Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/TMVnMYKpcm5ZMkFiiCuoSavUi6o.roa
File:                     TMVnMYKpcm5ZMkFiiCuoSavUi6o.roa (raw, json)
Hash identifier:          ytl7bRHi/jGfdmXvdz2NsbrJtaNRSYf2CjkE6oEGuzU=
Subject key identifier:   4C:C5:67:31:82:A9:72:6E:59:32:41:62:88:2B:A8:49:AB:D4:8B:AA
Certificate issuer:       /CN=8A3FD89CE70A14F13ED0A86459224D007DD0A148
Certificate serial:       05D9
Authority key identifier: 8A:3F:D8:9C:E7:0A:14:F1:3E:D0:A8:64:59:22:4D:00:7D:D0:A1:48
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/TMVnMYKpcm5ZMkFiiCuoSavUi6o.roa
Signing time:             Fri 15 Apr 2022 10:34:49 +0000
ROA not before:           Fri 15 Apr 2022 10:34:49 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     7483
IP address blocks:        103.148.146.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1497 (0x5d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A3FD89CE70A14F13ED0A86459224D007DD0A148
        Validity
            Not Before: Apr 15 10:34:49 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=4CC5673182A9726E59324162882BA849ABD48BAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f2:a9:1b:16:a9:67:bc:88:19:9e:7c:a5:72:
                    d2:3f:5e:f2:ca:7a:8a:d6:3d:94:6a:38:0d:32:76:
                    03:60:a3:e3:ef:17:46:03:54:e2:82:87:06:aa:5d:
                    1a:51:4b:24:cf:00:6b:06:e5:de:70:07:03:59:27:
                    ca:15:7a:cd:21:a4:23:85:51:26:d6:2a:12:b5:ff:
                    67:bb:d5:bb:c1:9d:7c:29:73:7d:39:c3:67:4a:2d:
                    dc:57:2d:02:b0:ba:e9:0a:6a:0c:62:3a:da:fd:10:
                    a0:60:41:76:11:ca:ce:9e:40:f0:88:60:40:de:48:
                    f5:6c:ad:e3:ff:6c:32:e1:8a:02:ed:ac:3f:c1:03:
                    74:74:6c:b7:33:5f:c1:27:3b:39:cd:f5:80:2e:0f:
                    2f:29:a9:08:ee:c0:e9:23:8d:d8:da:61:20:44:64:
                    6f:e7:41:22:d4:b3:05:ce:70:c7:90:aa:9b:74:a3:
                    11:2f:b1:6d:4e:ae:ae:bf:c8:2e:cd:e9:00:6e:01:
                    f6:4a:f7:ba:2c:4e:80:fd:41:5d:9d:d3:03:72:ed:
                    bb:8d:9f:ef:3a:a8:57:a5:0c:70:af:54:0f:e7:79:
                    41:b3:e4:f5:38:e1:c2:6f:e3:a2:a0:d7:8c:51:21:
                    b2:25:1c:ad:74:c9:b1:e7:32:28:f9:3c:0e:cd:1c:
                    ba:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C5:67:31:82:A9:72:6E:59:32:41:62:88:2B:A8:49:AB:D4:8B:AA
            X509v3 Authority Key Identifier:
                keyid:8A:3F:D8:9C:E7:0A:14:F1:3E:D0:A8:64:59:22:4D:00:7D:D0:A1:48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/TMVnMYKpcm5ZMkFiiCuoSavUi6o.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:56:21:65:32:92:e7:22:83:e1:cc:6c:b0:16:66:21:51:ac:
         ad:c5:27:40:8a:b9:f7:b9:62:8e:16:2b:a8:3b:37:29:b8:7e:
         f8:80:bf:4d:f4:63:62:6e:07:11:da:b7:f3:16:17:3b:53:15:
         8c:2b:7e:f7:45:d8:60:b4:c8:f2:6a:6d:ad:81:97:23:f8:f9:
         58:57:34:e3:03:98:9f:ac:d5:87:95:b2:d6:f3:2a:77:96:c0:
         7d:b7:e8:cf:a8:f1:c2:92:55:b9:70:5c:6a:c9:d9:c5:9f:1d:
         d4:6f:36:01:03:1a:d6:61:3e:5a:a5:77:76:3c:c2:c2:d5:58:
         53:76:6d:b5:ca:ed:c0:2f:91:2b:55:0a:24:73:4c:7d:f5:60:
         7b:7f:45:71:70:b6:34:a5:b4:91:f6:72:d4:52:28:66:10:3c:
         ea:65:97:1a:ca:f3:5d:42:14:00:b8:4b:f0:b5:7c:2f:3b:4c:
         18:a9:4f:90:d5:2b:c4:72:17:6d:6d:3c:57:77:16:d7:dd:94:
         68:a1:3f:02:89:c2:af:73:84:84:3f:a0:d5:ba:ba:d3:d1:b4:
         03:cc:8c:f9:c4:85:ef:59:87:80:07:6f:a8:96:31:f3:2d:20:
         85:4c:18:79:cb:6f:38:26:22:af:cb:42:22:74:58:7f:07:74:
         15:e1:bf:90
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----