Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/k8I6aFpkhDfWMqax6YZ1GTsKbdc.roa
File:                     k8I6aFpkhDfWMqax6YZ1GTsKbdc.roa (raw, json)
Hash identifier:          xmICgdLDuheXmybTj9Idg68QTXCZrBN1jKqI945dOSo=
Subject key identifier:   93:C2:3A:68:5A:64:84:37:D6:32:A6:B1:E9:86:75:19:3B:0A:6D:D7
Certificate issuer:       /CN=058662B8DA05E4029F3FA4D56A5121DD4BD68989
Certificate serial:       0741
Authority key identifier: 05:86:62:B8:DA:05:E4:02:9F:3F:A4:D5:6A:51:21:DD:4B:D6:89:89
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/BYZiuNoF5AKfP6TValEh3UvWiYk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/k8I6aFpkhDfWMqax6YZ1GTsKbdc.roa
Signing time:             Tue 29 Sep 2020 09:59:05 +0000
ROA not before:           Tue 29 Sep 2020 09:59:05 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     134098
IP address blocks:        103.122.116.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1857 (0x741)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=058662B8DA05E4029F3FA4D56A5121DD4BD68989
        Validity
            Not Before: Sep 29 09:59:05 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=93C23A685A648437D632A6B1E98675193B0A6DD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5b:36:a2:e9:11:0a:00:af:fc:3d:93:c5:ff:
                    fc:2a:92:45:04:7e:e7:9b:00:fc:fb:a2:a0:2b:64:
                    a9:8a:89:83:5e:8e:dc:2d:19:21:b6:a8:b1:4d:5d:
                    e6:1f:6e:4c:1e:8d:15:54:66:aa:d6:8e:41:a1:b2:
                    b0:f7:50:0e:3a:43:26:e2:ba:5a:8b:5e:99:18:3d:
                    17:a6:ec:36:d3:8b:86:62:0c:07:ca:f0:12:a6:d9:
                    6f:dd:0c:bb:96:70:3d:48:cd:cf:f6:b2:00:0f:5b:
                    56:90:b1:3c:00:44:50:45:49:62:0f:64:b3:89:c2:
                    84:6d:14:f5:13:90:c4:13:86:a0:bf:1d:bb:35:38:
                    60:54:ec:51:f0:96:fa:c9:52:70:73:4a:2d:d4:11:
                    a2:86:05:02:7c:06:60:6a:bc:c7:e0:c8:a8:48:29:
                    21:35:39:e0:9c:e7:e8:98:da:a0:c1:45:86:f7:43:
                    9d:ec:e0:5a:55:f0:04:f0:d9:39:b0:78:8d:72:3d:
                    6b:40:81:12:7d:bf:e3:3f:5d:3e:b1:6d:05:8c:29:
                    f9:23:69:65:84:3c:36:85:15:d7:a3:53:66:bb:23:
                    8d:44:23:08:a7:e9:2e:c3:8e:04:08:06:84:c5:c1:
                    5a:8a:cb:8e:b4:f0:47:c0:02:c6:52:2f:4a:ac:b2:
                    00:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C2:3A:68:5A:64:84:37:D6:32:A6:B1:E9:86:75:19:3B:0A:6D:D7
            X509v3 Authority Key Identifier:
                keyid:05:86:62:B8:DA:05:E4:02:9F:3F:A4:D5:6A:51:21:DD:4B:D6:89:89

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/BYZiuNoF5AKfP6TValEh3UvWiYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BYZiuNoF5AKfP6TValEh3UvWiYk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/k8I6aFpkhDfWMqax6YZ1GTsKbdc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:1d:9c:9f:2a:6d:cd:92:34:70:ba:85:62:d5:fb:3c:ee:30:
         b9:ad:66:a0:ea:9c:04:ed:c8:84:62:83:bf:d8:95:5d:4d:41:
         82:4e:f3:db:d1:23:c2:8c:2b:21:0b:49:b1:24:fa:9b:c6:f3:
         33:da:02:21:2a:92:d9:92:06:4d:56:d2:4a:50:e9:ab:87:82:
         6d:a3:db:1c:25:72:f0:63:9b:a0:6e:6b:05:f1:2f:60:4f:a8:
         60:50:d8:ff:ab:1e:e1:24:79:8e:59:58:27:2d:50:3a:72:84:
         23:04:05:40:fb:c0:8f:c6:4b:b6:f2:c4:8b:c4:fc:57:02:79:
         a5:67:a7:bf:5b:23:9a:ed:29:91:cc:f5:7f:05:d0:94:4a:45:
         f9:60:0b:c7:01:0f:4f:a7:b5:69:5a:18:bf:81:23:68:3d:91:
         28:61:8f:9d:ea:54:02:76:1c:a9:c7:fa:e3:d6:be:ac:b7:30:
         41:6f:1c:b5:01:cb:c6:f2:e0:48:df:9c:cf:6d:fe:4a:e8:64:
         2c:be:ad:42:7a:e6:e3:bb:ee:bc:ce:bd:07:9d:cd:0d:33:4c:
         29:ba:db:06:ad:a8:b9:9c:2a:9c:d1:e8:d4:f7:f3:22:6c:6a:
         6d:4a:03:f4:83:be:82:92:fd:56:fb:e6:b5:7c:66:30:66:44:
         60:bc:eb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----