Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/6ZcwdvdqpidBSOQrOzMlEt3t5gY.roa
File:                     6ZcwdvdqpidBSOQrOzMlEt3t5gY.roa (raw, json)
Hash identifier:          y5C6FU3TqXUOenDk6eIM5k/s0MROMYXonxdm91cQ1gM=
Subject key identifier:   E9:97:30:76:F7:6A:A6:27:41:48:E4:2B:3B:33:25:12:DD:ED:E6:06
Certificate issuer:       /CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05
Certificate serial:       0967
Authority key identifier: 87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/6ZcwdvdqpidBSOQrOzMlEt3t5gY.roa
Signing time:             Wed 29 Sep 2021 02:42:52 +0000
ROA not before:           Wed 29 Sep 2021 02:42:52 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131149
IP address blocks:        2407:7100::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2407 (0x967)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05
        Validity
            Not Before: Sep 29 02:42:52 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=E9973076F76AA6274148E42B3B332512DDEDE606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a4:f8:eb:d0:d1:46:eb:61:62:97:e8:a9:30:
                    3d:54:26:32:30:b3:5c:a4:cd:1e:a4:24:cb:54:d4:
                    17:e5:de:66:9d:e1:0e:bd:76:d1:33:17:ea:03:09:
                    9f:cd:83:ca:95:ba:66:4e:1c:f5:14:db:78:dc:ee:
                    1e:3c:c5:08:8c:5d:53:93:1c:29:c8:cd:ff:d9:a4:
                    4e:8c:8a:d1:fa:fa:bb:74:b3:75:23:20:08:55:7b:
                    d0:3f:ea:00:92:0b:21:59:2e:b9:51:29:5a:65:c9:
                    2c:3e:6b:2c:89:e4:3f:67:a5:56:1e:38:55:46:05:
                    d7:f5:26:71:50:21:08:b1:74:79:70:4e:df:69:ad:
                    e9:5d:05:a7:b5:aa:4d:55:53:a4:d0:a3:79:c3:72:
                    19:71:bb:ab:c1:a4:38:52:2c:1d:39:28:f9:de:fd:
                    2f:d5:9e:89:6f:78:ed:d7:88:7a:3d:49:df:eb:79:
                    60:c9:fa:26:30:f5:48:02:8c:e2:c4:93:b9:83:4f:
                    43:3d:f5:ae:e0:bb:eb:80:aa:65:ea:e9:9c:8a:f8:
                    bd:90:6b:c9:5a:12:eb:95:b4:2f:4c:85:03:e0:00:
                    3c:11:d1:84:12:65:5f:7b:4a:ab:4f:b5:68:70:4b:
                    4b:e3:73:c2:50:74:ed:5b:74:c4:e2:98:8b:6e:a4:
                    32:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:97:30:76:F7:6A:A6:27:41:48:E4:2B:3B:33:25:12:DD:ED:E6:06
            X509v3 Authority Key Identifier:
                keyid:87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/6ZcwdvdqpidBSOQrOzMlEt3t5gY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:7100::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:50:1c:42:5c:73:1c:d7:de:cb:4a:90:ac:3e:c4:4b:f3:67:
         3f:47:47:8d:3b:e3:7d:bf:57:a0:a4:03:83:24:42:ac:40:a8:
         bd:07:f5:9b:b6:95:41:5a:92:a4:7f:59:eb:8d:55:2d:a0:1e:
         d4:e9:f1:d1:be:81:38:ab:ed:66:36:16:bc:71:1b:db:e1:7d:
         19:b1:a2:5c:fe:43:fe:ad:45:5e:a9:78:7b:a1:c9:e1:a1:ca:
         52:93:ca:62:c5:03:18:d5:45:38:49:b9:71:a1:20:59:a6:2d:
         4b:d8:ef:98:d7:29:79:f6:d7:c8:8b:71:81:e4:06:b5:2f:36:
         06:51:e8:57:a2:1b:81:6a:56:2d:5a:f9:09:89:d5:b2:d1:4c:
         f0:0d:c0:d0:07:04:8b:eb:f9:91:4a:39:83:96:2b:19:15:09:
         ce:51:d3:d6:64:5d:77:7a:d0:81:92:31:69:86:13:db:66:ba:
         74:f9:36:69:ee:95:5e:6b:0b:c8:c5:58:f3:ff:99:ea:69:b2:
         a1:ed:47:a9:02:9d:fd:29:1a:6e:6b:4e:b6:fc:90:f1:27:0a:
         15:88:a5:0e:cb:e3:51:b2:d5:d9:a8:2a:a8:86:0f:99:cc:58:
         59:09:4e:d3:24:9c:90:07:75:bb:2c:e6:45:23:bd:e6:93:e5:
         a5:89:a9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----