Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/kdhhwEA8o-Fmkbhgos5bqn7ENxk.roa
File:                     kdhhwEA8o-Fmkbhgos5bqn7ENxk.roa (raw, json)
Hash identifier:          vniMayVb/GvSovYWbSeQWs3K1hPWFoDXcFjUK3A0FPU=
Subject key identifier:   91:D8:61:C0:40:3C:A3:E1:66:91:B8:60:A2:CE:5B:AA:7E:C4:37:19
Certificate issuer:       /CN=8C508B7DDA024FB2C9EF7FBBF4FBD02B9F43191D
Certificate serial:       15
Authority key identifier: 8C:50:8B:7D:DA:02:4F:B2:C9:EF:7F:BB:F4:FB:D0:2B:9F:43:19:1D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/jFCLfdoCT7LJ73-79PvQK59DGR0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/kdhhwEA8o-Fmkbhgos5bqn7ENxk.roa
Signing time:             Wed 14 Jul 2021 01:58:51 +0000
ROA not before:           Wed 14 Jul 2021 01:58:51 +0000
ROA not after:            Tue 21 Jun 2022 07:39:58 +0000
asID:                     14618
IP address blocks:        103.168.156.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C508B7DDA024FB2C9EF7FBBF4FBD02B9F43191D
        Validity
            Not Before: Jul 14 01:58:51 2021 GMT
            Not After : Jun 21 07:39:58 2022 GMT
        Subject: CN=91D861C0403CA3E16691B860A2CE5BAA7EC43719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7e:28:9d:4b:27:37:7a:18:a2:4e:44:21:c8:
                    fe:d5:b6:62:18:a9:f8:70:76:7f:42:97:ed:02:37:
                    af:9c:f7:40:c6:77:46:81:1f:60:89:7b:5c:e4:2f:
                    f3:b2:88:a1:3a:e1:76:ef:e4:b9:e1:41:d6:20:a7:
                    f6:5d:bf:28:06:c9:af:c0:c7:91:77:35:44:09:34:
                    a8:83:bc:17:6d:6c:9b:1b:ee:af:4b:16:78:59:88:
                    9d:2d:d1:1d:e3:71:ac:89:c6:5d:39:3f:d7:89:94:
                    26:2d:4b:44:94:a1:5a:4b:95:da:16:76:91:16:0f:
                    d1:a5:ca:14:9c:8c:74:23:e1:14:71:4f:54:81:ce:
                    29:3d:d1:d2:03:fe:42:4a:99:1d:da:c3:3b:bb:33:
                    8c:c6:b6:49:1a:5b:48:83:13:fd:02:0e:e9:0d:79:
                    74:a4:05:a6:79:e9:e1:4d:40:d6:66:74:46:5e:9a:
                    a8:0e:db:6b:1d:94:19:6f:1b:3c:87:5f:1e:52:3f:
                    cb:39:ab:bd:42:23:43:74:51:6c:e6:59:f0:8d:ff:
                    7e:02:b3:31:1f:9f:9d:e9:9e:26:98:f8:29:21:da:
                    56:e7:d3:64:50:49:ff:49:74:ac:0c:2b:2e:39:ac:
                    a3:ac:3a:b9:64:a9:9a:1b:fe:e0:1f:2d:1f:98:6f:
                    b9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D8:61:C0:40:3C:A3:E1:66:91:B8:60:A2:CE:5B:AA:7E:C4:37:19
            X509v3 Authority Key Identifier:
                keyid:8C:50:8B:7D:DA:02:4F:B2:C9:EF:7F:BB:F4:FB:D0:2B:9F:43:19:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/jFCLfdoCT7LJ73-79PvQK59DGR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jFCLfdoCT7LJ73-79PvQK59DGR0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/kdhhwEA8o-Fmkbhgos5bqn7ENxk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:e6:bd:96:01:69:75:cd:6e:66:ee:87:8a:0b:8e:58:8e:ba:
         45:8c:82:25:28:02:8a:95:50:88:24:30:12:92:21:5a:3c:a7:
         78:cf:da:b4:59:71:0d:43:b9:b6:fe:70:e4:b9:28:d5:18:37:
         48:d7:9f:e5:e3:7f:6d:e3:3f:96:36:32:25:9d:33:46:71:c1:
         2d:03:7a:fe:47:24:5e:f1:9a:f3:ce:3a:5a:44:da:dd:41:3d:
         78:a6:2a:11:af:f8:1a:57:bc:ad:2d:c5:f0:71:61:e3:2c:8b:
         78:8f:c7:10:7e:35:31:18:d0:01:59:c2:79:f0:4d:d0:1f:f3:
         62:4e:8d:38:be:38:8d:f6:27:9e:3e:d4:f4:77:e3:57:22:8f:
         49:69:5a:b1:ba:89:93:2a:e3:00:bd:94:be:8e:88:90:94:e0:
         50:41:7f:f0:81:e7:0d:f6:63:e2:77:59:e5:b4:a2:a6:4d:ff:
         5d:b1:5d:98:af:35:13:19:40:68:7a:b5:28:6b:c9:4e:b6:bb:
         d4:a2:fe:2f:fa:b1:ec:72:04:31:67:3e:ae:f0:81:6f:76:f4:
         40:68:42:40:76:1f:29:63:78:fe:af:4d:8f:0a:39:f8:47:d2:
         7f:33:95:bb:44:4a:b2:7e:6f:1a:c3:b6:eb:ad:69:05:32:88:
         80:b5:1d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----