Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/4ifnevt0hLLOApPFgM9MyiTLBLE.roa
File:                     4ifnevt0hLLOApPFgM9MyiTLBLE.roa (raw, json)
Hash identifier:          Z+RPTMJfdp1mEr4zjIKxBzOqwfOyPTmL9PPMfxguQUc=
Subject key identifier:   E2:27:E7:7A:FB:74:84:B2:CE:02:93:C5:80:CF:4C:CA:24:CB:04:B1
Certificate issuer:       /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial:       0C9C
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/4ifnevt0hLLOApPFgM9MyiTLBLE.roa
Signing time:             Mon 16 Nov 2020 06:46:24 +0000
ROA not before:           Mon 16 Nov 2020 06:46:24 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18180
IP address blocks:        2404:178:33::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3228 (0xc9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
        Validity
            Not Before: Nov 16 06:46:24 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E227E77AFB7484B2CE0293C580CF4CCA24CB04B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:be:56:2f:bb:71:b6:d5:dc:9d:97:d2:ec:2b:
                    3c:8b:1c:5c:92:0e:f5:e7:88:5e:ad:76:6b:bd:ba:
                    2b:4f:1d:6b:92:ca:3c:d3:de:2c:20:7f:4d:62:8d:
                    e1:03:fb:a1:36:1a:ed:13:e6:41:96:29:6f:4b:5c:
                    b3:bf:0e:08:ed:f1:bf:75:98:35:41:3f:48:11:93:
                    52:9c:26:89:72:66:81:c5:7f:22:cf:f4:49:7b:40:
                    68:e9:60:86:c4:1e:5c:8f:73:49:fd:9f:ce:82:06:
                    11:f6:56:a7:09:90:e8:f1:b7:84:20:49:b7:8d:90:
                    0c:08:4f:98:dd:e4:e0:16:f9:d7:f9:85:53:8c:1e:
                    93:84:33:21:30:31:e8:29:1c:8d:f0:51:e4:72:0c:
                    30:b8:31:05:40:b6:87:c6:0b:51:2b:a3:5d:bd:e3:
                    3c:7f:2b:2d:d0:71:49:a5:9b:0d:30:43:d8:4e:09:
                    c3:e7:6d:10:c1:b7:54:3a:ef:b7:dd:69:65:d3:88:
                    d4:d6:f6:af:e6:29:fa:1b:54:5a:53:f8:f1:45:29:
                    dc:1e:b6:17:ac:bc:f1:49:f4:8f:79:db:4a:8e:e4:
                    48:d5:61:fd:5c:c0:d1:68:4d:c2:3a:24:fd:30:76:
                    5b:b2:cd:8f:98:97:70:df:aa:ef:c7:38:bc:62:fa:
                    65:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:27:E7:7A:FB:74:84:B2:CE:02:93:C5:80:CF:4C:CA:24:CB:04:B1
            X509v3 Authority Key Identifier:
                keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/4ifnevt0hLLOApPFgM9MyiTLBLE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:178:33::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:bb:bd:e1:be:74:a0:5f:87:77:d8:96:02:37:de:bb:c2:32:
         f8:06:73:8c:d9:af:d1:73:24:be:56:01:12:6b:67:e3:04:6c:
         1a:77:5c:75:ad:35:d6:69:b8:68:bf:39:47:f4:92:99:3a:78:
         06:2b:cb:64:f3:56:58:6b:72:27:dc:fc:6f:38:6c:01:6e:3a:
         56:ec:be:38:c7:f1:e0:7f:42:27:f0:30:16:47:6b:e4:5b:66:
         20:2c:7b:8f:ed:d6:4f:a9:21:b1:1f:e4:4e:13:5f:19:a2:26:
         84:c6:c5:1c:01:0c:53:b4:9d:9c:52:e0:3e:cd:5d:e4:bf:83:
         e1:ce:fe:4b:81:ae:ed:10:e8:25:0f:64:fd:2b:07:2d:74:a7:
         2b:36:51:b5:27:06:36:91:19:68:5a:75:09:8a:df:0f:c3:58:
         5d:ac:48:75:62:5b:82:db:42:77:ee:92:d0:3a:77:27:f2:f6:
         c5:18:a6:0d:b8:bb:34:4a:de:ec:99:a6:1b:82:f9:14:69:36:
         58:30:76:99:ad:f0:07:bf:07:36:5e:ce:cd:68:bf:62:c8:08:
         0a:f4:ff:68:97:e3:a4:5a:d9:1b:6a:8d:88:78:4f:ca:18:28:
         7e:66:30:9d:5b:87:a3:05:e4:81:3c:6a:a2:03:29:4e:19:36:
         fd:95:5b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----