Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/YMw4CKicdxl-DScRFpPg4rbfOd8.roa
File:                     YMw4CKicdxl-DScRFpPg4rbfOd8.roa (raw, json)
Hash identifier:          kOcf1OWsShKxwLHZdeYcuvb7Wi7lT2Q/3m2bLwyu6Bo=
Subject key identifier:   60:CC:38:08:A8:9C:77:19:7E:0D:27:11:16:93:E0:E2:B6:DF:39:DF
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0CC2
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/YMw4CKicdxl-DScRFpPg4rbfOd8.roa
Signing time:             Wed 29 Sep 2021 02:50:14 +0000
ROA not before:           Wed 29 Sep 2021 02:50:14 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        61.31.197.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3266 (0xcc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 02:50:14 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=60CC3808A89C77197E0D27111693E0E2B6DF39DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d6:0b:70:67:4a:3b:61:ab:32:ad:cc:b3:e6:
                    f5:74:96:95:74:ad:bf:77:e0:11:85:76:a2:9c:60:
                    07:56:a1:25:a5:fc:86:c1:06:c7:8a:f3:28:29:4a:
                    e1:f3:63:30:b6:e4:80:6c:2b:7d:71:ac:4d:ed:52:
                    95:d2:03:40:8c:a4:38:c3:39:62:9c:d2:2a:9b:70:
                    97:9d:8b:94:a2:4c:27:5e:94:a9:4a:ed:4c:d1:e6:
                    4d:8c:6b:8b:bc:7a:ac:72:fe:ad:14:d0:ff:8f:6e:
                    3e:9b:40:d4:c4:90:1b:be:41:69:35:3e:e7:b6:06:
                    63:48:dc:14:06:68:f2:54:90:aa:45:5c:49:d3:9a:
                    89:97:5e:52:dd:f0:9d:69:9f:4f:cd:e3:30:0a:76:
                    58:77:66:35:ee:ec:65:da:25:29:2c:79:03:ea:8d:
                    e5:f0:c3:96:34:de:dd:b0:99:ca:3a:9a:2c:15:dd:
                    1d:a4:d4:5e:5b:15:74:6d:4f:e0:07:5f:01:8d:9d:
                    c2:46:c1:cc:a6:38:e9:18:dc:1e:1f:eb:18:1a:c9:
                    3f:ac:0a:45:26:5c:f7:7e:3c:81:0a:d6:c5:ef:b8:
                    94:ab:0e:92:f5:5e:46:94:c5:49:12:ea:c3:83:ad:
                    1e:31:22:f1:dd:1b:2d:b2:ab:2a:67:af:a6:03:c1:
                    08:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:CC:38:08:A8:9C:77:19:7E:0D:27:11:16:93:E0:E2:B6:DF:39:DF
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/YMw4CKicdxl-DScRFpPg4rbfOd8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.31.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:8a:34:da:19:02:87:c1:a1:2a:a0:f3:78:0f:cd:ef:6e:1f:
         2d:e7:78:72:52:fc:0f:ad:f9:29:9c:99:f0:90:cb:09:9a:c1:
         5c:b5:04:08:8a:ec:ca:44:57:d8:34:b3:17:43:75:da:89:14:
         2f:85:42:92:bc:07:40:8d:19:15:54:75:bc:01:25:af:4c:ed:
         a1:8c:ed:26:ec:29:22:30:66:77:6e:1f:91:a9:33:ff:ff:ff:
         cd:b7:0a:24:f1:0f:3c:c2:c5:0f:de:d6:3b:13:be:e5:b7:a1:
         cf:67:89:b0:75:4b:9f:ba:29:57:c8:10:56:a5:ca:ff:56:39:
         f6:83:58:b2:71:43:3e:9f:30:af:40:0d:fa:8f:e9:e1:1d:3a:
         fe:0f:7e:b3:0c:1b:59:ce:c3:61:ff:e5:2e:97:fa:88:f6:a2:
         a0:1a:0e:3c:d7:22:6c:47:b7:0f:bd:80:7b:fb:65:44:a7:bd:
         58:2a:61:65:b6:af:0d:16:a5:6a:28:d0:2c:ab:bf:9b:e8:08:
         82:2e:fa:32:03:2a:a0:34:ca:86:a4:43:2f:ea:91:1b:26:88:
         7f:bf:87:a7:9e:32:95:b7:a2:97:41:f7:18:9f:72:c7:70:11:
         d5:ed:3e:70:77:cb:5b:7b:e6:a9:09:4e:11:a0:d3:77:8b:4a:
         7a:4e:ce:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----