Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWT/9oLctW26MIVpRk8vEIzZQxnrngI.roa
File:                     9oLctW26MIVpRk8vEIzZQxnrngI.roa (raw, json)
Hash identifier:          q5ptf3PKkH8woEtALARbFGHGdvguw9RTUlK6tL0pVHY=
Subject key identifier:   F6:82:DC:B5:6D:BA:30:85:69:46:4F:2F:10:8C:D9:43:19:EB:9E:02
Certificate issuer:       /CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Certificate serial:       0C3D
Authority key identifier: D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/9oLctW26MIVpRk8vEIzZQxnrngI.roa
Signing time:             Wed 24 Nov 2021 03:07:41 +0000
ROA not before:           Wed 24 Nov 2021 03:07:41 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24168
IP address blocks:        103.136.60.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3133 (0xc3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
        Validity
            Not Before: Nov 24 03:07:41 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=F682DCB56DBA308569464F2F108CD94319EB9E02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:95:e3:0f:f4:31:6d:11:0e:d2:ed:2b:9c:5a:
                    44:86:af:c2:b1:9a:7a:7e:89:27:3c:bb:be:08:0b:
                    e4:6e:32:17:90:a4:f8:b5:19:7b:e0:da:c7:a9:02:
                    42:f2:f0:62:e8:f3:91:5e:4f:c7:26:45:59:1c:f6:
                    74:3f:d1:0e:af:5f:76:56:d9:26:05:67:14:e2:71:
                    e2:45:d2:06:b5:5c:28:bd:ba:f5:d3:ea:3a:88:64:
                    95:3c:61:a8:40:95:d4:a5:4f:b9:1f:c9:e1:94:2a:
                    d5:d7:fb:a6:94:f7:c3:3e:40:af:bc:11:b3:44:cf:
                    ef:28:8b:24:c5:bc:b5:73:09:2a:c6:27:25:75:90:
                    51:df:0a:20:9d:79:d3:23:b9:41:03:1f:32:44:c3:
                    01:f9:9b:2d:56:c2:f9:8d:d6:99:ab:89:8f:80:3c:
                    4c:5e:49:7f:eb:8e:94:53:f7:d2:19:cf:76:bb:5e:
                    df:89:1c:a8:e4:06:8a:ea:3f:92:97:3a:08:56:85:
                    53:1f:d3:35:3e:d9:d7:69:20:f9:35:26:c1:24:aa:
                    bd:bb:c4:43:93:93:3b:c0:37:ec:5e:fa:3d:f7:ac:
                    41:df:e8:d8:34:3e:68:3c:08:1f:d9:57:17:c8:f2:
                    07:68:c8:b4:e8:6f:d2:70:4f:0f:40:3a:d6:17:91:
                    f0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:82:DC:B5:6D:BA:30:85:69:46:4F:2F:10:8C:D9:43:19:EB:9E:02
            X509v3 Authority Key Identifier:
                keyid:D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/9oLctW26MIVpRk8vEIzZQxnrngI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:79:6c:27:03:ce:ed:43:82:81:52:ff:4f:d5:a9:9f:43:23:
         dc:8e:06:3c:74:33:76:60:bf:92:1a:03:96:ef:c2:fc:97:bb:
         02:79:e4:fd:d7:3a:b8:1a:35:d0:ef:fc:92:d4:8a:ff:7a:e6:
         96:9a:95:19:8a:d5:fb:bc:95:4f:64:2a:1a:98:5e:3f:4e:30:
         46:a1:0f:c0:0c:68:95:3b:05:c9:3b:d4:15:99:0b:4c:0e:53:
         51:51:54:07:60:3f:ad:5a:ce:60:cf:41:50:31:f4:59:94:b8:
         c5:29:3b:ef:c2:76:bd:fc:5e:40:00:1d:14:42:36:d1:c3:bf:
         ff:cf:2b:54:c3:2a:91:b7:51:c4:c1:2a:2d:e9:13:a3:a6:e7:
         e3:3a:f5:7e:a9:d0:bf:38:1e:75:68:86:61:31:ea:43:ff:90:
         43:e0:ee:01:7e:4b:46:7c:38:f7:fa:1a:3c:db:d7:1e:a4:c8:
         5c:f6:93:bf:90:ea:e8:bc:7a:b7:bf:2a:50:ec:d1:6f:97:5a:
         0e:9d:23:90:18:08:2c:e0:3f:8b:f1:70:7d:89:6b:b8:fb:3d:
         b1:47:d4:66:38:41:b3:a6:ec:86:5a:bf:59:f7:40:1c:81:42:
         3b:11:33:d7:84:25:47:78:06:e0:29:ee:60:7e:dc:a0:0c:a1:
         1a:ae:c9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----