Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/_eTFUy9X3inWLCBdCmFLu0tAgtU.roa
File:                     _eTFUy9X3inWLCBdCmFLu0tAgtU.roa (raw, json)
Hash identifier:          SjL1cB5njVWeI/ckxQ/FaJmmF/ILXX6iUDmTrUoW98s=
Subject key identifier:   FD:E4:C5:53:2F:57:DE:29:D6:2C:20:5D:0A:61:4B:BB:4B:40:82:D5
Certificate issuer:       /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial:       0C8A
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/_eTFUy9X3inWLCBdCmFLu0tAgtU.roa
Signing time:             Mon 16 Nov 2020 06:45:00 +0000
ROA not before:           Mon 16 Nov 2020 06:45:00 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18180
IP address blocks:        2404:178:24::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3210 (0xc8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
        Validity
            Not Before: Nov 16 06:45:00 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=FDE4C5532F57DE29D62C205D0A614BBB4B4082D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d4:db:78:00:87:74:33:e0:7f:dd:72:c0:f4:
                    1c:64:bf:64:59:48:c2:63:de:6a:66:f0:1c:25:7c:
                    20:6d:9e:88:25:2d:22:c5:92:18:25:e7:15:93:19:
                    a6:0b:97:a0:86:83:7c:41:9c:0e:9c:41:3a:7b:b9:
                    55:e9:6d:1d:1a:a8:fc:83:ed:98:33:20:e0:03:a2:
                    67:8a:d8:46:9c:64:dc:c8:e4:91:da:7f:77:a0:4c:
                    47:1c:14:a8:60:fe:f5:3f:2d:40:91:ea:5b:17:1c:
                    83:72:0f:4f:b1:94:31:ff:8b:f6:18:f5:9d:bd:90:
                    25:dc:b3:3a:fa:9c:53:3f:0b:ca:29:e9:dd:29:7c:
                    2e:6c:f9:9e:be:72:44:55:e1:57:45:89:e4:7c:e4:
                    6f:f5:94:4a:05:61:39:62:fd:97:40:91:ff:3b:13:
                    c0:9c:b3:a3:77:e7:7e:08:e5:0a:86:84:51:ef:a7:
                    07:90:ab:9b:40:c9:dc:e7:de:58:82:92:cb:ab:0d:
                    1d:ab:da:65:ca:4a:99:62:d8:d2:a2:ff:9d:15:7d:
                    95:57:da:24:df:d4:c3:07:de:94:ee:2e:5f:8e:98:
                    9c:2e:e9:37:7a:c4:64:06:b3:01:da:82:49:42:d8:
                    21:23:cc:ee:fe:f4:06:60:15:89:06:fa:1c:03:f0:
                    06:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E4:C5:53:2F:57:DE:29:D6:2C:20:5D:0A:61:4B:BB:4B:40:82:D5
            X509v3 Authority Key Identifier:
                keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/_eTFUy9X3inWLCBdCmFLu0tAgtU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:178:24::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:60:48:93:82:d7:8b:6f:60:a6:58:a4:1d:52:53:af:bb:fc:
         dd:f5:8f:ed:54:30:6e:c2:ba:d0:af:48:eb:4d:0d:e4:a0:3b:
         54:35:d1:45:c6:ce:6f:13:0a:28:e0:7d:23:d5:3a:45:ee:ed:
         f8:42:34:ad:19:a2:96:32:86:ff:51:46:ac:36:ee:1c:21:8c:
         b5:d7:ad:74:af:ac:a6:cc:ac:81:3c:51:a6:7d:d0:bd:c8:b2:
         24:a7:f9:c3:05:2b:e7:e6:e2:41:bb:70:4b:66:92:02:3a:64:
         0c:52:3e:16:fb:4e:18:84:64:d6:fa:12:1d:ec:ac:c1:d7:40:
         b4:ce:96:6b:c6:ce:be:29:e5:54:40:81:44:d3:4a:6b:26:93:
         32:21:85:0f:ed:5c:35:af:7c:9e:55:7f:2e:56:80:b6:c5:ee:
         dc:00:48:b2:c6:59:cf:d8:42:fe:6e:3d:b2:df:e8:5a:b3:92:
         7c:27:cb:8c:a2:cd:02:60:5d:bc:6e:c6:10:56:8e:46:70:0a:
         7c:93:e8:0d:e1:58:50:e9:f2:ce:47:38:06:42:0f:05:a0:68:
         13:6b:cc:b2:98:99:ab:58:eb:e3:51:69:33:a3:aa:99:ef:d2:
         6b:15:c0:f8:4e:55:96:07:09:e9:16:a0:9f:f1:0a:12:79:bd:
         9b:a4:90:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----