Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/uyZ7xWWX1oK-9Igptp0LzNxcU-c.roa
File:                     uyZ7xWWX1oK-9Igptp0LzNxcU-c.roa (raw, json)
Hash identifier:          tmNLN3zNXpHWRsrd0aICSsEn5rvv1Mq1YddtmfJO+xE=
Subject key identifier:   BB:26:7B:C5:65:97:D6:82:BE:F4:88:29:B6:9D:0B:CC:DC:5C:53:E7
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0988
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/uyZ7xWWX1oK-9Igptp0LzNxcU-c.roa
Signing time:             Wed 16 Dec 2020 02:19:36 +0000
ROA not before:           Wed 16 Dec 2020 02:19:36 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        210.17.43.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2440 (0x988)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Dec 16 02:19:36 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BB267BC56597D682BEF48829B69D0BCCDC5C53E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:68:c8:8a:b0:c1:3d:f3:49:b4:12:02:eb:cd:
                    42:c9:f4:4e:f9:61:b9:a6:19:0b:c8:a0:45:89:7b:
                    f3:28:23:2e:4c:9d:7f:d9:2d:df:45:a5:6a:28:21:
                    2a:4a:f8:bb:1a:da:10:c2:8d:98:ca:93:fb:88:2f:
                    40:69:13:7a:03:9f:5e:f6:c0:d4:d1:00:d6:ac:63:
                    d6:c1:cb:57:93:74:1c:2a:d2:0e:ff:35:ab:06:27:
                    3e:c0:c7:50:10:cb:77:d8:ed:e5:8d:42:a9:a9:73:
                    80:60:11:aa:87:34:74:a5:6e:88:86:40:e4:8a:0e:
                    92:cc:0a:d1:f3:83:7c:bd:fe:e0:60:8c:a0:1a:01:
                    85:10:5b:83:76:f8:eb:9d:ce:9f:7a:74:40:4e:3e:
                    f0:11:ef:32:ae:6e:24:25:e5:45:40:62:2b:d1:ac:
                    d5:02:c2:a0:af:b3:da:d7:7d:b3:3a:b9:8d:99:06:
                    11:e3:7a:f6:3e:45:f2:a4:2d:7c:b5:37:32:85:23:
                    ff:72:0e:30:46:78:3f:2e:f8:0d:ce:3a:a8:db:8b:
                    24:db:5f:3f:cb:eb:82:01:16:81:32:a1:e3:fe:09:
                    79:eb:e1:cf:79:ab:ed:07:83:c1:98:01:b9:49:b2:
                    6d:82:35:fc:59:8d:a5:a8:e2:74:e9:6d:3e:f6:b0:
                    25:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:26:7B:C5:65:97:D6:82:BE:F4:88:29:B6:9D:0B:CC:DC:5C:53:E7
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/uyZ7xWWX1oK-9Igptp0LzNxcU-c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.17.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:28:88:a6:52:c1:1f:6b:30:b9:cd:72:60:06:23:62:b3:74:
         7f:b4:bc:80:3d:c4:a2:8f:0e:e2:91:62:ee:c2:53:cb:7d:12:
         0f:e6:ef:16:5e:c6:1a:21:1c:69:b7:38:f9:a2:c5:7d:52:33:
         2d:a2:22:c6:a2:bb:dc:1f:39:86:0e:7a:ed:8b:fb:cb:c5:82:
         52:1e:4a:ec:74:a0:5a:97:87:1d:d5:b4:8d:f3:51:68:d8:97:
         1a:94:07:ab:e4:1a:a7:7a:d9:6c:e2:52:7a:ff:b7:d5:b6:19:
         ce:f6:df:97:01:00:7a:ab:7c:75:89:e7:61:0c:b9:ae:73:dc:
         5f:62:85:5b:89:a6:ae:c6:4f:4f:f6:00:97:a7:03:a4:86:34:
         71:ca:fb:95:75:c7:f6:71:0f:6c:7b:d6:99:84:c8:90:47:3f:
         ed:81:a8:d9:5a:31:83:80:03:12:2d:27:23:b4:84:ea:7a:53:
         11:81:bf:94:fd:cc:a0:ff:f0:79:1e:06:dd:a4:c3:b2:84:f6:
         a0:eb:fe:d5:78:38:82:a2:1e:cc:78:bb:f8:1e:cd:0a:ae:2c:
         7e:34:ed:8a:ae:1f:d5:82:af:ef:d6:31:59:e9:42:16:66:0e:
         34:5c:91:cb:80:e8:cf:c7:e8:77:8a:5d:d0:1f:fd:bc:6a:8a:
         b7:72:9f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----