Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/93hEVOqJmc4tbZ0ZFy35ROCK2jo.roa
File:                     93hEVOqJmc4tbZ0ZFy35ROCK2jo.roa (raw, json)
Hash identifier:          uif4Z6YPp/mRFK4p+cfSDLRsRfjqIZHP4+/K/G12a9g=
Subject key identifier:   F7:78:44:54:EA:89:99:CE:2D:6D:9D:19:17:2D:F9:44:E0:8A:DA:3A
Certificate issuer:       /CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B
Certificate serial:       077A
Authority key identifier: 39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/93hEVOqJmc4tbZ0ZFy35ROCK2jo.roa
Signing time:             Tue 29 Sep 2020 10:09:00 +0000
ROA not before:           Tue 29 Sep 2020 10:09:00 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131600
IP address blocks:        2403:a3c0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1914 (0x77a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B
        Validity
            Not Before: Sep 29 10:09:00 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F7784454EA8999CE2D6D9D19172DF944E08ADA3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:14:f3:61:65:47:75:f1:3f:3a:8a:fd:d5:88:
                    a0:de:52:da:ab:40:41:6c:6f:29:0e:52:c7:10:53:
                    aa:75:36:14:26:3c:6a:07:72:cf:12:25:a9:4d:da:
                    20:cc:03:c8:23:1c:56:27:63:aa:02:a6:01:f2:75:
                    90:b1:fa:a7:c2:eb:b5:fd:38:ee:53:6e:aa:0e:35:
                    85:8b:8f:64:80:75:6e:53:b9:fe:1f:d6:0d:6e:5e:
                    bb:85:5c:1e:35:cb:01:f3:1b:ae:8e:33:ff:20:70:
                    72:c4:36:4d:f9:a7:5b:19:1f:a3:87:98:2b:45:09:
                    08:0c:9a:54:50:34:09:ef:83:7d:1a:bf:a5:3c:83:
                    1a:58:00:6b:3a:ff:67:1d:8c:73:1c:f1:94:7f:eb:
                    55:75:78:fd:e3:93:01:1a:a8:80:39:32:51:f6:8d:
                    cd:92:2e:18:30:da:00:95:4d:1e:9c:a4:6a:e7:5f:
                    4b:16:e8:84:67:65:6a:b0:aa:36:05:7a:6d:eb:b7:
                    dc:2a:09:43:4c:56:bb:2e:f4:8a:8a:eb:68:f6:82:
                    10:a6:ff:59:f7:82:99:dc:99:9f:27:81:1a:32:b2:
                    ab:b1:cb:23:c3:8c:f9:21:01:5c:4f:72:3f:68:84:
                    05:e6:58:6b:36:f4:27:f0:da:6b:c3:2d:86:02:c6:
                    f1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:78:44:54:EA:89:99:CE:2D:6D:9D:19:17:2D:F9:44:E0:8A:DA:3A
            X509v3 Authority Key Identifier:
                keyid:39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/93hEVOqJmc4tbZ0ZFy35ROCK2jo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:a3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:06:39:2a:d1:f5:e1:7b:8d:a5:2f:a8:02:e4:ce:1a:92:08:
         b4:58:dd:d2:7b:e0:02:87:8b:39:12:4a:38:61:f4:b5:70:85:
         c1:b7:9f:09:a7:67:b4:42:78:ef:94:34:c8:76:8b:ed:5b:88:
         e5:17:0f:a6:5d:2d:2c:58:07:e7:3b:a3:71:99:f8:f6:00:cb:
         df:68:ce:9b:97:55:7f:ba:04:fc:20:6d:ef:ee:90:a4:ba:06:
         9b:73:fc:94:83:83:53:21:2a:03:61:4d:99:2c:16:08:8c:ea:
         8f:b3:22:70:e5:8c:cd:3d:ac:a6:f7:d8:db:3f:70:94:73:12:
         07:84:e4:8d:89:d4:de:f9:02:a1:8e:d4:0a:5a:a4:8e:67:0d:
         ba:b3:eb:dc:a5:60:fa:88:4e:01:ba:23:a7:c1:83:e1:60:7f:
         6f:99:37:5a:66:26:23:68:da:e2:0e:48:27:84:5b:6a:e9:53:
         5b:10:7a:fc:fa:88:9e:1d:04:a6:9b:6a:e7:f9:42:14:24:d2:
         db:1d:8a:0e:cc:51:b2:56:49:d3:79:1f:f0:51:2c:24:ff:85:
         85:1c:db:5b:91:72:d1:b1:8b:2a:0e:30:fb:0b:e3:a0:3a:46:
         8d:71:d1:8e:62:d3:f5:08:6a:71:4a:e8:a2:f2:bb:84:4a:c7:
         e2:2c:64:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----