Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/hah4hSTFJgmo49THJCQeAiCAgwU.roa
File:                     hah4hSTFJgmo49THJCQeAiCAgwU.roa (raw, json)
Hash identifier:          RCsz+adANfu3eTw/1UpcMQ0VHwVJSwQsRz8sK4stmfE=
Subject key identifier:   85:A8:78:85:24:C5:26:09:A8:E3:D4:C7:24:24:1E:02:20:80:83:05
Certificate issuer:       /CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97
Certificate serial:       13
Authority key identifier: C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/hah4hSTFJgmo49THJCQeAiCAgwU.roa
Signing time:             Wed 07 Jul 2021 07:03:49 +0000
ROA not before:           Wed 07 Jul 2021 07:03:49 +0000
ROA not after:            Thu 07 Jul 2022 02:16:35 +0000
asID:                     38846
IP address blocks:        2407:a0c0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97
        Validity
            Not Before: Jul  7 07:03:49 2021 GMT
            Not After : Jul  7 02:16:35 2022 GMT
        Subject: CN=85A8788524C52609A8E3D4C724241E0220808305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ce:b8:13:ca:6b:d9:07:39:2b:e1:5b:9e:e5:
                    12:b7:46:00:1b:04:61:71:f0:27:60:ed:c5:ca:9f:
                    fa:77:ca:de:b8:07:ef:dd:b0:8e:2b:45:91:28:05:
                    e4:88:df:c0:f7:a8:b7:4d:96:85:54:c3:1b:83:d2:
                    f7:58:86:b2:b5:f4:76:36:51:ca:33:e1:81:5c:66:
                    51:16:5a:03:45:62:8e:fc:ec:82:54:05:0e:e5:6b:
                    41:9a:23:9f:b3:2d:69:53:26:bc:77:3f:9a:81:67:
                    38:9d:c6:f8:5d:90:c3:4d:6c:fc:5d:ef:84:97:bf:
                    8d:0c:cb:8e:d9:98:43:8b:ba:82:e8:ef:53:83:55:
                    33:f1:14:5c:dc:92:78:8b:70:d2:ed:5d:55:a6:66:
                    7c:de:3c:a1:8f:a9:32:d7:61:71:b1:d8:f0:ef:4e:
                    ad:fd:9e:42:cb:82:fa:26:aa:9e:49:d2:6c:ee:9e:
                    70:c1:c4:01:74:96:e0:b7:33:d9:d9:2b:7c:9f:5e:
                    ec:ff:1f:fc:d9:77:a9:eb:2c:ed:e8:02:ed:32:33:
                    f6:f7:9d:d8:ce:67:4d:ab:a9:1b:0e:d5:58:72:42:
                    50:e4:22:66:4d:0e:87:f4:24:20:61:40:1e:39:d3:
                    0c:d2:e2:76:43:3a:e2:53:8c:d8:17:b7:b9:22:a3:
                    af:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A8:78:85:24:C5:26:09:A8:E3:D4:C7:24:24:1E:02:20:80:83:05
            X509v3 Authority Key Identifier:
                keyid:C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/w_wRajzLEFq1DaQXZ5sfnHCkvZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/hah4hSTFJgmo49THJCQeAiCAgwU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:a0c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:01:ea:d2:3f:11:dc:54:8e:69:33:1f:cc:4b:fb:f8:23:6f:
         e3:6a:21:d2:5c:1f:9e:29:b4:13:21:90:1d:97:90:44:ca:7d:
         e0:b5:34:4b:ca:c0:c8:91:ee:ed:20:26:b1:34:0a:25:68:6b:
         e5:61:05:a5:f2:ed:85:66:df:80:10:80:24:99:2d:e1:21:ed:
         49:17:b8:01:03:45:5d:c8:33:7b:08:ab:0f:16:2c:b2:92:c2:
         f8:82:7d:c9:f1:9a:9b:f2:16:fd:48:3b:a3:9f:f3:00:74:c0:
         05:63:2a:38:ff:da:22:5e:ee:c1:64:fc:49:ec:84:d4:90:a3:
         d1:7f:44:99:97:83:9f:e1:cb:97:3e:29:cd:16:dd:2a:57:c4:
         13:55:92:d4:70:60:9c:ea:8e:a0:29:97:55:9e:bf:fd:48:c2:
         b1:e7:ef:d2:86:55:11:6d:fb:48:24:cf:66:1e:ab:ff:80:8d:
         58:aa:f1:30:e8:35:f2:2c:3f:dc:af:71:58:52:8d:3f:1a:62:
         5e:97:05:9c:25:0d:30:59:78:18:9f:fa:c1:39:bf:0d:42:c3:
         3c:2d:f1:26:d3:08:74:33:9f:a8:5d:84:16:63:ac:d2:11:e5:
         c1:4c:91:2b:3d:be:55:30:52:7d:61:59:e7:a8:2d:14:f8:6b:
         fb:fc:20:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----