Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/ZyYD7ReGnW8YdXPwUWuYvROsyxQ.roa
File:                     ZyYD7ReGnW8YdXPwUWuYvROsyxQ.roa (raw, json)
Hash identifier:          JzDpUUs+eE3WSYgE+NqoSoTbaQJxh6I9kIPiYMFFH30=
Subject key identifier:   67:26:03:ED:17:86:9D:6F:18:75:73:F0:51:6B:98:BD:13:AC:CB:14
Certificate issuer:       /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial:       077C
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/ZyYD7ReGnW8YdXPwUWuYvROsyxQ.roa
Signing time:             Tue 29 Sep 2020 10:00:55 +0000
ROA not before:           Tue 29 Sep 2020 10:00:55 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18049
IP address blocks:        61.60.224.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1916 (0x77c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
        Validity
            Not Before: Sep 29 10:00:55 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=672603ED17869D6F187573F0516B98BD13ACCB14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5e:cd:04:a9:6f:05:92:02:c4:9a:ba:99:8b:
                    e2:a0:44:25:37:be:73:63:14:f2:04:6c:4d:da:92:
                    34:30:15:7c:2a:6d:e7:49:a7:26:74:fb:cd:67:94:
                    c0:4a:8e:c5:fe:bf:4a:03:e0:d3:3f:d2:5f:51:e7:
                    9f:88:a4:d5:1a:d3:09:34:c0:53:10:13:d2:2a:8e:
                    fd:a7:46:fd:03:17:e2:30:50:f2:21:e8:e0:7c:68:
                    63:5c:04:87:dc:2c:36:a0:f2:df:0b:76:e1:e4:ac:
                    b5:9e:5f:38:db:9d:0f:73:91:c5:26:cb:75:b4:2f:
                    a5:26:25:04:9e:bb:09:d3:a6:ef:e0:31:ef:94:80:
                    3f:84:95:bd:83:09:bd:7c:66:81:57:cd:31:0c:bf:
                    ab:03:74:e0:ad:84:0b:61:53:cc:64:93:6e:a5:4d:
                    07:0e:f4:f0:a1:78:f1:a0:d1:c0:98:83:a7:95:05:
                    b6:fc:f2:58:42:74:57:f5:99:db:ff:b7:91:aa:44:
                    17:fc:8b:87:5c:5b:f0:43:70:f5:76:43:dd:87:8b:
                    f4:2a:82:e3:e0:c4:79:49:a9:cb:53:2a:4f:07:99:
                    51:3b:63:60:32:e9:c6:84:97:0b:5e:8a:99:80:3e:
                    35:dc:b2:3e:f7:53:52:35:04:99:37:cc:cc:8f:13:
                    fd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:26:03:ED:17:86:9D:6F:18:75:73:F0:51:6B:98:BD:13:AC:CB:14
            X509v3 Authority Key Identifier:
                keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/ZyYD7ReGnW8YdXPwUWuYvROsyxQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.60.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b6:45:00:e6:4d:33:a7:8e:9c:06:5e:b0:a3:8b:bf:52:6e:7f:
         35:d3:63:d3:c9:98:c7:14:b8:1c:52:32:cb:f2:1e:f7:da:c5:
         fe:21:11:1a:7e:2b:b8:c8:af:b9:4a:16:33:27:ca:1b:3b:16:
         42:c1:31:34:ac:02:83:19:fc:b9:0c:01:51:85:49:c9:31:fe:
         46:47:48:d6:67:d5:5d:17:01:51:01:b9:28:2b:18:67:c4:77:
         b7:3a:cf:df:ea:f2:34:7b:d5:c8:19:8a:fc:dd:64:4e:81:0a:
         ae:d9:f1:8b:e4:b3:51:1e:c2:fa:0b:1e:9b:10:e5:e0:a3:6f:
         6b:6e:be:1c:63:c9:86:f3:d8:e9:0d:f8:e2:b3:77:4e:49:9f:
         53:5a:94:5b:27:74:82:02:20:3a:3b:69:94:5e:0f:78:77:45:
         79:4f:d2:8e:34:32:9a:22:d8:7a:d7:83:11:01:2e:5b:e4:c7:
         d1:71:26:f3:83:ce:4d:5f:2f:17:df:c2:80:2f:a5:b6:9a:fa:
         9b:2e:34:f1:64:e3:9e:60:55:2a:4c:2f:71:f4:a0:31:49:55:
         4c:27:c2:cd:23:aa:fc:32:8b:c3:9d:83:08:f3:65:d5:ba:6a:
         33:21:03:c5:68:da:4b:48:51:f2:b3:7f:89:14:2d:aa:e6:85:
         31:d7:65:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----