Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ditJ7llDDMfhtLoVST_s6vxPSaw.roa
File:                     ditJ7llDDMfhtLoVST_s6vxPSaw.roa (raw, json)
Hash identifier:          RRLEfcbZCdea1isXomAiHFCDdMzbAjo92d2ORZCoX9w=
Subject key identifier:   76:2B:49:EE:59:43:0C:C7:E1:B4:BA:15:49:3F:EC:EA:FC:4F:49:AC
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0AC0
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ditJ7llDDMfhtLoVST_s6vxPSaw.roa
Signing time:             Sun 07 Feb 2021 11:40:18 +0000
ROA not before:           Sun 07 Feb 2021 11:40:18 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24158
IP address blocks:        175.97.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2752 (0xac0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Feb  7 11:40:18 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=762B49EE59430CC7E1B4BA15493FECEAFC4F49AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f8:42:b1:11:12:3d:6c:75:87:13:16:c3:b7:
                    74:dc:a1:2e:a8:78:e3:96:49:bf:b9:27:30:37:52:
                    00:ee:8a:8a:ee:f9:e5:7e:55:a1:84:c0:ac:26:28:
                    f6:27:73:e7:f5:67:a8:f1:f6:b6:df:5d:bc:71:f6:
                    c3:75:ee:42:33:42:8a:34:4a:60:ff:3d:05:c4:90:
                    7f:6c:f7:7d:3c:f3:29:50:5c:d8:e1:0e:7b:a8:6c:
                    68:2d:9b:3c:2a:62:e8:36:cd:45:4c:8c:51:fa:7c:
                    b3:03:5e:66:57:9c:68:e6:4b:4c:6d:3e:ad:4c:aa:
                    44:e6:67:9b:0a:30:1f:79:b2:13:81:38:a6:56:47:
                    ea:16:7d:5c:4d:de:3b:0e:ff:26:88:fd:f3:80:73:
                    27:d5:91:79:ee:b7:62:d6:9c:69:7b:e0:8c:b2:cf:
                    a0:3e:d7:f6:3c:5c:49:5d:06:d9:f4:e5:e1:0b:a9:
                    17:b5:ca:d6:c0:94:da:cb:49:53:d2:e5:0b:01:3e:
                    80:10:c1:fb:49:45:cb:de:d2:4e:1d:be:10:57:e9:
                    70:81:4e:b7:49:b3:1c:0b:ec:a6:eb:74:dc:02:86:
                    93:60:74:d0:36:84:ea:32:09:34:ee:8a:7d:ee:a5:
                    1a:85:6f:3e:32:57:37:35:1d:46:cb:4c:67:09:25:
                    23:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:2B:49:EE:59:43:0C:C7:E1:B4:BA:15:49:3F:EC:EA:FC:4F:49:AC
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ditJ7llDDMfhtLoVST_s6vxPSaw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.97.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8b:b4:e5:62:92:ca:ec:d4:61:8e:96:5d:09:1c:97:f9:a8:03:
         a6:5a:c4:c2:9e:4c:8e:fe:91:3a:2d:9b:96:d9:6d:b8:44:59:
         14:ce:83:87:b5:ac:34:c0:d3:37:17:95:55:f7:c3:0c:68:ba:
         a0:2f:d8:00:c9:d6:cf:c7:1b:06:fe:b3:5f:df:c0:3c:b9:80:
         d2:bf:6b:ab:82:14:73:e7:af:8f:bd:00:74:6b:59:a3:41:63:
         a6:2d:16:aa:ca:f1:64:b4:71:8e:b7:a9:73:09:7a:4e:6f:11:
         86:56:55:b8:2e:f0:71:eb:04:78:1f:0b:e7:36:66:1b:e5:71:
         f2:33:46:f8:eb:e6:8c:56:01:7c:85:55:3c:43:2c:e3:35:e7:
         8e:e1:ae:e4:a4:cc:62:0e:3b:6c:34:c8:f8:0d:d5:fa:92:a8:
         19:d4:31:35:50:aa:6a:1d:2d:b5:91:9d:e0:30:88:e4:7d:ea:
         ff:01:9d:2d:3f:70:54:0b:38:69:82:c5:f8:70:3a:9e:67:ea:
         dc:3b:00:10:25:b8:35:5e:1b:72:32:4c:5f:66:14:aa:97:88:
         46:a4:23:8c:cc:4e:12:e4:d7:05:71:57:f8:2b:85:ae:d3:82:
         c6:ec:66:2c:61:07:19:5d:9c:2b:90:2b:e0:25:4c:11:b2:e2:
         35:19:08:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----