Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/d0PatfTSQcyVaaZlg6jhHwh-rTw.roa
File:                     d0PatfTSQcyVaaZlg6jhHwh-rTw.roa (raw, json)
Hash identifier:          l7E8wrvqID2jrltG/d0R9pv5Oh8z9ZLmsffNi/Em6c4=
Subject key identifier:   77:43:DA:B5:F4:D2:41:CC:95:69:A6:65:83:A8:E1:1F:08:7E:AD:3C
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0B30
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/d0PatfTSQcyVaaZlg6jhHwh-rTw.roa
Signing time:             Sun 07 Feb 2021 13:10:44 +0000
ROA not before:           Sun 07 Feb 2021 13:10:44 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        210.17.50.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2864 (0xb30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Feb  7 13:10:44 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=7743DAB5F4D241CC9569A66583A8E11F087EAD3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:da:c6:4d:bd:ce:31:79:b6:3e:f7:db:bb:d5:
                    6a:04:9e:bf:43:c3:60:95:bf:31:9a:fb:ab:9c:82:
                    66:c5:3c:22:d0:61:35:de:8c:e0:33:3b:e6:44:cc:
                    53:e2:7a:c3:6c:79:ef:ef:16:d3:78:d9:5a:f7:b5:
                    3a:92:6c:d3:2c:de:29:ce:34:68:3f:2a:f6:0e:c6:
                    99:bb:57:d4:ec:0c:c0:60:0b:47:e9:16:f0:4f:85:
                    f9:ce:f1:2a:33:1a:85:01:c7:2a:82:e4:36:eb:bc:
                    1f:8a:7d:e5:d6:e6:5a:bc:12:e3:82:9c:7f:a1:0c:
                    95:8a:3c:e9:3b:d5:3e:8c:ce:93:e6:fc:cd:a8:a2:
                    47:35:0f:47:6c:ec:1a:22:3b:58:e8:28:98:14:c1:
                    54:6b:85:5f:33:42:f8:33:c1:e0:a3:a0:fb:49:ff:
                    ac:9d:bc:68:6f:89:f6:8c:f4:d3:82:9c:63:22:7c:
                    e3:06:66:2d:50:f9:fe:d9:e0:2f:ac:13:cb:b1:a4:
                    ba:c8:f1:7b:83:da:24:e2:68:bd:dc:13:3a:82:b8:
                    8c:0d:ee:3e:5c:4d:16:62:bf:94:59:0e:2c:e8:3d:
                    b7:77:62:07:2f:77:8e:d5:3c:fb:e3:31:54:b9:cb:
                    a0:a2:c9:33:d0:88:74:34:a3:dc:cb:0f:1a:b8:f7:
                    e5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:43:DA:B5:F4:D2:41:CC:95:69:A6:65:83:A8:E1:1F:08:7E:AD:3C
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/d0PatfTSQcyVaaZlg6jhHwh-rTw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.17.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:79:9f:3a:fa:3a:05:7f:79:56:19:76:22:f9:cf:eb:b7:5f:
         31:48:55:b5:ab:6c:35:63:e8:5c:27:08:44:7c:8f:e2:12:22:
         94:6e:e1:28:ad:28:5d:44:da:a2:b9:53:6a:0f:73:b0:53:07:
         54:66:b6:f7:29:fa:a8:93:bd:58:29:72:dc:cd:d4:24:73:af:
         44:c2:77:2b:4d:ca:f6:a9:d7:49:96:62:5f:d0:50:bc:39:2d:
         8d:e4:4a:e0:9f:3c:c3:30:25:d0:9a:88:0a:fe:32:8d:3f:2d:
         be:8a:f5:a4:fc:99:59:69:74:c3:f8:79:c6:6b:c7:d6:51:0c:
         ae:2b:6b:ac:92:f6:53:a1:fc:a1:24:d8:eb:4d:cd:0c:74:84:
         f7:b5:07:4e:c1:10:6e:83:f9:9d:dd:cf:50:f2:e3:e7:03:95:
         2f:ab:70:9e:88:5e:89:ba:c1:60:0b:b3:5c:e5:71:0a:75:fa:
         24:c5:3a:84:88:8c:33:18:44:3a:9f:f6:ad:00:bb:0c:07:84:
         27:14:26:6d:a4:24:8c:06:bd:d6:d3:b4:92:ba:ea:eb:df:fb:
         3f:f5:03:1c:7b:bd:1b:aa:ec:2a:c6:90:ca:d6:d0:03:e3:7d:
         0a:e7:73:9a:ca:4d:44:a5:0d:b7:59:cb:27:1e:fc:c6:58:2d:
         4f:2d:b3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----