Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/6MzofTaCt2OniMHYTbQFXWrCjCQ.roa
File:                     6MzofTaCt2OniMHYTbQFXWrCjCQ.roa (raw, json)
Hash identifier:          vrw8OKn1CFDzy5KPijlxFT0QBY7vWrR0t2GCBoqmA8w=
Subject key identifier:   E8:CC:E8:7D:36:82:B7:63:A7:88:C1:D8:4D:B4:05:5D:6A:C2:8C:24
Certificate issuer:       /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial:       09
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/6MzofTaCt2OniMHYTbQFXWrCjCQ.roa
Signing time:             Fri 24 Jul 2020 08:35:49 +0000
ROA not before:           Fri 24 Jul 2020 08:35:49 +0000
ROA not after:            Sat 24 Jul 2021 08:03:22 +0000
asID:                     131657
IP address blocks:        103.153.177.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
        Validity
            Not Before: Jul 24 08:35:49 2020 GMT
            Not After : Jul 24 08:03:22 2021 GMT
        Subject: CN=E8CCE87D3682B763A788C1D84DB4055D6AC28C24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6a:6c:9a:c0:e0:64:df:8e:47:f3:b0:6a:84:
                    d9:ab:4a:05:67:65:18:7c:aa:5b:a2:a7:4d:04:70:
                    8b:81:96:0a:3a:40:ed:b4:90:92:22:b9:41:52:40:
                    80:5e:d9:d4:df:10:cb:92:3f:65:26:48:6f:e5:50:
                    4c:a5:05:7c:87:56:6a:d3:da:ea:9f:ae:40:83:b7:
                    46:b9:28:11:d9:f8:bc:87:be:7d:a4:51:77:1d:cf:
                    aa:0e:24:b5:f5:f7:34:19:fb:4b:f5:43:7d:45:3e:
                    79:d2:48:df:73:6c:38:3d:1c:40:fc:61:53:80:7f:
                    89:3f:69:00:57:5c:e8:ea:d2:ee:9c:b2:59:8b:3b:
                    b9:62:5d:bc:f9:93:1e:a0:34:3f:94:bc:d1:ca:04:
                    35:68:ba:4e:ec:51:a8:d7:87:67:28:ca:f8:77:ba:
                    70:9e:cb:e7:3d:6c:06:ee:c3:b4:86:3a:6c:f2:ad:
                    19:ab:b2:a4:f1:13:52:fe:2b:f0:0b:85:10:17:e1:
                    cf:5e:43:45:8f:e7:4e:2e:cf:04:95:b0:5b:2e:07:
                    ad:62:e2:6c:53:a3:00:98:d8:e7:4b:9f:39:f6:0e:
                    45:07:ad:72:52:c5:a0:1d:73:93:69:f0:16:25:e8:
                    a8:fc:a4:ef:a4:fe:7c:54:4e:86:9c:b9:4c:9f:5f:
                    d8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:CC:E8:7D:36:82:B7:63:A7:88:C1:D8:4D:B4:05:5D:6A:C2:8C:24
            X509v3 Authority Key Identifier:
                keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/6MzofTaCt2OniMHYTbQFXWrCjCQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:26:4d:2e:01:87:50:40:26:d5:2f:44:4a:10:1f:5c:c2:e0:
         f1:7e:ff:d7:41:36:14:0a:15:53:c1:76:fd:a4:9b:8f:66:09:
         fa:8b:4d:f5:ea:de:e7:93:8f:03:ac:9c:e7:f8:7b:12:64:9f:
         10:25:55:03:f3:85:29:a7:e7:24:c3:e2:7e:d0:29:5c:60:04:
         b2:c7:da:45:b4:b2:7e:25:c8:64:5f:2a:69:bb:dd:1f:55:93:
         8e:dd:42:69:5d:7e:80:57:1b:e0:cb:df:66:cb:20:0e:f0:e7:
         b7:b6:c0:43:50:9c:c5:3c:cb:24:19:2a:22:66:08:82:39:d3:
         b5:02:1d:77:7e:b2:11:81:53:b2:11:35:c4:4e:f8:34:15:42:
         e0:22:98:65:0f:9b:94:b2:1b:ae:37:72:d8:fc:de:81:e7:42:
         5b:41:1e:be:2c:3a:ef:41:41:74:aa:39:a0:5e:ab:a9:f8:5a:
         5f:6e:f5:e3:71:11:c4:ce:0a:3a:c4:59:56:c2:8a:89:d0:e2:
         ff:f2:42:96:d0:7d:13:4d:c7:b2:ab:3e:9c:be:df:d4:5b:a0:
         c3:3f:fb:7a:df:ba:39:2c:84:04:19:19:0c:c6:62:99:b0:e9:
         93:dd:6f:cf:3f:ac:51:63:04:c5:3e:29:20:5c:fa:02:bb:02:
         27:b4:db:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----