Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/qyrgyn0aW-ZFrvieMgOcDZiy_kU.roa
File:                     qyrgyn0aW-ZFrvieMgOcDZiy_kU.roa (raw, json)
Hash identifier:          rNuCbEmQi4Y6fls2LnamMCjOyT2lm0pu3X56OA3gZrU=
Subject key identifier:   AB:2A:E0:CA:7D:1A:5B:E6:45:AE:F8:9E:32:03:9C:0D:98:B2:FE:45
Certificate issuer:       /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial:       0784
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/qyrgyn0aW-ZFrvieMgOcDZiy_kU.roa
Signing time:             Tue 29 Sep 2020 09:59:58 +0000
ROA not before:           Tue 29 Sep 2020 09:59:58 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131596
IP address blocks:        61.58.80.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1924 (0x784)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
        Validity
            Not Before: Sep 29 09:59:58 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=AB2AE0CA7D1A5BE645AEF89E32039C0D98B2FE45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:65:26:dc:85:66:84:48:dd:f8:3f:e1:22:df:
                    7a:5b:b5:74:bf:3a:dd:38:7e:23:c3:14:8d:de:33:
                    d2:50:d9:d9:42:61:51:a2:aa:36:ce:ec:88:51:e9:
                    d1:fe:d8:ed:65:6f:ce:57:fb:b9:13:51:36:14:94:
                    82:1e:9e:08:c0:75:5e:69:84:b5:b9:bf:22:38:25:
                    90:21:e6:a6:ba:aa:0b:c8:62:8a:4e:28:06:ef:bf:
                    7b:e1:3c:d6:7b:a5:09:c1:2f:7b:e9:0b:d7:5b:6d:
                    fd:74:2e:98:80:b5:59:e2:56:30:ce:14:53:25:66:
                    22:75:71:7a:ec:f1:6a:27:09:e9:80:8d:4c:bc:da:
                    18:1c:6c:dc:9a:73:d0:a5:c5:a3:f2:24:9b:ce:f4:
                    da:e9:dc:9c:61:2c:71:6a:1c:74:e7:e5:61:60:96:
                    ca:74:55:e7:56:73:0c:1a:a8:e4:2e:85:95:9e:fe:
                    a8:65:f3:e6:d9:55:cf:79:2b:3d:b6:96:e4:5c:4b:
                    f4:6c:f2:3c:c9:bb:85:42:55:ec:e7:3d:4f:49:df:
                    66:44:4c:93:8d:76:68:56:8b:bc:8c:0d:b7:02:78:
                    96:0a:db:63:6a:7f:1d:51:72:6b:ce:63:2a:3c:39:
                    21:bd:3a:20:3e:53:45:03:5f:22:1c:08:32:97:34:
                    bd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2A:E0:CA:7D:1A:5B:E6:45:AE:F8:9E:32:03:9C:0D:98:B2:FE:45
            X509v3 Authority Key Identifier:
                keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/qyrgyn0aW-ZFrvieMgOcDZiy_kU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.58.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         96:ee:43:91:cb:e0:36:e5:af:3f:6c:c1:bf:52:c0:27:72:f7:
         21:3c:35:18:a6:d0:2d:5a:9c:28:2a:80:db:0f:94:4d:4c:bc:
         f7:1b:e1:73:1d:9f:8d:49:c7:ea:43:d3:6d:42:0a:a6:5b:e6:
         68:e6:a0:9a:6f:1c:75:e8:b6:12:43:13:38:71:ed:7f:d3:85:
         10:a7:d3:f5:8a:a9:0f:29:9d:3a:76:7d:00:ad:a8:f9:69:1e:
         af:0d:d9:f0:20:f3:fe:83:fe:b5:c0:53:3e:96:0b:57:bb:8b:
         3e:0f:02:40:4c:90:09:c7:cd:1d:7b:60:9c:67:c3:eb:07:23:
         09:49:d3:50:64:79:09:56:ad:57:20:8f:47:9f:59:46:b2:3d:
         df:d1:41:10:d3:2c:5f:64:3b:c8:3a:de:7c:2a:ac:4a:7d:5c:
         8e:a9:53:1d:2d:f6:5f:9b:ea:b2:b0:a9:35:48:20:eb:36:f7:
         95:ef:45:fc:17:16:45:b8:b8:d8:27:18:cf:29:36:5b:f3:47:
         8e:0d:fc:fb:aa:4b:d0:30:c4:f2:24:49:27:f7:2c:64:c5:7c:
         45:fb:89:57:fb:9e:ef:c0:f9:5b:2b:6a:c0:db:44:8a:cd:b0:
         0a:bd:e4:e6:3c:d0:f1:ed:13:4f:88:59:ed:70:66:4d:40:7f:
         2e:68:85:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----