Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/nc7U7xu2cXJbRN1sbXS9wF6yPQA.roa
File:                     nc7U7xu2cXJbRN1sbXS9wF6yPQA.roa (raw, json)
Hash identifier:          b3de99xwMWoP+uYXLr/mR99fTRYeQB2PSowfZHNMDKc=
Subject key identifier:   9D:CE:D4:EF:1B:B6:71:72:5B:44:DD:6C:6D:74:BD:C0:5E:B2:3D:00
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       081C
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/nc7U7xu2cXJbRN1sbXS9wF6yPQA.roa
Signing time:             Tue 29 Sep 2020 09:57:46 +0000
ROA not before:           Tue 29 Sep 2020 09:57:46 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        49.214.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2076 (0x81c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 09:57:46 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=9DCED4EF1BB671725B44DD6C6D74BDC05EB23D00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b0:aa:7f:18:cb:9e:88:d4:03:43:12:5a:b0:
                    75:37:77:31:5f:1e:2b:35:a5:05:83:9f:bf:66:ce:
                    fd:cc:ef:6b:b5:82:8e:c6:1f:f8:fd:30:e5:3d:7e:
                    e5:f5:f6:95:51:93:08:5f:af:19:e0:93:d8:3b:b3:
                    a4:5d:7e:7d:e4:dd:b6:f0:49:23:62:10:c0:d4:67:
                    0c:d5:55:e1:47:a5:0c:28:c8:27:ea:47:f3:c0:e1:
                    2f:f1:3d:96:82:b7:18:ec:01:5e:f8:30:6c:26:e2:
                    22:38:82:f2:00:cd:38:12:ac:ef:a2:5e:16:dc:40:
                    a4:e5:72:13:79:5b:7f:22:4a:01:25:28:a7:b8:a2:
                    6b:69:f9:28:53:7d:d1:94:ed:3d:7b:6c:19:13:b2:
                    d0:84:e6:71:ed:57:b2:bc:aa:dc:0c:8c:54:de:59:
                    ba:f5:a5:a3:36:cd:38:d4:13:fc:86:7f:6a:ec:f6:
                    fe:88:ad:4e:71:51:83:25:ce:bb:ca:82:9c:5c:05:
                    85:a5:81:54:e6:70:fb:72:df:4b:4c:39:e4:99:58:
                    b8:10:69:d1:33:c0:1d:22:c4:51:8e:ae:dc:dd:54:
                    5a:a0:66:cd:fb:a7:5d:5b:fb:e8:62:66:24:73:87:
                    8b:81:f8:82:6d:a2:a8:b2:4e:c6:43:e6:44:c5:aa:
                    5c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CE:D4:EF:1B:B6:71:72:5B:44:DD:6C:6D:74:BD:C0:5E:B2:3D:00
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/nc7U7xu2cXJbRN1sbXS9wF6yPQA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.214.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         5c:dc:cd:15:79:b3:7b:86:51:e6:26:14:3d:27:3e:98:73:41:
         7f:6e:a8:7e:0d:3e:f7:b6:d7:d6:f8:d5:0f:a9:b1:38:48:27:
         67:b9:a9:93:6f:cb:e5:db:8b:a0:60:d7:ff:3a:53:24:16:0b:
         3b:e1:1a:58:2b:a4:5c:f3:ab:d7:9b:b6:dd:91:6f:bb:10:69:
         a6:bb:f4:04:e1:9b:e2:c7:67:67:55:60:65:1f:7b:54:a1:30:
         f2:b2:e0:52:bb:fe:55:07:ad:2e:5b:e6:be:f9:1f:6c:40:54:
         b7:04:b0:1a:c7:b8:24:fb:93:ce:ab:ce:c5:a1:cf:48:42:f7:
         5d:93:5e:b7:8b:c5:8c:c1:cc:29:2d:76:be:4b:a2:93:a5:76:
         9d:cf:9f:3b:f0:61:5c:ba:3e:94:5f:d5:b3:84:7c:64:95:2a:
         2a:97:af:40:19:3e:10:8f:2b:0c:36:6b:74:4c:99:f1:c7:96:
         db:40:9f:b1:2a:c6:2b:69:f3:93:f3:ce:f0:36:e1:ca:2e:9c:
         ad:e1:95:c5:37:e9:dc:85:f1:f6:18:d5:d8:c2:60:b1:ca:90:
         0a:8d:77:f1:13:6c:54:da:95:64:73:93:8e:54:97:be:14:08:
         a1:cf:e1:04:82:ee:09:cf:0b:54:3f:d1:56:12:37:ed:52:1f:
         1a:04:26:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----