Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/uCpagXKG9_z1aXp7PmXp6Op69I0.roa
File:                     uCpagXKG9_z1aXp7PmXp6Op69I0.roa (raw, json)
Hash identifier:          eJYXtTYlVeUIgmoQX4gqOAtcH+l/RWn9a+nZg7otZkI=
Subject key identifier:   B8:2A:5A:81:72:86:F7:FC:F5:69:7A:7B:3E:65:E9:E8:EA:7A:F4:8D
Certificate issuer:       /CN=385713E359FCB9CAB12F20DB3FF190FCA81E323E
Certificate serial:       0765
Authority key identifier: 38:57:13:E3:59:FC:B9:CA:B1:2F:20:DB:3F:F1:90:FC:A8:1E:32:3E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/OFcT41n8ucqxLyDbP_GQ_KgeMj4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/uCpagXKG9_z1aXp7PmXp6Op69I0.roa
Signing time:             Tue 29 Sep 2020 09:58:08 +0000
ROA not before:           Tue 29 Sep 2020 09:58:08 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131657
IP address blocks:        103.122.189.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1893 (0x765)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385713E359FCB9CAB12F20DB3FF190FCA81E323E
        Validity
            Not Before: Sep 29 09:58:08 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B82A5A817286F7FCF5697A7B3E65E9E8EA7AF48D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:20:2d:89:25:dc:1c:3a:c0:b8:b1:96:b4:71:
                    f1:8b:48:40:4b:5a:03:87:a9:3b:31:df:70:b6:14:
                    08:c3:16:4e:90:f6:8c:ad:8a:97:bf:2c:6c:e4:32:
                    fb:b7:33:9e:8d:f8:82:51:2e:b8:be:90:9e:9a:65:
                    d7:37:19:81:28:91:79:a5:a6:bd:f7:dc:75:37:04:
                    e2:60:14:c3:d2:de:5b:46:83:66:86:a3:30:13:d5:
                    c9:42:1b:12:04:08:a5:b1:91:50:74:da:c8:4f:20:
                    e8:4a:c4:d8:80:99:ae:92:4c:03:e8:c1:18:64:7e:
                    74:3f:26:10:6a:e9:bd:ff:ff:c9:72:c5:e6:2e:d3:
                    e5:28:44:fb:a3:f7:ec:5d:87:d0:c4:c7:a1:bd:e7:
                    34:4c:e2:5d:a6:a1:38:03:7e:f6:38:c0:3a:6f:07:
                    8c:b9:20:71:44:bb:09:53:fa:ba:07:5e:de:fe:2b:
                    af:8d:6e:65:01:50:f6:06:56:4f:4a:68:17:13:1c:
                    40:7e:ca:92:85:2c:a4:1f:af:e0:94:c1:7b:ec:45:
                    10:12:5e:78:e5:0c:b3:23:af:8a:50:04:38:18:72:
                    0d:5a:78:d5:9c:09:68:f4:c5:dd:1c:ff:9a:08:2f:
                    92:91:2b:51:3a:3e:d2:f7:b6:ec:8f:8e:ab:29:a3:
                    13:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:2A:5A:81:72:86:F7:FC:F5:69:7A:7B:3E:65:E9:E8:EA:7A:F4:8D
            X509v3 Authority Key Identifier:
                keyid:38:57:13:E3:59:FC:B9:CA:B1:2F:20:DB:3F:F1:90:FC:A8:1E:32:3E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/OFcT41n8ucqxLyDbP_GQ_KgeMj4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OFcT41n8ucqxLyDbP_GQ_KgeMj4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/uCpagXKG9_z1aXp7PmXp6Op69I0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:26:74:b0:82:b2:9d:47:9b:a3:2e:8f:a7:ff:06:34:48:81:
         06:34:c4:0a:17:4e:27:0d:06:56:23:c0:0d:e0:7e:40:3a:6e:
         65:2b:e1:1a:70:ea:3c:38:de:cb:8b:e8:55:6a:30:b5:b3:10:
         b7:50:d1:ea:6b:b5:f4:97:54:b6:70:db:b0:0d:fd:08:b6:99:
         02:19:ba:04:78:35:d7:be:d1:27:dc:dd:10:23:ac:95:fd:5b:
         cc:3b:86:55:7d:aa:14:85:00:4a:02:51:6e:6b:98:51:90:fe:
         01:09:8e:64:05:2c:ac:e1:7b:ff:3c:96:0a:f5:8b:23:a0:d5:
         72:5d:ba:69:18:2a:21:d1:35:9c:d2:24:c4:e0:21:0c:79:3c:
         6f:37:91:d5:db:d9:96:34:40:08:d1:85:1b:cf:eb:81:d5:42:
         a8:2d:8e:7f:4d:a2:5d:4f:b0:08:ae:b1:17:fb:fe:41:e0:10:
         9f:36:6f:c7:b8:e6:ea:8b:d7:7e:73:3f:fe:a0:a5:c1:65:fe:
         2e:e8:54:b6:a5:12:a9:d0:d6:d9:f4:91:99:b8:03:4c:29:91:
         6b:75:c8:65:ce:b0:ab:e4:07:5a:70:16:36:5b:90:7b:99:d4:
         71:3f:e2:87:42:9c:04:99:8a:7e:ee:30:cd:a8:30:69:d4:f0:
         0b:f2:03:94
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICB2UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzg1
NzEzRTM1OUZDQjlDQUIxMkYyMERCM0ZGMTkwRkNBODFFMzIzRTAeFw0yMDA5Mjkw
OTU4MDhaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEI4MkE1QTgxNzI4NkY3
RkNGNTY5N0E3QjNFNjVFOUU4RUE3QUY0OEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDsIC2JJdwcOsC4sZa0cfGLSEBLWgOHqTsx33C2FAjDFk6Q9oyt
ipe/LGzkMvu3M56N+IJRLri+kJ6aZdc3GYEokXmlpr333HU3BOJgFMPS3ltGg2aG
ozAT1clCGxIECKWxkVB02shPIOhKxNiAma6STAPowRhkfnQ/JhBq6b3//8lyxeYu
0+UoRPuj9+xdh9DEx6G95zRM4l2moTgDfvY4wDpvB4y5IHFEuwlT+roHXt7+K6+N
bmUBUPYGVk9KaBcTHEB+ypKFLKQfr+CUwXvsRRASXnjlDLMjr4pQBDgYcg1aeNWc
CWj0xd0c/5oIL5KRK1E6PtL3tuyPjqspoxMbAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUuCpagXKG9/z1aXp7PmXp6Op69I0wHwYDVR0jBBgwFoAUOFcT41n8ucqxLyDb
P/GQ/KgeMj4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSEhSQ09M
VEQvT0ZjVDQxbjh1Y3F4THlEYlBfR1FfS2dlTWo0LmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9PRmNUNDFuOHVjcXhMeURiUF9HUV9LZ2VNajQuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISFJDT0xURC91Q3BhZ1hLRzlfejFh
WHA3UG1YcDZPcDY5STAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAZ3q9MA0GCSqGSIb3DQEBCwUAA4IBAQBVJnSwgrKdR5ujLo+n/wY0SIEGNMQK
F04nDQZWI8AN4H5AOm5lK+EacOo8ON7Li+hVajC1sxC3UNHqa7X0l1S2cNuwDf0I
tpkCGboEeDXXvtEn3N0QI6yV/VvMO4ZVfaoUhQBKAlFua5hRkP4BCY5kBSys4Xv/
PJYK9YsjoNVyXbppGCoh0TWc0iTE4CEMeTxvN5HV29mWNEAI0YUbz+uB1UKoLY5/
TaJdT7AIrrEX+/5B4BCfNm/HuObqi9d+cz/+oKXBZf4u6FS2pRKp0NbZ9JGZuANM
KZFrdchlzrCr5AdacBY2W5B7mdRxP+KHQpwEmYp+7jDNqDBp1PAL8gOU
-----END CERTIFICATE-----