Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/cqFqgXPxZolOEnGfsg-gZJRAeyo.roa
File:                     cqFqgXPxZolOEnGfsg-gZJRAeyo.roa (raw, json)
Hash identifier:          SvpL20b2ch6nn7ZPRibAyR/xtqEY1cCawTQfeUcpX/Q=
Subject key identifier:   72:A1:6A:81:73:F1:66:89:4E:12:71:9F:B2:0F:A0:64:94:40:7B:2A
Certificate issuer:       /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial:       0782
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/cqFqgXPxZolOEnGfsg-gZJRAeyo.roa
Signing time:             Tue 29 Sep 2020 09:59:21 +0000
ROA not before:           Tue 29 Sep 2020 09:59:21 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18182
IP address blocks:        61.62.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1922 (0x782)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
        Validity
            Not Before: Sep 29 09:59:21 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=72A16A8173F166894E12719FB20FA06494407B2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:17:fd:fc:b1:25:c8:69:5f:8d:ac:c0:80:76:
                    8a:fb:0e:14:01:9a:a7:5e:91:6e:02:1e:10:4b:79:
                    7d:be:99:21:7f:0b:62:d6:8c:43:e8:85:55:b9:04:
                    87:21:9c:be:99:49:d4:92:e1:21:e0:7a:57:5b:38:
                    d3:28:60:ac:c2:88:81:41:7f:16:9a:a9:74:0a:d4:
                    56:e8:27:b0:6d:74:8e:51:8a:56:ae:c2:9c:4c:a5:
                    c0:b8:92:42:d5:bc:d6:0a:cf:c3:ee:f7:12:9d:6e:
                    fc:5a:c9:ca:5b:b8:24:4a:4e:30:17:94:50:a9:6b:
                    e7:22:ee:4d:ac:ab:40:78:2b:88:be:ac:1e:f3:1d:
                    3c:74:e2:c0:cd:45:22:a1:14:b1:a8:5e:53:66:f2:
                    7c:14:c2:36:6f:a6:11:42:07:3a:0f:4f:84:87:10:
                    13:6e:64:0a:d0:c4:1e:3a:75:11:e6:a5:2b:a5:c6:
                    de:26:1d:d0:be:22:54:42:ed:6e:07:e8:34:1a:0f:
                    d3:74:3c:ce:05:3d:d7:43:50:0b:7e:20:74:5b:11:
                    47:46:99:c4:ba:80:d1:57:76:87:95:d0:16:98:a3:
                    fb:e5:14:89:0d:80:b9:d5:ad:e4:c7:ca:28:e6:4d:
                    65:4e:2b:1e:4d:16:1f:64:ba:66:b9:56:43:1b:56:
                    34:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A1:6A:81:73:F1:66:89:4E:12:71:9F:B2:0F:A0:64:94:40:7B:2A
            X509v3 Authority Key Identifier:
                keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/cqFqgXPxZolOEnGfsg-gZJRAeyo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.62.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         57:4f:a5:ab:74:4f:78:c8:5d:9f:fe:c1:da:24:f3:12:df:bf:
         98:37:e6:98:ee:d9:e3:91:f5:41:18:20:73:14:11:33:92:5e:
         c1:12:17:f5:51:63:99:1d:fa:23:4a:6c:fe:0b:e0:92:d0:af:
         02:fd:11:3c:3b:a5:ae:62:4d:b8:77:35:8e:c8:67:27:55:de:
         3f:38:0c:30:67:2e:d1:e8:79:03:4f:b9:16:46:7d:48:13:f5:
         03:06:05:23:e2:a8:6f:0c:94:e9:f2:91:67:03:8d:3b:91:98:
         d2:e6:5f:7a:4f:3f:f1:ce:37:7c:01:0b:39:d8:98:ea:ee:ee:
         2a:55:45:70:c7:85:8c:3c:4c:ee:2b:fa:8b:a5:64:94:c1:f4:
         82:2a:c2:06:9e:3d:c0:26:8b:09:06:8e:3d:79:f6:b4:53:a0:
         9c:0b:99:ca:67:8a:f3:db:5c:aa:2c:47:0c:f5:32:33:64:69:
         44:08:f0:68:16:7c:67:3e:97:f4:d5:61:b0:cd:c6:79:31:90:
         fc:10:d2:bf:42:e7:14:9e:e3:b2:7d:41:28:20:db:46:be:f3:
         12:aa:2c:2b:c8:61:94:f7:cc:94:ca:a4:25:6c:ea:80:af:1e:
         0f:8d:8a:9c:f7:9e:e6:09:fe:bd:18:9f:26:f5:c5:c5:50:21:
         1f:d8:90:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----