Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/mO6UQ4deMAroOaKnHVeX1n-8TgI.roa
File:                     mO6UQ4deMAroOaKnHVeX1n-8TgI.roa (raw, json)
Hash identifier:          kxvpeFlykQu3+RkE4uLUTJXAGOCr27jPOmc2h1atORk=
Subject key identifier:   98:EE:94:43:87:5E:30:0A:E8:39:A2:A7:1D:57:97:D6:7F:BC:4E:02
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       07FE
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/mO6UQ4deMAroOaKnHVeX1n-8TgI.roa
Signing time:             Tue 29 Sep 2020 10:06:42 +0000
ROA not before:           Tue 29 Sep 2020 10:06:42 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17716
IP address blocks:        120.96.248.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2046 (0x7fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Sep 29 10:06:42 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=98EE9443875E300AE839A2A71D5797D67FBC4E02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ce:66:56:9d:e7:0e:9e:60:c4:48:95:c2:13:
                    bc:11:88:95:76:fc:22:27:82:c8:98:31:5c:79:71:
                    8a:57:7d:44:0d:3b:7f:4c:0d:46:2a:45:af:ec:87:
                    f1:ce:31:0f:07:7c:e8:ea:1d:ba:5f:65:b4:96:bb:
                    2a:38:3b:57:f3:ed:20:75:41:70:2b:5a:ff:76:cc:
                    03:d3:20:53:51:f3:6d:7f:a5:2d:66:e3:8f:1f:21:
                    2e:e8:62:0a:47:f2:60:bf:91:4a:b3:22:fe:5c:0a:
                    0d:87:68:a8:d0:96:74:bb:48:7d:65:0a:74:19:5f:
                    c0:85:a2:fd:c0:46:9d:e9:37:5a:c3:cd:e9:1b:45:
                    11:3f:05:14:06:cf:0d:5e:4e:b7:d7:0c:61:13:92:
                    66:67:6b:11:6f:93:40:11:ad:92:ef:85:9c:d7:c8:
                    79:85:41:ea:67:01:a3:27:59:39:71:e1:42:2f:d2:
                    87:7a:11:78:7a:c5:f6:da:61:8a:6d:72:41:10:dd:
                    db:a7:0e:c9:31:25:3e:99:15:00:60:2c:c7:b0:1c:
                    49:cf:14:19:6d:c7:70:2f:8e:4b:f4:cc:e1:0a:c4:
                    0b:1c:cb:6a:b2:41:55:9e:c1:58:7c:5b:50:cb:2e:
                    e1:04:4d:ce:23:ca:33:eb:22:fb:02:43:d0:b6:2f:
                    02:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:EE:94:43:87:5E:30:0A:E8:39:A2:A7:1D:57:97:D6:7F:BC:4E:02
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/mO6UQ4deMAroOaKnHVeX1n-8TgI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.96.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:25:aa:12:e9:e5:27:98:00:ab:f2:22:7b:41:d4:79:2f:8d:
         a3:b6:47:bc:17:88:f1:5e:1d:74:c5:be:69:f1:f8:ec:08:49:
         f2:8e:bb:b0:90:da:6c:4d:2a:75:41:9a:e6:0a:e2:f4:75:7e:
         66:ab:57:42:3e:37:5c:ac:e2:39:51:df:28:01:c9:6e:ac:96:
         e9:e0:bf:14:5e:14:2b:c3:a2:8d:02:8a:c8:13:19:35:eb:fb:
         ab:f7:b0:89:97:5c:0a:b3:4e:ec:2b:57:23:49:ae:e6:a0:3f:
         09:55:69:c0:4b:f7:1b:45:60:c6:8e:f6:bf:f1:44:72:cc:5f:
         ed:8f:f9:c6:19:77:de:6b:11:e8:6e:c4:cc:29:30:95:4c:f0:
         a6:09:09:9c:69:50:87:77:a0:11:a0:d6:ea:f9:f3:f2:5e:da:
         d3:fa:11:75:6a:d4:1b:63:11:a8:4a:61:10:0c:43:7c:e2:09:
         4a:db:20:dd:57:92:88:ab:3d:e3:74:f6:55:7b:59:07:1e:ab:
         06:3e:92:3f:7d:4c:2a:ab:79:c1:51:6e:10:aa:21:09:2e:8c:
         cb:ab:00:28:0d:71:92:ae:08:7b:a8:cf:66:65:1f:4c:ef:32:
         1b:86:5a:e4:f6:e0:41:8a:cc:9a:30:f1:6a:8f:37:c3:51:20:
         2a:19:1f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----