e:6a:b4:93:d5:30:bf:34:a1:63:db:98:
         24:9a:01:8f:7a:11:85:f9:d1:9e:d9:a1:83:a4:9d:f7:45:9b:
         4f:bb:32:fb:1e:c9:8a:08:6b:9a:a4:62:d2:81:8c:ca:fc:d9:
         31:e6:84:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----