Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWDS/7etm-KzBjscz8VrtRSJRR2l0VdU.roa
File:                     7etm-KzBjscz8VrtRSJRR2l0VdU.roa (raw, json)
Hash identifier:          qiptv+u51789dnbJfouwf8K8jqfrG7YpF9qeNjnFa30=
Subject key identifier:   ED:EB:66:F8:AC:C1:8E:C7:33:F1:5A:ED:45:22:51:47:69:74:55:D5
Certificate issuer:       /CN=291BAF6A0C176CE0A32423666BCE78F9D91824CB
Certificate serial:       0615
Authority key identifier: 29:1B:AF:6A:0C:17:6C:E0:A3:24:23:66:6B:CE:78:F9:D9:18:24:CB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KRuvagwXbOCjJCNma854-dkYJMs.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/7etm-KzBjscz8VrtRSJRR2l0VdU.roa
Signing time:             Mon 07 Dec 2020 09:40:12 +0000
ROA not before:           Mon 07 Dec 2020 09:40:12 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18041
IP address blocks:        103.147.22.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1557 (0x615)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291BAF6A0C176CE0A32423666BCE78F9D91824CB
        Validity
            Not Before: Dec  7 09:40:12 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=EDEB66F8ACC18EC733F15AED45225147697455D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:29:44:b7:07:f8:ea:59:ca:b3:36:f2:1a:d5:
                    94:34:8d:03:bc:d5:4c:bc:f3:0f:00:9e:8c:4a:09:
                    14:d3:83:df:95:61:6e:fe:91:20:f0:06:27:c8:46:
                    25:c4:8d:a1:88:ad:19:a9:dd:b2:ae:0a:3f:d6:6f:
                    67:9f:d1:a7:56:e3:ed:a8:94:73:24:ff:a0:55:4a:
                    a6:a3:ae:65:0c:6e:99:b2:bd:3f:8f:12:25:29:df:
                    85:0e:e5:5d:00:f8:87:35:e5:9a:36:73:62:d0:c3:
                    ee:fe:b0:48:9e:a4:fe:d6:d1:47:23:be:24:38:bf:
                    6b:e4:47:d4:3a:bf:ca:2f:25:f6:d3:8d:54:51:c6:
                    8e:45:a9:61:9f:e3:e7:3e:0e:e5:80:42:be:55:3a:
                    45:41:51:53:ba:b4:ee:c1:4d:0e:44:b0:b8:05:97:
                    0f:ea:23:d7:5f:65:f0:a7:64:91:8a:2c:d1:b0:de:
                    f8:80:0b:a2:be:bc:6d:6f:e6:52:c2:bd:b5:c7:7a:
                    73:db:26:9d:5f:65:1c:e1:2a:1e:cf:be:ad:08:91:
                    d9:63:d9:9e:58:6d:0d:0b:9c:cc:13:8c:17:0b:b0:
                    b4:b4:3e:f7:f8:a6:03:8b:10:bf:97:4c:49:67:d0:
                    d6:7c:fa:11:49:79:1f:00:32:01:d4:a8:a1:ba:62:
                    99:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EB:66:F8:AC:C1:8E:C7:33:F1:5A:ED:45:22:51:47:69:74:55:D5
            X509v3 Authority Key Identifier:
                keyid:29:1B:AF:6A:0C:17:6C:E0:A3:24:23:66:6B:CE:78:F9:D9:18:24:CB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/KRuvagwXbOCjJCNma854-dkYJMs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KRuvagwXbOCjJCNma854-dkYJMs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/7etm-KzBjscz8VrtRSJRR2l0VdU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:ed:03:1d:36:92:86:4e:57:0e:e3:ed:c4:d9:d3:04:f9:91:
         51:75:ee:62:f9:26:a5:25:22:f7:8e:3b:56:a1:64:81:45:66:
         9a:7a:8b:39:ff:6e:41:0c:35:5f:b9:df:da:d8:72:5b:4d:44:
         18:32:9a:4f:5e:a6:05:27:54:84:5a:f5:90:23:f5:66:be:8c:
         57:da:24:5d:a2:71:26:c0:63:5f:4e:82:1c:24:e3:a0:86:c0:
         58:8d:69:9a:f7:7e:66:77:e1:48:6a:cb:06:74:db:27:bf:8c:
         09:ab:62:9a:43:1a:e2:b6:54:16:64:91:b6:7a:18:1d:3e:5b:
         49:67:a5:5e:03:fd:93:d0:3e:09:17:52:43:9b:78:46:19:93:
         6f:3a:b2:b5:42:78:51:ef:17:67:b5:f1:30:52:50:ac:75:e5:
         a9:00:cc:34:d4:65:b3:00:8e:cb:21:92:cc:a9:cd:29:77:ee:
         bc:e3:85:24:0c:59:c3:6a:cf:2e:5b:2b:a4:29:32:83:1f:64:
         1b:d4:ac:d9:d9:52:1a:00:9f:7a:6c:ac:03:19:70:51:f2:ba:
         6e:9b:65:cd:fd:d2:4f:1d:78:7e:3b:34:48:31:90:08:e7:c9:
         a3:96:e8:f2:0b:c5:6a:5a:03:45:4d:c6:bd:d3:e0:d0:32:41:
         31:c3:6b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----