Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HWME1204/yEfoBWmFd8s5cks0jX6xP8IdInY.roa
File:                     yEfoBWmFd8s5cks0jX6xP8IdInY.roa (raw, json)
Hash identifier:          vAZCc0PM7oyc2IWUvEGvXjrqeJTU7gx41GsDaq1Tlxc=
Subject key identifier:   C8:47:E8:05:69:85:77:CB:39:72:4B:34:8D:7E:B1:3F:C2:1D:22:76
Certificate issuer:       /CN=E95973EB86F597CAE612C67929ED9352E70B5528
Certificate serial:       0DBD
Authority key identifier: E9:59:73:EB:86:F5:97:CA:E6:12:C6:79:29:ED:93:52:E7:0B:55:28
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/6Vlz64b1l8rmEsZ5Ke2TUucLVSg.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HWME1204/yEfoBWmFd8s5cks0jX6xP8IdInY.roa
Signing time:             Sun 07 Feb 2021 12:43:19 +0000
ROA not before:           Sun 07 Feb 2021 12:43:19 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18046
IP address blocks:        103.126.180.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3517 (0xdbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95973EB86F597CAE612C67929ED9352E70B5528
        Validity
            Not Before: Feb  7 12:43:19 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C847E805698577CB39724B348D7EB13FC21D2276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9c:b1:59:b8:32:c3:ef:9e:c9:50:6a:74:4a:
                    9e:c4:13:24:d1:5c:17:0e:1c:af:a4:cb:ed:6f:0f:
                    ce:75:61:ca:15:80:da:57:f1:48:43:be:a3:9f:dc:
                    34:b0:ca:24:3b:1c:c7:ee:a7:6b:7b:60:31:02:f8:
                    7c:78:c6:e7:58:bb:cb:37:cc:7e:b2:c7:79:a7:77:
                    e4:c2:df:d8:91:97:aa:3f:95:e8:77:08:52:76:8e:
                    78:7b:69:76:39:b3:7f:e8:38:b5:5f:3e:dc:a7:17:
                    95:65:7f:b9:b9:44:63:33:ac:25:e3:19:49:f4:41:
                    00:b2:08:f0:a3:d2:2f:40:e2:55:03:d6:89:d2:5e:
                    33:b3:cf:64:c8:a0:5f:15:51:3b:7f:42:03:af:5e:
                    ea:38:ad:78:75:ea:59:25:ae:b5:bb:49:d6:d1:7b:
                    a3:25:2a:b6:85:9f:44:42:1c:04:15:6c:1f:77:a3:
                    df:53:c9:46:bd:a6:25:1c:45:c0:cd:f3:46:76:1c:
                    48:bc:b4:64:f3:4e:83:68:e4:82:cc:e3:9a:63:28:
                    44:50:bf:4d:52:2c:11:21:c6:4b:b3:e3:51:04:5f:
                    86:43:06:42:59:c8:cb:d9:9f:18:a9:63:9f:37:e8:
                    82:0f:71:db:35:df:e7:c2:18:77:a2:85:57:a5:e3:
                    46:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:47:E8:05:69:85:77:CB:39:72:4B:34:8D:7E:B1:3F:C2:1D:22:76
            X509v3 Authority Key Identifier:
                keyid:E9:59:73:EB:86:F5:97:CA:E6:12:C6:79:29:ED:93:52:E7:0B:55:28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWME1204/6Vlz64b1l8rmEsZ5Ke2TUucLVSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/6Vlz64b1l8rmEsZ5Ke2TUucLVSg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWME1204/yEfoBWmFd8s5cks0jX6xP8IdInY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:30:2a:07:09:6f:01:18:86:6d:0d:ca:2c:ee:61:72:a1:34:
         97:21:3c:b1:31:bc:2f:8b:ff:10:3c:65:8a:26:e1:6b:64:8b:
         45:3b:78:6b:72:49:0f:60:b4:18:b1:88:eb:79:77:69:e6:4e:
         59:d5:59:49:a2:c5:21:7f:62:c6:c5:c4:cd:08:ce:6f:55:12:
         b8:6a:78:af:a1:0b:ea:44:a5:7f:ee:a6:22:e2:df:ff:19:97:
         b8:7a:76:5f:42:06:49:c5:bd:d8:21:ab:11:3e:bb:a3:8f:d3:
         c7:08:99:53:dd:38:0c:00:92:a3:12:23:b3:c6:ff:d5:ff:fa:
         20:3c:35:0a:fb:1c:a5:c5:51:ee:ab:ae:95:2c:d7:40:4c:fe:
         f3:ee:cd:cf:84:b3:82:e4:be:29:ce:15:33:8f:d8:75:ad:cf:
         3d:16:bd:0b:cc:a8:70:d2:86:ce:b7:f1:d7:e4:f4:f1:35:15:
         b6:a9:f5:52:b4:e3:65:36:34:ab:63:ef:f2:e7:ae:7a:3f:b4:
         4b:25:13:23:67:be:d6:8d:eb:cf:33:47:78:0a:99:e6:7f:1c:
         4a:8e:ce:d9:d8:94:2c:19:03:83:a0:a9:d3:54:73:2c:4f:bb:
         5f:a3:b2:07:cb:c4:2c:60:0e:1c:97:d2:33:6c:5e:d6:25:9b:
         9f:b1:eb:24
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICDb0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTk1
OTczRUI4NkY1OTdDQUU2MTJDNjc5MjlFRDkzNTJFNzBCNTUyODAeFw0yMTAyMDcx
MjQzMTlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEM4NDdFODA1Njk4NTc3
Q0IzOTcyNEIzNDhEN0VCMTNGQzIxRDIyNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNnLFZuDLD757JUGp0Sp7EEyTRXBcOHK+ky+1vD851YcoVgNpX
8UhDvqOf3DSwyiQ7HMfup2t7YDEC+Hx4xudYu8s3zH6yx3mnd+TC39iRl6o/leh3
CFJ2jnh7aXY5s3/oOLVfPtynF5Vlf7m5RGMzrCXjGUn0QQCyCPCj0i9A4lUD1onS
XjOzz2TIoF8VUTt/QgOvXuo4rXh16lklrrW7SdbRe6MlKraFn0RCHAQVbB93o99T
yUa9piUcRcDN80Z2HEi8tGTzToNo5ILM45pjKERQv01SLBEhxkuz41EEX4ZDBkJZ
yMvZnxipY5836IIPcds13+fCGHeihVel40adAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUyEfoBWmFd8s5cks0jX6xP8IdInYwHwYDVR0jBBgwFoAU6Vlz64b1l8rmEsZ5
Ke2TUucLVSgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSFdNRTEy
MDQvNlZsejY0YjFsOHJtRXNaNUtlMlRVdWNMVlNnLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS82Vmx6NjRiMWw4cm1Fc1o1S2UyVFV1Y0xWU2cuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9IV01FMTIwNC95RWZvQldtRmQ4czVj
a3Mwalg2eFA4SWRJblkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQCZ360MA0GCSqGSIb3DQEBCwUAA4IBAQAcMCoHCW8BGIZtDcos7mFyoTSXITyx
Mbwvi/8QPGWKJuFrZItFO3hrckkPYLQYsYjreXdp5k5Z1VlJosUhf2LGxcTNCM5v
VRK4anivoQvqRKV/7qYi4t//GZe4enZfQgZJxb3YIasRPrujj9PHCJlT3TgMAJKj
EiOzxv/V//ogPDUK+xylxVHuq66VLNdATP7z7s3PhLOC5L4pzhUzj9h1rc89Fr0L
zKhw0obOt/HX5PTxNRW2qfVStONlNjSrY+/y5656P7RLJRMjZ77WjevPM0d4Cpnm
fxxKjs7Z2JQsGQODoKnTVHMsT7tfo7IHy8QsYA4cl9IzbF7WJZufsesk
-----END CERTIFICATE-----