Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/s79Z5vYj4ji317YsXBDOJK9eBto.roa
File:                     s79Z5vYj4ji317YsXBDOJK9eBto.roa (raw, json)
Hash identifier:          KjO1IwuVDcvI4dedNzzLBb9UeyQdBSSfeCH1A0TITB8=
Subject key identifier:   B3:BF:59:E6:F6:23:E2:38:B7:D7:B6:2C:5C:10:CE:24:AF:5E:06:DA
Certificate issuer:       /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial:       0A81
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/s79Z5vYj4ji317YsXBDOJK9eBto.roa
Signing time:             Wed 04 May 2022 03:14:11 +0000
ROA not before:           Wed 04 May 2022 03:14:11 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18429
IP address blocks:        27.147.8.0/21 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2689 (0xa81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
        Validity
            Not Before: May  4 03:14:11 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=B3BF59E6F623E238B7D7B62C5C10CE24AF5E06DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:00:b3:2d:a6:89:aa:e0:00:95:91:55:fd:12:
                    62:2d:86:e4:c4:b2:ab:80:d3:27:78:ba:7a:95:09:
                    8d:07:3c:9e:da:cc:9d:de:fe:23:0d:31:4b:47:c9:
                    76:d7:19:45:62:fd:22:dc:55:d6:9a:15:da:a3:98:
                    52:85:b4:19:f5:44:31:9a:c0:39:dc:05:b5:80:e7:
                    89:e9:0d:54:67:ac:b3:a2:b7:35:3d:eb:53:eb:3a:
                    ca:eb:ba:34:25:4c:a4:ce:24:f9:61:13:96:68:83:
                    86:c5:3e:6d:f4:1e:fc:45:0c:0e:a6:ff:c9:b2:b7:
                    2b:e2:68:ea:c6:fb:23:4a:fe:18:04:fb:1c:52:95:
                    01:33:ce:f3:d2:e5:95:75:b9:69:b2:7b:33:ab:94:
                    66:45:bb:e5:ab:f7:39:92:0a:0e:4d:44:65:6e:42:
                    7d:2b:5c:2a:ef:74:0f:a1:49:b9:e3:8a:69:52:7f:
                    b8:cc:a5:cb:6f:43:69:64:0f:00:0c:b1:87:64:17:
                    94:2c:1b:7d:51:90:76:cc:7b:69:e2:71:be:bb:6d:
                    03:88:7d:52:86:e2:75:90:00:ab:42:4a:23:0f:28:
                    ca:f1:ec:2e:d7:24:68:a1:f7:3a:19:56:19:5f:73:
                    2a:0e:a7:c3:1a:62:30:74:be:eb:70:5b:8a:45:a0:
                    2c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BF:59:E6:F6:23:E2:38:B7:D7:B6:2C:5C:10:CE:24:AF:5E:06:DA
            X509v3 Authority Key Identifier:
                keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/s79Z5vYj4ji317YsXBDOJK9eBto.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.147.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         77:07:00:dc:49:db:cb:e0:a9:ea:23:a1:29:85:95:09:61:3c:
         2a:53:95:3e:d7:3a:e9:0c:dd:66:21:d9:c5:02:4e:c7:13:ff:
         0c:2f:70:8b:9a:2c:95:dc:9a:fb:f7:9d:f9:3f:59:32:f1:8a:
         ab:49:13:c0:64:79:b5:f1:8c:13:13:ae:df:79:75:e8:77:e3:
         63:32:e0:65:a3:98:48:18:a1:a0:0b:89:71:53:0e:47:d4:37:
         ba:fe:55:f8:bb:bd:f5:d5:2f:30:fb:89:04:ae:37:f2:28:9e:
         8f:27:c1:ac:d7:d2:f5:1e:e9:ca:14:91:b0:36:c4:11:9c:91:
         2e:b7:76:7e:2a:c1:48:63:33:0b:ff:8e:32:77:60:e8:2c:f7:
         96:9c:d0:7d:fc:81:fe:f7:f8:27:85:10:79:3f:da:b6:b7:92:
         c4:cc:28:a6:ab:1d:53:71:42:ce:e7:3d:c6:86:06:e7:ef:df:
         28:7b:c1:28:09:ad:d1:87:39:7e:ad:00:dd:84:fc:d4:ec:db:
         50:33:4d:d5:9e:2e:f3:c2:f6:b1:b4:51:4a:36:b2:80:f5:26:
         3d:45:c9:dd:1a:26:82:ba:c5:a9:1b:f0:61:24:8e:a7:fd:64:
         ca:51:33:7b:c3:cf:da:83:28:63:55:f4:98:06:9a:32:d3:09:
         9f:27:dc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----