Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/WCe5OTsKe7FbdzDzm-Dg8458Vyo.roa
File:                     WCe5OTsKe7FbdzDzm-Dg8458Vyo.roa (raw, json)
Hash identifier:          qU14EJwq8z1MOyijRGoCpigeOhGxBLI5VbWNzCzzLMk=
Subject key identifier:   58:27:B9:39:3B:0A:7B:B1:5B:77:30:F3:9B:E0:E0:F3:8E:7C:57:2A
Certificate issuer:       /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial:       079B
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/WCe5OTsKe7FbdzDzm-Dg8458Vyo.roa
Signing time:             Tue 29 Sep 2020 10:03:14 +0000
ROA not before:           Tue 29 Sep 2020 10:03:14 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9244
IP address blocks:        113.21.173.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1947 (0x79b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
        Validity
            Not Before: Sep 29 10:03:14 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5827B9393B0A7BB15B7730F39BE0E0F38E7C572A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:27:f9:aa:4f:a7:d1:97:5a:b6:9a:92:87:fb:
                    68:37:51:10:59:c3:27:b1:49:62:a1:a5:77:cf:61:
                    31:74:03:09:1e:0e:1e:fc:f6:fb:6e:6c:4a:c6:a4:
                    e0:20:e1:cb:cf:88:75:55:1d:cd:70:b7:bd:9a:2c:
                    87:1c:f5:71:36:da:6c:4e:68:74:a1:7e:a7:bc:02:
                    9d:6d:61:ad:ca:5a:9c:18:4e:d2:5f:15:e2:fe:e9:
                    f6:b5:fb:13:1f:90:d3:28:7e:91:84:e3:12:e7:e8:
                    02:81:43:b8:2a:d1:4b:78:96:4a:16:71:39:c3:6f:
                    ec:d7:c6:20:8a:8e:9a:5e:9a:2a:a6:6c:54:23:20:
                    cf:32:d4:80:0c:c9:a6:af:d7:14:ae:d1:e3:84:aa:
                    25:43:1d:d9:51:d5:fb:0f:65:52:04:f6:d0:a8:f2:
                    82:db:c0:69:c6:bd:ad:c6:5f:24:96:66:68:31:2a:
                    25:61:0a:7b:0c:4b:97:df:ef:90:d4:de:0a:d4:ee:
                    1e:70:88:1a:1c:82:d1:a6:ed:e1:56:8e:97:8d:37:
                    c1:55:6b:b3:9e:1d:ab:22:79:19:77:46:ae:f0:07:
                    3d:b9:3b:1b:4d:50:75:f2:c4:9c:01:6b:9e:14:47:
                    71:a6:05:58:82:22:07:5d:3e:bc:b2:13:c0:fb:37:
                    bd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:27:B9:39:3B:0A:7B:B1:5B:77:30:F3:9B:E0:E0:F3:8E:7C:57:2A
            X509v3 Authority Key Identifier:
                keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/WCe5OTsKe7FbdzDzm-Dg8458Vyo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.21.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:5e:62:e0:de:03:c5:89:f6:20:4d:49:e7:32:41:9d:fa:bd:
         ce:b3:1b:3e:de:79:57:dd:f0:6d:a0:1d:13:1a:9b:00:5b:6a:
         80:92:5f:72:ea:59:ec:1a:26:68:f4:07:5d:5b:55:58:b1:d8:
         34:f7:a0:83:19:10:2a:e8:58:b5:ac:74:48:2c:b2:34:c2:7b:
         e5:3c:f5:24:12:1a:c9:0f:e3:8c:6c:1d:d8:a7:10:bd:4d:5b:
         e1:61:89:d2:64:1b:69:5c:bc:2b:11:a7:0b:98:6b:07:86:5c:
         bd:31:ba:ea:10:35:84:65:bb:26:5d:70:6d:5a:77:73:a4:64:
         30:2b:96:26:1b:4a:19:fc:80:3a:d3:f4:c7:09:ac:64:83:1a:
         62:30:4d:1b:bd:a5:10:5e:25:54:31:5f:92:f6:4f:f4:e0:06:
         c1:f2:be:87:90:19:c9:06:db:28:3c:ed:61:9a:50:52:14:4d:
         60:9d:74:86:bd:18:71:f9:d6:de:ab:70:72:61:68:dd:08:e2:
         0c:84:31:1e:95:57:1d:da:28:33:b4:96:ad:fb:6f:76:31:e3:
         03:58:ac:c6:97:77:64:b9:9f:93:8c:e2:53:56:ee:d9:db:7a:
         13:1b:e1:7d:93:89:f6:57:6b:62:1f:07:f1:d8:c0:f1:6a:56:
         8f:28:f2:7e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICB5swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC
M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yMDA5Mjkx
MDAzMTRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDU4MjdCOTM5M0IwQTdC
QjE1Qjc3MzBGMzlCRTBFMEYzOEU3QzU3MkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBJ/mqT6fRl1q2mpKH+2g3URBZwyexSWKhpXfPYTF0AwkeDh78
9vtubErGpOAg4cvPiHVVHc1wt72aLIcc9XE22mxOaHShfqe8Ap1tYa3KWpwYTtJf
FeL+6fa1+xMfkNMofpGE4xLn6AKBQ7gq0Ut4lkoWcTnDb+zXxiCKjppemiqmbFQj
IM8y1IAMyaav1xSu0eOEqiVDHdlR1fsPZVIE9tCo8oLbwGnGva3GXySWZmgxKiVh
CnsMS5ff75DU3grU7h5wiBocgtGm7eFWjpeNN8FVa7OeHasieRl3Rq7wBz25OxtN
UHXyxJwBa54UR3GmBViCIgddPryyE8D7N70PAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUWCe5OTsKe7FbdzDzm+Dg8458VyowHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT
KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU
L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL1dDZTVPVHNLZTdGYmR6RHpt
LURnODQ1OFZ5by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABx
Fa0wDQYJKoZIhvcNAQELBQADggEBAHteYuDeA8WJ9iBNSecyQZ36vc6zGz7eeVfd
8G2gHRMamwBbaoCSX3LqWewaJmj0B11bVVix2DT3oIMZECroWLWsdEgssjTCe+U8
9SQSGskP44xsHdinEL1NW+FhidJkG2lcvCsRpwuYaweGXL0xuuoQNYRluyZdcG1a
d3OkZDArliYbShn8gDrT9McJrGSDGmIwTRu9pRBeJVQxX5L2T/TgBsHyvoeQGckG
2yg87WGaUFIUTWCddIa9GHH51t6rcHJhaN0I4gyEMR6VVx3aKDO0lq37b3Yx4wNY
rMaXd2S5n5OM4lNW7tnbehMb4X2TifZXa2IfB/HYwPFqVo8o8n4=
-----END CERTIFICATE-----