Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GRONEXT/McdI2dtE7kfUZxeuOvObUuVQPDo.roa
File:                     McdI2dtE7kfUZxeuOvObUuVQPDo.roa (raw, json)
Hash identifier:          EXWmJTXM3MTMWVqCgYN7U7ty3PxZYLnbACZo4AL60LY=
Subject key identifier:   31:C7:48:D9:DB:44:EE:47:D4:67:17:AE:3A:F3:9B:52:E5:50:3C:3A
Certificate issuer:       /CN=1A610A62A8A72CD36C1D22C7085EDF1809518994
Certificate serial:       016C
Authority key identifier: 1A:61:0A:62:A8:A7:2C:D3:6C:1D:22:C7:08:5E:DF:18:09:51:89:94
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GmEKYqinLNNsHSLHCF7fGAlRiZQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GRONEXT/McdI2dtE7kfUZxeuOvObUuVQPDo.roa
Signing time:             Mon 13 Apr 2020 02:54:26 +0000
ROA not before:           Mon 13 Apr 2020 02:54:26 +0000
ROA not after:            Tue 02 Feb 2021 02:23:50 +0000
asID:                     131667
IP address blocks:        103.146.210.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364 (0x16c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A610A62A8A72CD36C1D22C7085EDF1809518994
        Validity
            Not Before: Apr 13 02:54:26 2020 GMT
            Not After : Feb  2 02:23:50 2021 GMT
        Subject: CN=31C748D9DB44EE47D46717AE3AF39B52E5503C3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b4:96:17:97:ae:b4:ec:97:53:9f:8a:ec:67:
                    aa:f3:a2:2f:e4:f0:99:ba:b0:0e:dc:50:9a:93:05:
                    ce:1a:ff:4c:4f:6d:1b:ad:8a:72:8f:56:95:c7:c7:
                    dc:a9:4b:db:c0:b6:24:56:55:8d:6d:64:e2:4b:45:
                    10:15:ad:dd:96:9b:e9:9d:a5:4d:1d:7f:a6:b1:99:
                    17:ec:d3:18:fb:45:7f:de:10:61:12:4d:51:78:31:
                    3c:da:34:26:7d:cb:1f:4c:18:71:6b:02:8e:6b:b5:
                    ef:b9:6f:ab:20:d8:b7:4a:8b:e9:d8:a7:6b:58:b5:
                    ed:24:a8:15:41:50:8a:be:e5:e2:c6:65:75:9a:77:
                    7d:01:7d:50:3a:d5:11:c4:77:88:50:85:80:e6:66:
                    dc:98:79:90:3f:6e:1e:27:7a:c9:ec:0f:8a:db:b2:
                    66:20:ea:35:51:c7:3f:97:81:d1:20:71:5c:40:0a:
                    a6:79:37:df:6f:db:3f:c6:6d:41:4d:17:f3:cc:6a:
                    a1:ee:9f:ca:e1:ae:85:91:b7:e7:c0:16:05:c8:3b:
                    57:67:54:b9:63:79:2b:cf:8d:42:db:b8:cf:84:95:
                    e9:cf:f9:85:09:11:21:32:44:eb:d0:eb:29:e1:87:
                    da:eb:39:15:9e:f0:0d:82:c7:be:d2:16:64:2e:3d:
                    1a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C7:48:D9:DB:44:EE:47:D4:67:17:AE:3A:F3:9B:52:E5:50:3C:3A
            X509v3 Authority Key Identifier:
                keyid:1A:61:0A:62:A8:A7:2C:D3:6C:1D:22:C7:08:5E:DF:18:09:51:89:94

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GRONEXT/GmEKYqinLNNsHSLHCF7fGAlRiZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GmEKYqinLNNsHSLHCF7fGAlRiZQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GRONEXT/McdI2dtE7kfUZxeuOvObUuVQPDo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:7e:61:59:7a:96:bd:f9:84:b0:58:16:f1:c4:fc:ba:3e:ea:
         b3:8d:80:59:8c:69:52:11:4c:50:b0:2f:2f:cf:e4:14:77:41:
         d4:dd:ac:01:8e:81:b9:f7:1e:18:0d:36:19:e5:ee:56:f7:94:
         22:72:a8:73:57:1b:18:a1:e5:84:9c:18:e0:69:07:59:cd:4e:
         3d:4a:08:d3:10:bc:2d:de:de:62:a2:d7:92:41:99:75:40:b2:
         9b:0f:07:4e:0c:b0:9b:d7:09:92:5d:e1:ca:72:0f:29:4e:5c:
         a6:bb:1c:f1:fe:10:7f:89:32:dd:22:be:89:0d:59:90:30:dd:
         a8:bf:08:a4:62:35:96:ad:cc:19:be:83:ee:94:92:39:9f:ee:
         aa:83:93:54:89:92:eb:8a:1b:f6:3e:71:e0:73:ff:4e:78:6c:
         6c:cb:d4:63:98:73:82:19:33:50:69:45:e5:04:90:99:2f:50:
         e0:24:b2:92:de:01:84:24:20:b7:39:f6:cf:0a:2b:2d:c6:51:
         1a:d7:62:34:b7:de:8f:1a:cf:7d:cb:66:9c:09:d2:85:98:6b:
         21:3a:9c:7f:67:55:06:4d:b7:58:8d:6e:05:7d:2e:2f:d3:92:
         c2:c2:db:80:3a:8c:56:11:9b:61:0f:dc:ea:b7:f4:14:60:0f:
         a1:3d:70:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----