Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/Hl3X22MLOR01AYF3op5ZSUczWeI.roa
File:                     Hl3X22MLOR01AYF3op5ZSUczWeI.roa (raw, json)
Hash identifier:          1bWDLMYVRZLKkVU6Y3taoTBPFfJfF75I+lV84aXIgzE=
Subject key identifier:   1E:5D:D7:DB:63:0B:39:1D:35:01:81:77:A2:9E:59:49:47:33:59:E2
Certificate issuer:       /CN=ABC8439FE19D99B038270208C94B66CA231FFED5
Certificate serial:       F8
Authority key identifier: AB:C8:43:9F:E1:9D:99:B0:38:27:02:08:C9:4B:66:CA:23:1F:FE:D5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/q8hDn-GdmbA4JwIIyUtmyiMf_tU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/Hl3X22MLOR01AYF3op5ZSUczWeI.roa
Signing time:             Wed 22 Feb 2023 06:53:55 +0000
ROA not before:           Wed 22 Feb 2023 06:53:55 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38047
IP address blocks:        2400:61a0:a055::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABC8439FE19D99B038270208C94B66CA231FFED5
        Validity
            Not Before: Feb 22 06:53:55 2023 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=1E5DD7DB630B391D35018177A29E5949473359E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f1:10:48:3e:26:55:ba:2d:91:af:39:4f:b1:
                    99:de:68:53:41:f2:28:fb:3c:e9:9b:ab:45:02:aa:
                    ca:37:3c:3f:f2:ec:ec:d1:de:f6:ba:d1:13:cd:ce:
                    57:45:a7:44:f4:52:01:7f:32:e8:d6:dc:36:34:6d:
                    2a:89:d8:7f:1c:7e:93:2d:a5:a2:70:b9:2f:3a:14:
                    52:2b:4f:fe:b5:2e:f1:fa:6c:1a:ed:39:92:24:e2:
                    de:70:f9:c5:6e:f2:d2:e3:63:4a:82:a1:64:2f:30:
                    dd:b2:70:79:d8:fb:9a:22:c5:2c:79:c3:2b:e6:09:
                    ed:04:98:a7:fe:ff:19:a5:bb:d9:85:10:20:dc:19:
                    9e:88:81:a9:8d:21:7a:f3:16:9b:f0:0c:52:e2:29:
                    b2:b5:df:54:46:67:65:55:da:4e:28:57:ba:de:ee:
                    12:ab:e7:07:78:97:0a:29:67:e3:62:e9:36:db:26:
                    52:e7:6e:2e:b3:6b:1a:e7:87:16:8e:ad:33:51:e1:
                    45:62:ce:dc:db:fd:7e:fe:92:df:a4:80:a5:47:58:
                    c6:27:a2:2f:87:3e:80:35:df:b4:b6:99:f7:c7:b2:
                    b0:1f:7a:a4:62:ab:42:6a:23:23:10:61:67:88:79:
                    3c:70:54:0b:e6:ae:5f:d1:8c:38:3d:1e:81:8a:9a:
                    fb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:5D:D7:DB:63:0B:39:1D:35:01:81:77:A2:9E:59:49:47:33:59:E2
            X509v3 Authority Key Identifier:
                keyid:AB:C8:43:9F:E1:9D:99:B0:38:27:02:08:C9:4B:66:CA:23:1F:FE:D5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/q8hDn-GdmbA4JwIIyUtmyiMf_tU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q8hDn-GdmbA4JwIIyUtmyiMf_tU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/Hl3X22MLOR01AYF3op5ZSUczWeI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:61a0:a055::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:55:53:f9:ea:a2:ee:64:f6:33:fe:79:f2:cf:99:ba:3f:37:
         33:1a:1f:21:54:75:17:20:ee:b6:73:d7:7b:b6:3c:5d:e0:94:
         07:bd:2d:6d:ee:00:6c:ae:c1:b0:88:79:90:43:6b:8f:63:18:
         a2:11:2e:85:de:74:5f:02:0d:dd:9e:eb:db:a9:d7:65:e8:9e:
         98:21:94:5f:c0:e1:4c:fb:bd:54:a6:5b:cf:75:d0:4c:37:c2:
         f0:07:ff:0b:0a:71:36:e8:49:f8:95:3d:8e:b7:ad:df:1a:e1:
         3c:a7:63:33:f7:bb:9c:53:f2:98:c7:fe:cf:16:15:89:b4:02:
         db:95:c4:29:50:f3:b4:c1:09:3f:d2:41:d8:54:9c:c0:89:b3:
         3b:6f:97:97:a1:97:42:5d:02:28:75:a6:d9:84:25:c3:56:22:
         fb:6b:0d:f0:4a:36:da:b0:74:3d:35:5d:81:bf:f0:56:cf:69:
         67:d5:ad:84:17:d0:23:e0:2f:40:f0:47:23:61:60:a8:6c:9f:
         6a:df:0b:7c:a6:c2:c7:16:f4:49:78:70:a8:9f:7d:42:9e:2f:
         7b:73:c2:19:29:06:09:62:93:ae:de:c0:78:4b:93:95:24:80:
         0d:31:f7:5f:fd:2d:8a:b0:a6:49:83:5c:0b:5f:40:df:01:12:
         ff:73:a3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----