Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/yvwR87EebAC4swxLhLqQFIhyJqw.roa
File:                     yvwR87EebAC4swxLhLqQFIhyJqw.roa (raw, json)
Hash identifier:          DpcSHH/pl1qzFRP1Vf0Xwr8oVrFIbP2VA9KwUaUTq58=
Subject key identifier:   CA:FC:11:F3:B1:1E:6C:00:B8:B3:0C:4B:84:BA:90:14:88:72:26:AC
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       0C4E
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/yvwR87EebAC4swxLhLqQFIhyJqw.roa
Signing time:             Wed 29 Sep 2021 02:49:39 +0000
ROA not before:           Wed 29 Sep 2021 02:49:39 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        124.12.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3150 (0xc4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Sep 29 02:49:39 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=CAFC11F3B11E6C00B8B30C4B84BA9014887226AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:09:ee:f0:70:18:90:ea:ae:b4:94:b1:ce:ad:
                    57:62:3a:85:b9:db:96:bc:4b:09:da:fe:ab:8f:4a:
                    39:28:e0:7c:98:a8:a2:d7:22:98:41:bf:af:bf:1b:
                    1b:b0:b6:a0:42:fc:fc:9c:0b:0d:d5:55:45:dc:7f:
                    9b:9f:9d:73:6b:c8:99:13:dc:e1:e9:0b:04:53:0d:
                    93:c4:41:86:1b:3c:86:2a:b5:ee:66:09:70:98:50:
                    03:01:43:ee:31:32:f0:aa:f9:bf:9a:48:f7:85:ad:
                    8f:27:83:0f:17:7e:df:64:58:81:6b:05:fd:d6:da:
                    5b:e3:ea:4b:43:eb:5f:ba:db:be:48:9d:6f:ea:64:
                    02:1d:29:a0:15:46:c1:ea:96:be:8b:7d:ea:e6:82:
                    80:e1:75:e0:87:53:70:73:b4:47:1d:4f:f4:e4:d3:
                    b0:31:1e:63:3b:5e:22:12:d1:3c:b7:eb:64:55:f8:
                    14:69:51:55:65:25:a7:7a:2b:fb:00:47:b6:22:40:
                    68:0f:c9:b0:63:53:d3:c6:6a:ea:98:8e:69:db:09:
                    d3:c1:f8:5f:c9:1a:be:8c:ba:30:8d:65:84:d6:bf:
                    26:3b:7f:24:19:23:29:31:05:3f:a2:6b:ee:7a:3b:
                    31:a7:f3:90:0c:d3:12:35:63:df:3d:03:66:17:75:
                    ad:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FC:11:F3:B1:1E:6C:00:B8:B3:0C:4B:84:BA:90:14:88:72:26:AC
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/yvwR87EebAC4swxLhLqQFIhyJqw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.12.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7c:3d:55:9d:bb:4c:b1:d6:10:fb:c0:83:bc:c3:fc:76:22:55:
         f3:4d:36:2d:3c:30:5e:ac:d8:fe:e2:11:34:e4:9d:28:6d:4f:
         63:13:23:8b:ae:d2:7e:62:72:7a:a4:83:5c:cf:83:dc:eb:ec:
         cf:fe:68:12:55:05:5e:a4:cd:16:a2:36:b6:6f:0b:d1:1c:c1:
         5d:cd:3e:00:d4:6e:ba:48:19:18:a1:86:c5:6b:7d:11:e6:14:
         fe:3b:5c:90:3a:ce:67:4f:89:aa:1f:2f:b8:6e:98:a6:f4:14:
         18:8d:65:9d:ac:3a:32:ed:d4:61:2d:21:ff:03:5b:1d:7b:26:
         76:21:75:c4:3c:63:6e:2c:19:de:03:99:d5:0c:a1:a9:76:04:
         c1:8a:73:47:44:16:3b:73:92:62:e3:4a:37:16:0e:51:1f:89:
         3a:50:3c:5f:88:f0:bf:6b:dc:43:6d:14:61:42:1f:7c:e4:8e:
         68:94:4d:36:aa:7f:50:ae:d1:a2:ba:5d:61:74:aa:4b:cb:c3:
         ad:3f:b6:b7:c0:ed:c4:07:ce:cb:1e:fa:fd:1f:f7:90:b8:30:
         5f:e2:d4:b1:43:52:6f:eb:a1:eb:40:52:7b:af:3d:02:81:31:
         e4:b9:2f:0c:1f:0b:f4:bc:53:cf:b9:25:52:18:82:f5:c2:b0:
         3d:41:c6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----