Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/pcB4OClcZ66r0Qrr_BMFeXWHZlg.roa
File:                     pcB4OClcZ66r0Qrr_BMFeXWHZlg.roa (raw, json)
Hash identifier:          0sk2r3+bj679ZU0zp3rfDMJHDZwh+8vQFVcw6tEhm6g=
Subject key identifier:   A5:C0:78:38:29:5C:67:AE:AB:D1:0A:EB:FC:13:05:79:75:87:66:58
Certificate issuer:       /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial:       098F
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/pcB4OClcZ66r0Qrr_BMFeXWHZlg.roa
Signing time:             Wed 29 Sep 2021 02:52:31 +0000
ROA not before:           Wed 29 Sep 2021 02:52:31 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131596
IP address blocks:        61.58.160.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2447 (0x98f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
        Validity
            Not Before: Sep 29 02:52:31 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=A5C07838295C67AEABD10AEBFC13057975876658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ac:d6:77:20:7f:83:40:8c:d0:1c:c5:97:1c:
                    c5:af:cc:6f:0e:3b:2a:97:3c:f0:9f:57:a2:39:c6:
                    40:d4:a1:81:d3:7f:01:10:63:e5:14:29:2d:75:02:
                    98:5a:b4:3a:f7:ae:46:68:df:13:1e:40:f3:c2:2f:
                    6f:6e:e2:0b:3f:70:10:b2:49:73:d9:05:12:89:92:
                    57:cf:9c:4d:b2:25:5f:7e:c2:46:7b:e9:21:7c:84:
                    8a:62:a0:19:0b:c4:cc:84:40:3c:f4:c2:d9:d1:76:
                    d5:a0:91:6c:bd:67:e4:af:3f:50:fc:7b:e7:cd:2f:
                    9c:5f:2a:2f:66:1b:d9:e2:c1:96:a9:af:71:9e:e5:
                    6c:55:3a:1c:57:83:75:33:54:b0:97:56:16:9d:b1:
                    d2:ab:e7:4f:a4:8e:a7:eb:8d:1d:e9:22:54:05:8b:
                    e7:64:6b:8e:c0:62:72:5c:55:1e:d6:93:a4:83:d5:
                    e3:9e:49:8a:56:6d:1c:ba:cb:c3:9b:09:21:e9:cf:
                    63:b5:97:e5:e3:60:c7:08:a7:57:42:f0:6f:fe:05:
                    e2:18:be:7b:7c:32:bd:b5:71:26:ac:b3:cd:3f:75:
                    ae:99:c2:3a:fb:16:85:76:20:c9:d2:18:dd:13:c9:
                    43:e8:90:50:f3:39:6b:3a:dc:4f:89:e5:e1:51:be:
                    f2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C0:78:38:29:5C:67:AE:AB:D1:0A:EB:FC:13:05:79:75:87:66:58
            X509v3 Authority Key Identifier:
                keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/pcB4OClcZ66r0Qrr_BMFeXWHZlg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.58.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ca:c4:16:ce:8a:a5:1b:6c:7c:41:a2:86:a2:35:91:90:1d:c6:
         3f:f6:60:ee:5f:93:75:1b:17:5f:95:c3:8b:25:ab:e0:fb:d4:
         91:79:a6:e7:df:bb:20:d7:31:94:5f:e1:84:04:6e:91:4a:38:
         5b:c3:2a:89:71:6d:a4:d0:ef:c1:fe:e3:f9:fa:c0:e2:b6:ff:
         d2:8a:7a:9f:6b:71:b7:e5:10:1f:a8:61:04:56:30:c1:93:6c:
         60:d0:17:b7:89:3b:da:8f:4f:15:5f:e8:29:04:ab:66:2c:96:
         c6:ee:2b:20:57:5c:a2:cb:3a:0d:1c:41:40:d4:3a:29:02:ff:
         e3:99:3a:8a:7d:43:79:c2:8d:0c:e7:bb:b8:42:80:d9:f6:5a:
         44:cf:d4:5a:55:73:37:bf:a3:b7:3b:b6:44:bd:59:ce:5e:27:
         32:e3:8d:27:b5:f4:48:b7:12:7d:fe:55:b7:13:6e:66:f0:5d:
         aa:49:e4:ea:97:89:2e:ae:d8:37:8f:8d:3e:0e:09:3c:6c:12:
         b1:38:d9:62:e3:80:59:73:76:e5:9f:23:c1:d0:fa:f4:3a:29:
         9b:cd:a2:d2:d1:d5:aa:b7:5a:77:9d:4b:45:5d:7b:04:79:75:
         f8:a5:a5:05:7f:80:0a:1a:01:78:6c:6f:71:fc:0d:9e:cd:ea:
         a0:d8:83:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----