Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/1fGZmGCDbzTn75Y8tZ3HVtUYCkY.roa
File:                     1fGZmGCDbzTn75Y8tZ3HVtUYCkY.roa (raw, json)
Hash identifier:          8YZm/6cfeTyhKYsWE3A7kksrMIkN4U1VhIUFtRySj38=
Subject key identifier:   D5:F1:99:98:60:83:6F:34:E7:EF:96:3C:B5:9D:C7:56:D5:18:0A:46
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       07E4
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/1fGZmGCDbzTn75Y8tZ3HVtUYCkY.roa
Signing time:             Tue 29 Sep 2020 10:06:36 +0000
ROA not before:           Tue 29 Sep 2020 10:06:36 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     1659
IP address blocks:        163.13.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2020 (0x7e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Sep 29 10:06:36 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D5F1999860836F34E7EF963CB59DC756D5180A46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ff:60:cd:e9:f1:d2:8b:50:79:c5:a4:d5:e2:
                    75:6f:4d:a1:09:e9:83:8e:5f:9d:da:83:ed:c8:f1:
                    d0:7d:37:5a:3d:4c:72:ca:19:4e:8c:14:c7:d7:d4:
                    bf:d6:9f:1e:e8:b4:d4:77:bd:9d:fb:78:02:28:67:
                    22:e4:40:b6:6c:07:b3:a6:8c:e6:fb:18:f3:ac:5d:
                    70:73:00:47:10:ba:1b:ed:e5:95:13:30:bd:4c:36:
                    80:08:03:bf:08:d4:8b:8c:1f:96:c0:5c:6c:2f:30:
                    f4:4f:ea:36:3f:29:7a:5d:6d:1b:26:c0:30:1c:dc:
                    b0:fc:01:aa:c2:bc:ae:fb:22:27:1a:00:d8:c2:6e:
                    72:5a:ff:48:98:e0:43:43:7d:9f:03:d7:dd:8a:fd:
                    89:7f:3c:4a:d7:19:4a:3c:4f:b7:b8:f6:f1:7e:01:
                    ae:a4:0b:f4:16:7d:b2:ce:3d:5d:83:ec:e3:b3:a4:
                    a9:0d:07:fd:31:97:44:8f:d8:fc:1b:1e:a2:a6:35:
                    64:b6:ea:d4:b9:53:7a:e7:a9:09:57:45:4d:82:01:
                    0e:52:7f:b8:f0:9f:13:21:4d:53:42:e8:76:b1:e4:
                    8f:25:c5:6f:d2:d9:28:4f:be:6e:3a:95:f1:11:24:
                    33:01:e8:3b:e5:bf:e6:6b:e4:f2:07:2d:d1:85:e0:
                    e9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F1:99:98:60:83:6F:34:E7:EF:96:3C:B5:9D:C7:56:D5:18:0A:46
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/1fGZmGCDbzTn75Y8tZ3HVtUYCkY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.13.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7d:9e:09:56:b3:ad:c5:d6:4e:8d:d6:0a:ca:e8:a1:51:db:7c:
         3e:6e:35:53:ba:b5:13:b4:59:48:50:95:f6:14:f6:62:63:c3:
         fa:c1:6b:91:98:a3:a9:51:78:8c:3e:82:e6:e9:87:ea:32:83:
         94:3e:7b:6c:5b:2f:94:e0:dd:cc:54:e1:f2:e9:52:74:89:97:
         bf:7d:1c:f2:28:b9:1a:cc:38:0f:b1:4c:04:20:49:ac:93:f6:
         e9:d6:c9:01:65:38:d6:5e:f5:e0:8e:89:a6:47:e0:f1:0a:22:
         b5:25:4a:54:4a:d3:96:ae:35:90:c0:01:52:c7:bb:16:27:da:
         62:d6:d8:f7:47:a4:06:6c:40:a8:4e:bb:87:d9:01:db:03:5c:
         e5:99:73:f7:16:24:0a:ef:a4:f3:e7:e2:38:16:3b:c7:91:49:
         0e:b6:ea:50:16:06:78:b8:82:17:43:9d:05:dc:41:19:58:ae:
         6d:64:99:32:cc:91:82:b3:fd:c5:9f:f4:9b:ee:11:b3:4d:8d:
         74:c7:47:8f:57:9b:a6:77:08:37:6f:5d:11:5d:3c:7f:22:73:
         0f:72:b0:dc:df:56:5c:87:65:a5:b5:d1:15:68:4f:25:26:c9:
         6b:22:15:5e:4f:82:48:71:03:70:36:87:55:da:d1:81:88:12:
         9f:e0:82:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----