Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Etgo0KV4mFDhrEzCHjjiC5t94L0.roa
File:                     Etgo0KV4mFDhrEzCHjjiC5t94L0.roa (raw, json)
Hash identifier:          NHN36dyFOvbqS97yHW0KPHl7vf+McPx9sxjESHwCV+4=
Subject key identifier:   12:D8:28:D0:A5:78:98:50:E1:AC:4C:C2:1E:38:E2:0B:9B:7D:E0:BD
Certificate issuer:       /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Certificate serial:       093F
Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Etgo0KV4mFDhrEzCHjjiC5t94L0.roa
Signing time:             Wed 29 Sep 2021 02:52:55 +0000
ROA not before:           Wed 29 Sep 2021 02:52:55 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     4781
IP address blocks:        210.63.101.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2367 (0x93f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
        Validity
            Not Before: Sep 29 02:52:55 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=12D828D0A5789850E1AC4CC21E38E20B9B7DE0BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:52:a4:cd:f4:40:f0:f5:a5:d8:23:d7:54:d8:
                    10:83:9c:fd:db:d7:91:5a:6d:fb:24:3b:19:c0:a8:
                    6f:39:9f:b0:cf:1f:cd:b2:c7:0d:71:f2:46:33:72:
                    8b:b0:4e:ca:b9:b0:9f:ac:a4:cf:35:89:0d:d3:cb:
                    fd:2f:67:90:bb:aa:df:e5:88:66:3f:c7:6d:13:93:
                    a6:8a:86:b5:a3:c9:75:c1:6c:8c:3f:72:73:8d:3e:
                    01:a5:73:cf:19:4d:96:d9:29:43:67:d0:85:ba:bf:
                    19:65:92:23:2c:51:75:fc:43:1f:df:cb:4b:75:81:
                    a5:28:0e:8e:12:0c:df:06:36:4e:f4:dd:23:df:f5:
                    e6:da:70:36:06:03:89:30:fa:2a:63:8d:08:1d:9f:
                    50:51:74:21:42:c6:cf:64:e7:a2:c0:c8:95:4b:a3:
                    03:01:c7:85:cf:63:18:92:07:e3:27:1c:24:83:23:
                    c5:3f:66:db:f2:65:4c:0b:f8:15:0c:e6:b0:81:60:
                    30:9c:31:36:df:f2:c9:20:5c:a0:ce:21:24:a0:e1:
                    4c:62:26:70:93:9d:07:c9:13:f3:08:a3:49:e7:a0:
                    59:35:8d:1b:8c:49:2f:fb:f6:93:66:90:56:c1:fe:
                    a9:33:30:05:73:05:5f:5d:4b:38:a9:70:db:5c:e9:
                    ea:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D8:28:D0:A5:78:98:50:E1:AC:4C:C2:1E:38:E2:0B:9B:7D:E0:BD
            X509v3 Authority Key Identifier:
                keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Etgo0KV4mFDhrEzCHjjiC5t94L0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.63.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:e6:af:2d:b2:7e:5f:a1:ec:48:b9:f3:c6:45:86:2e:c0:c9:
         58:42:c9:40:a9:e8:46:dd:66:b9:5e:6b:93:64:bb:de:0c:d5:
         55:e0:76:a1:24:14:f1:16:9a:86:ca:b4:ed:48:96:c5:28:3f:
         5c:13:ec:6f:e0:56:f4:92:74:5c:d8:3d:a7:29:ac:a0:a2:e1:
         68:5e:9d:31:e2:90:39:5f:e1:aa:f7:bf:2c:3e:4a:68:9e:5d:
         98:06:35:83:09:15:47:e6:e4:14:40:bc:73:fb:cc:28:94:cb:
         f3:75:bd:dd:4c:b5:fe:be:8a:bd:42:3a:a3:7f:42:5b:74:c9:
         63:4b:66:1e:ae:37:b1:24:de:39:e6:06:e9:60:92:77:d2:4d:
         55:21:9b:6e:14:ca:0a:c3:80:aa:d1:c5:d7:33:88:cc:4b:d8:
         87:03:83:88:28:ae:04:da:cd:bc:cc:d2:74:d3:11:65:fb:4c:
         17:87:bb:ed:83:da:03:66:25:08:3e:48:a0:8c:cc:4b:5e:5c:
         d0:56:70:d2:0f:ca:db:53:fd:a2:37:21:87:0f:19:9f:ef:74:
         d2:d4:40:31:c7:8b:74:6c:2c:01:ff:02:18:78:66:90:4f:f0:
         b4:64:27:78:c1:45:71:34:7b:a5:58:46:74:43:5c:35:98:92:
         01:03:8d:c2
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCT8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTI5
QjYwNkRCODYyODNCRDRBMDhBRjdFQjMzRUYzOEEyNTY2MzFCQjAeFw0yMTA5Mjkw
MjUyNTVaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDEyRDgyOEQwQTU3ODk4
NTBFMUFDNENDMjFFMzhFMjBCOUI3REUwQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQUqTN9EDw9aXYI9dU2BCDnP3b15FabfskOxnAqG85n7DPH82y
xw1x8kYzcouwTsq5sJ+spM81iQ3Ty/0vZ5C7qt/liGY/x20Tk6aKhrWjyXXBbIw/
cnONPgGlc88ZTZbZKUNn0IW6vxllkiMsUXX8Qx/fy0t1gaUoDo4SDN8GNk703SPf
9ebacDYGA4kw+ipjjQgdn1BRdCFCxs9k56LAyJVLowMBx4XPYxiSB+MnHCSDI8U/
ZtvyZUwL+BUM5rCBYDCcMTbf8skgXKDOISSg4UxiJnCTnQfJE/MIo0nnoFk1jRuM
SS/79pNmkFbB/qkzMAVzBV9dSzipcNtc6epfAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUEtgo0KV4mFDhrEzCHjjiC5t94L0wHwYDVR0jBBgwFoAUUptgbbhig71KCK9+
sz7ziiVmMbswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEFHSUMv
VXB0Z2JiaGlnNzFLQ0s5LXN6N3ppaVZtTWJzLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9VcHRnYmJoaWc3MUtDSzktc3o3emlpVm1NYnMuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QQUdJQy9FdGdvMEtWNG1GRGhyRXpDSGpq
aUM1dDk0TDAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0j9l
MA0GCSqGSIb3DQEBCwUAA4IBAQAG5q8tsn5foexIufPGRYYuwMlYQslAqehG3Wa5
XmuTZLveDNVV4HahJBTxFpqGyrTtSJbFKD9cE+xv4Fb0knRc2D2nKaygouFoXp0x
4pA5X+Gq978sPkponl2YBjWDCRVH5uQUQLxz+8wolMvzdb3dTLX+voq9Qjqjf0Jb
dMljS2YerjexJN455gbpYJJ30k1VIZtuFMoKw4Cq0cXXM4jMS9iHA4OIKK4E2s28
zNJ00xFl+0wXh7vtg9oDZiUIPkigjMxLXlzQVnDSD8rbU/2iNyGHDxmf73TS1EAx
x4t0bCwB/wIYeGaQT/C0ZCd4wUVxNHulWEZ0Q1w1mJIBA43C
-----END CERTIFICATE-----