Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/mumCVGbjtmYv3i_NEmP2lje9l9k.roa
File:                     mumCVGbjtmYv3i_NEmP2lje9l9k.roa (raw, json)
Hash identifier:          m//3utQa+SLHfi+AWBYWGo2uvLLCZ59rHMo2tDT+kwM=
Subject key identifier:   9A:E9:82:54:66:E3:B6:66:2F:DE:2F:CD:12:63:F6:96:37:BD:97:D9
Certificate issuer:       /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial:       0995
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/mumCVGbjtmYv3i_NEmP2lje9l9k.roa
Signing time:             Wed 29 Sep 2021 02:53:18 +0000
ROA not before:           Wed 29 Sep 2021 02:53:18 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     4780
IP address blocks:        49.213.167.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2453 (0x995)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
        Validity
            Not Before: Sep 29 02:53:18 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=9AE9825466E3B6662FDE2FCD1263F69637BD97D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f4:83:a3:bc:3b:2f:69:af:fd:6b:86:4e:e2:
                    e4:ff:1e:49:07:bd:12:bb:f1:66:52:f1:b9:4a:eb:
                    1c:9e:3d:87:94:d4:e4:83:c4:9d:91:98:8c:60:74:
                    66:e3:13:a1:07:49:00:f5:25:c6:34:09:11:d3:88:
                    fc:b9:5e:22:7a:39:6a:fd:4a:e0:53:ce:eb:2f:a3:
                    35:0e:f4:24:a8:31:38:20:0d:9d:c0:c7:e4:02:a7:
                    c7:37:cb:d1:22:fc:dc:25:34:d6:21:a0:83:40:3d:
                    33:29:1a:35:ae:cc:65:2f:9b:cd:f9:9b:f0:10:17:
                    61:02:c4:51:3b:24:93:fb:c5:bd:2c:f0:6d:01:87:
                    c9:b3:9e:e9:0e:c2:09:17:99:b6:5e:60:ce:d2:5c:
                    58:5e:77:8e:12:b0:e4:2c:74:7b:2b:cc:41:4c:3a:
                    0a:9b:e7:8e:bd:b4:f9:68:90:88:28:ab:0d:f1:85:
                    53:0a:23:f4:73:00:08:fe:a5:57:5e:64:7b:ae:9f:
                    f0:fc:33:97:41:e2:3c:ca:6c:38:31:91:dd:4b:f8:
                    82:03:59:0a:a4:25:3e:b8:9f:55:ad:4b:d2:04:e4:
                    9d:0a:c9:e0:79:ba:b9:ea:a0:4e:94:f6:dd:2c:cb:
                    d4:fe:b4:6c:ea:d3:24:00:b9:ea:52:6a:ac:c8:84:
                    3b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E9:82:54:66:E3:B6:66:2F:DE:2F:CD:12:63:F6:96:37:BD:97:D9
            X509v3 Authority Key Identifier:
                keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/mumCVGbjtmYv3i_NEmP2lje9l9k.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.213.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:2a:14:b9:17:5b:7d:7d:a1:f1:01:65:e9:f9:a0:80:80:29:
         83:6b:bc:60:1a:77:58:ef:8f:54:a2:d2:69:41:52:b0:1b:3f:
         f2:8b:48:85:41:14:08:8c:96:6c:0b:3a:e7:2d:d7:58:f8:83:
         1b:fa:17:77:d0:6f:e4:15:fa:c8:9f:9e:7c:fc:2d:4a:18:38:
         a8:47:a5:26:17:4a:6f:0c:8c:d4:99:cb:e4:16:a6:7f:4b:c4:
         45:48:6b:81:19:70:b6:50:fc:85:98:00:1a:86:4d:51:fb:06:
         3b:0f:fd:89:44:77:f1:b9:6e:12:44:2c:fa:97:bd:97:ad:bd:
         67:ef:99:94:e7:0e:a5:5c:12:4f:61:1b:b0:d0:5c:8b:4b:b3:
         4c:83:35:39:97:54:d1:c8:89:e4:69:40:a3:7b:7e:9e:72:7a:
         6f:f5:39:b8:94:bc:59:57:26:c6:3e:36:77:2f:f2:af:4c:82:
         71:91:d6:b9:a6:13:09:48:d9:4b:9d:ad:25:ff:37:d9:20:69:
         d7:16:9c:98:33:e4:56:c1:e0:3e:28:c6:18:0e:40:3d:0d:54:
         73:c4:99:4a:78:f8:ef:67:8a:05:e7:ff:af:48:e0:2c:4c:46:
         5e:67:38:1c:bb:8f:6d:6d:4a:9c:05:39:45:80:b0:4f:45:54:
         64:a5:a4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----