Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/dscrjl5kCRFx28xgoQqbqkEawco.roa
File:                     dscrjl5kCRFx28xgoQqbqkEawco.roa (raw, json)
Hash identifier:          vVE5QHWvtWm4uFsctd+uOxs5kaB2WkFeFpKMfIjdoBU=
Subject key identifier:   76:C7:2B:8E:5E:64:09:11:71:DB:CC:60:A1:0A:9B:AA:41:1A:C1:CA
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0806
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/dscrjl5kCRFx28xgoQqbqkEawco.roa
Signing time:             Tue 29 Sep 2020 09:57:40 +0000
ROA not before:           Tue 29 Sep 2020 09:57:40 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        210.62.192.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2054 (0x806)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 09:57:40 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=76C72B8E5E64091171DBCC60A10A9BAA411AC1CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2b:38:74:0c:c0:ff:f1:5b:58:e4:7d:7e:91:
                    99:1e:b9:85:55:30:e1:9d:99:7b:68:18:02:42:ee:
                    e9:6d:22:a9:d8:95:42:d2:01:91:a8:cb:e8:2d:5c:
                    e6:7a:58:87:1c:8e:65:c7:fe:65:60:cf:23:af:33:
                    d1:eb:06:ca:b2:0d:34:d5:8b:3c:da:b7:84:36:4d:
                    d4:84:e5:dc:d7:84:bf:22:44:9d:9c:64:5f:a3:17:
                    36:61:90:6f:12:52:0f:0f:7a:e7:34:c5:98:81:ea:
                    7e:c0:37:a2:cb:c8:80:57:35:78:44:32:1c:ed:a8:
                    f9:f1:63:c9:58:4f:68:da:6d:8a:2b:bc:c7:fc:f0:
                    82:74:6c:30:af:4e:aa:a0:e2:0f:73:9b:7f:53:e1:
                    4c:7d:91:f8:56:df:db:dc:07:25:6d:d5:00:37:97:
                    1e:e4:dc:19:46:c5:8a:cc:52:0b:53:5c:c8:cc:a9:
                    1a:eb:ab:b4:a1:02:17:fc:75:cb:1d:d9:25:10:36:
                    a8:51:a7:23:ed:46:ac:00:f7:c2:25:43:6b:c8:b9:
                    19:79:d7:04:ce:82:8f:62:a9:a6:39:e7:3e:75:85:
                    4c:cb:e7:56:51:19:a7:41:e5:a0:1e:0f:44:ce:2b:
                    9c:3c:68:b1:3a:24:84:18:be:3a:c5:58:e2:b2:22:
                    49:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C7:2B:8E:5E:64:09:11:71:DB:CC:60:A1:0A:9B:AA:41:1A:C1:CA
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/dscrjl5kCRFx28xgoQqbqkEawco.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.62.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         27:2a:cf:66:e2:de:9e:df:b6:39:70:01:00:bb:2d:a0:4b:f9:
         03:39:46:59:eb:68:b6:fc:81:18:4f:43:a1:57:ed:56:a2:50:
         2c:43:11:34:b6:2b:bf:f3:e9:b1:7d:83:42:16:b9:3c:f4:0c:
         32:de:33:a7:b5:c5:79:96:3c:b3:b9:44:b5:7c:6e:3d:7c:b4:
         d3:c9:ab:ae:c6:4c:ba:dc:cf:08:19:f1:24:1c:a5:03:2a:31:
         80:d3:19:07:ed:36:c4:36:59:23:98:11:e3:ac:70:76:82:78:
         af:04:f8:b6:a5:c9:70:cf:36:61:48:81:df:a8:de:aa:eb:f5:
         8c:15:3e:cd:0b:05:9c:1f:57:48:39:11:9d:1d:9c:9a:32:75:
         a2:0c:80:35:12:92:85:7e:54:05:8e:a1:5b:83:8f:01:02:2f:
         30:9c:d6:b2:44:e9:6d:23:12:ac:4e:d3:7b:e9:c3:3f:3b:50:
         59:e2:b3:7d:9a:41:05:44:5b:eb:8f:61:bc:b9:2d:f2:c7:4e:
         ef:e1:fb:99:69:ba:44:96:51:ed:76:b9:49:95:a5:11:3d:3e:
         df:a4:71:09:79:69:0d:4b:0c:5b:7f:e5:3c:3e:af:1e:19:39:
         50:ea:f9:81:75:34:16:59:56:c1:41:7c:99:f4:18:c4:4b:bb:
         61:b6:94:ba
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICCAYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMDA5Mjkw
OTU3NDBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDc2QzcyQjhFNUU2NDA5
MTE3MURCQ0M2MEExMEE5QkFBNDExQUMxQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpKzh0DMD/8VtY5H1+kZkeuYVVMOGdmXtoGAJC7ultIqnYlULS
AZGoy+gtXOZ6WIccjmXH/mVgzyOvM9HrBsqyDTTVizzat4Q2TdSE5dzXhL8iRJ2c
ZF+jFzZhkG8SUg8Peuc0xZiB6n7AN6LLyIBXNXhEMhztqPnxY8lYT2jabYorvMf8
8IJ0bDCvTqqg4g9zm39T4Ux9kfhW39vcByVt1QA3lx7k3BlGxYrMUgtTXMjMqRrr
q7ShAhf8dcsd2SUQNqhRpyPtRqwA98IlQ2vIuRl51wTOgo9iqaY55z51hUzL51ZR
GadB5aAeD0TOK5w8aLE6JIQYvjrFWOKyIkmTAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUdscrjl5kCRFx28xgoQqbqkEawcowHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvZHNjcmpsNWtDUkZ4Mjh4
Z29RcWJxa0Vhd2NvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BdI+wDANBgkqhkiG9w0BAQsFAAOCAQEAJyrPZuLent+2OXABALstoEv5AzlGWeto
tvyBGE9DoVftVqJQLEMRNLYrv/PpsX2DQha5PPQMMt4zp7XFeZY8s7lEtXxuPXy0
08mrrsZMutzPCBnxJBylAyoxgNMZB+02xDZZI5gR46xwdoJ4rwT4tqXJcM82YUiB
36jequv1jBU+zQsFnB9XSDkRnR2cmjJ1ogyANRKShX5UBY6hW4OPAQIvMJzWskTp
bSMSrE7Te+nDPztQWeKzfZpBBURb649hvLkt8sdO7+H7mWm6RJZR7Xa5SZWlET0+
36RxCXlpDUsMW3/lPD6vHhk5UOr5gXU0FllWwUF8mfQYxEu7YbaUug==
-----END CERTIFICATE-----