Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/SRLNjmAR5PbBkRnUpL9W67HFzUg.roa
File:                     SRLNjmAR5PbBkRnUpL9W67HFzUg.roa (raw, json)
Hash identifier:          o/Mg9+jpBqCkvTQ6mGuOuHzgXsUD3080NVe6EBsCdMM=
Subject key identifier:   49:12:CD:8E:60:11:E4:F6:C1:91:19:D4:A4:BF:56:EB:B1:C5:CD:48
Certificate issuer:       /CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
Certificate serial:       0968
Authority key identifier: 83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/SRLNjmAR5PbBkRnUpL9W67HFzUg.roa
Signing time:             Wed 29 Sep 2021 02:40:24 +0000
ROA not before:           Wed 29 Sep 2021 02:40:24 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131619
IP address blocks:        103.116.99.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2408 (0x968)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
        Validity
            Not Before: Sep 29 02:40:24 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=4912CD8E6011E4F6C19119D4A4BF56EBB1C5CD48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ea:98:86:1d:94:6c:08:2e:43:e4:72:a2:13:
                    d8:75:62:44:1f:76:e4:02:78:56:fc:cc:fb:0b:d9:
                    0e:7e:55:2e:a2:1f:9c:b3:23:89:c4:ca:ed:a8:21:
                    16:f9:09:5c:d5:0c:31:eb:36:02:87:b4:5a:fb:f0:
                    ed:62:67:44:a9:05:fb:d1:0e:48:fa:51:5a:db:65:
                    61:c1:8b:c8:b1:95:0f:9a:67:f2:54:08:2c:04:f6:
                    01:3e:6e:cc:8c:e9:d8:a9:5d:91:50:d0:7e:13:04:
                    04:31:f2:79:04:aa:07:6b:eb:c1:47:aa:06:cc:5a:
                    a6:12:97:e6:00:8a:ac:cb:f2:21:e7:2f:b2:9c:1f:
                    f7:be:64:5b:50:5a:28:c9:fe:d7:90:a3:d7:02:af:
                    17:4e:42:07:96:1a:4b:c8:d8:4e:24:b7:c1:32:ca:
                    91:23:70:bc:07:f5:bb:cc:b2:f0:a2:9e:e3:22:52:
                    aa:87:1c:ce:83:11:df:44:14:c9:59:23:4c:28:81:
                    67:d9:c1:90:71:b1:53:d5:c4:cd:3a:06:e1:17:cc:
                    3b:01:98:10:d0:07:1e:67:e4:12:d0:51:c5:3e:c1:
                    e9:39:3f:1d:68:22:ea:d7:8a:e8:c8:d2:e8:0d:25:
                    0c:fc:93:f2:ab:fc:4e:ec:ff:dc:89:d8:c5:54:d9:
                    f5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:12:CD:8E:60:11:E4:F6:C1:91:19:D4:A4:BF:56:EB:B1:C5:CD:48
            X509v3 Authority Key Identifier:
                keyid:83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/SRLNjmAR5PbBkRnUpL9W67HFzUg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:b4:df:dc:7f:2d:93:05:ce:25:91:4a:08:21:06:f3:cf:46:
         b4:bc:fb:ea:48:ec:78:e6:88:fb:bb:08:ba:c3:34:af:8f:06:
         a2:39:93:77:58:47:52:00:31:98:76:eb:3d:44:f4:ae:18:1b:
         df:39:0e:ca:9f:e7:ad:92:a9:9b:b5:ec:3e:f5:67:17:25:7a:
         29:a6:f7:b3:6e:b0:79:0c:bc:0b:60:4f:8f:00:17:c4:f3:96:
         51:3e:6c:4d:f9:9b:7e:c3:00:37:50:2e:de:d6:75:92:2a:47:
         03:3c:51:51:6e:73:f0:f4:c8:5a:7e:f6:27:18:f6:ef:24:02:
         f1:1b:ac:b0:0d:5f:53:73:66:09:94:4b:4c:d1:bf:78:9c:cb:
         6e:1e:2a:12:7e:88:46:1c:37:90:2e:03:6a:9d:b7:34:fb:bd:
         8e:61:f9:95:62:17:fe:9a:a5:32:54:13:97:5e:11:3f:cd:0c:
         c2:58:42:b0:4c:8d:87:80:2c:c4:8d:c7:a2:1b:8e:53:bd:4f:
         a8:02:a6:d3:27:30:05:a9:7b:c5:de:d8:5d:18:c9:88:91:15:
         02:fc:b9:f9:ee:52:60:f2:f6:da:14:db:52:8c:09:d5:a3:42:
         2d:03:99:69:2a:62:88:a9:96:fe:31:c4:08:87:9c:e0:88:de:
         f6:56:21:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----