Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GOEASY/KzCtDNwrVfQIa82TLeWFz64Poe4.roa
File:                     KzCtDNwrVfQIa82TLeWFz64Poe4.roa (raw, json)
Hash identifier:          AcJTL6bvUu1YLO5O5xxNDZY76anmnLFIul3aFL37iGo=
Subject key identifier:   2B:30:AD:0C:DC:2B:55:F4:08:6B:CD:93:2D:E5:85:CF:AE:0F:A1:EE
Certificate issuer:       /CN=66B69E5B178B8C9444C4D64A6963B0BC9FA35762
Certificate serial:       7A
Authority key identifier: 66:B6:9E:5B:17:8B:8C:94:44:C4:D6:4A:69:63:B0:BC:9F:A3:57:62
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ZraeWxeLjJRExNZKaWOwvJ-jV2I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/KzCtDNwrVfQIa82TLeWFz64Poe4.roa
Signing time:             Thu 13 Jan 2022 04:01:25 +0000
ROA not before:           Thu 13 Jan 2022 04:01:25 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     7483
IP address blocks:        103.170.15.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66B69E5B178B8C9444C4D64A6963B0BC9FA35762
        Validity
            Not Before: Jan 13 04:01:25 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=2B30AD0CDC2B55F4086BCD932DE585CFAE0FA1EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:41:72:81:25:e8:a2:66:02:72:4f:31:3b:4a:
                    b1:c3:b7:b2:5c:c1:d9:d6:3b:1c:1f:50:fa:cc:b0:
                    af:94:a9:ca:dc:e3:a8:31:25:0a:3d:9b:1a:2e:e9:
                    08:fb:07:77:a1:f4:3e:6c:e0:b5:08:3c:f5:89:7a:
                    9e:44:19:c1:5a:7d:f5:da:1b:73:6b:3d:43:a8:b4:
                    fe:43:e5:58:d2:74:b8:6c:2d:90:21:4c:cd:b6:ed:
                    c7:7c:70:69:3a:a2:dd:09:13:73:1e:bf:f6:ba:e8:
                    39:0c:38:58:4b:50:b7:07:60:8f:59:de:17:fc:51:
                    70:d5:2c:5c:47:fc:5f:89:9d:13:33:67:8d:9e:57:
                    78:a7:07:b7:3f:e3:ea:f1:1e:1b:b2:7a:15:7b:0c:
                    26:2d:db:2c:49:59:0c:8b:12:e1:44:12:3f:76:37:
                    11:13:0f:cf:95:0c:b1:51:df:32:b3:4f:8f:15:f8:
                    4c:14:c0:d3:d4:8e:09:38:4b:27:fa:ca:83:02:2e:
                    86:1a:97:21:02:72:dc:cf:d9:a1:f3:c9:bb:ce:9f:
                    1c:ca:8f:7c:5a:77:7a:b9:e6:27:02:67:32:84:16:
                    0b:d1:61:45:9a:13:d1:e5:1d:3a:92:95:d2:5e:0b:
                    4a:a1:1e:28:ee:78:ad:34:e4:c9:47:58:4f:f1:e2:
                    a2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:30:AD:0C:DC:2B:55:F4:08:6B:CD:93:2D:E5:85:CF:AE:0F:A1:EE
            X509v3 Authority Key Identifier:
                keyid:66:B6:9E:5B:17:8B:8C:94:44:C4:D6:4A:69:63:B0:BC:9F:A3:57:62

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/ZraeWxeLjJRExNZKaWOwvJ-jV2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZraeWxeLjJRExNZKaWOwvJ-jV2I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/KzCtDNwrVfQIa82TLeWFz64Poe4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:43:44:f5:af:2f:11:f0:fd:4d:b6:f6:dd:4e:a3:55:81:e9:
         8d:3e:ac:59:fd:97:ab:57:ef:27:e7:42:79:85:66:09:12:8e:
         32:37:af:39:3e:44:ca:89:cd:ed:f7:69:17:88:99:a4:cd:d1:
         bd:f6:72:5d:98:cd:a0:85:9f:f2:2d:3a:22:84:9e:a0:07:7a:
         90:06:45:fc:81:39:3a:27:a4:8f:14:0c:0d:73:b2:ab:b7:0a:
         c9:98:53:6c:b7:57:47:da:bd:93:2b:43:7b:bf:ab:0b:37:fa:
         60:0d:fd:1f:4f:9c:e1:34:b3:58:34:04:f7:02:a7:40:00:92:
         5b:fa:74:b6:ee:04:f4:a9:56:ab:38:41:52:d6:cb:cc:ba:91:
         f6:41:de:2f:92:ae:a8:21:01:83:d8:35:47:6e:3e:87:fc:be:
         9d:bf:96:ca:04:1f:c6:02:12:82:c5:52:8f:5a:b7:77:29:6f:
         ff:e8:2b:46:d9:64:83:e1:a0:38:d3:bd:ad:80:af:0f:ea:43:
         cc:58:49:b3:bc:7f:34:e8:d7:07:42:27:0d:aa:c2:8f:06:bc:
         91:71:ad:3b:f0:ff:77:1f:17:e9:8a:6d:86:02:44:ea:af:9f:
         5a:4b:34:8e:78:80:f4:f9:4a:93:21:9d:2e:be:50:d1:67:de:
         1a:16:40:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----