Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/3c2Z3_GaDWrejCSLdzHB_0uTx9k.roa
File:                     3c2Z3_GaDWrejCSLdzHB_0uTx9k.roa (raw, json)
Hash identifier:          Fg+xGdntuBA1N5JFpKumwKUaFGHLGbmLkb3tCfhFT8g=
Subject key identifier:   DD:CD:99:DF:F1:9A:0D:6A:DE:8C:24:8B:77:31:C1:FF:4B:93:C7:D9
Certificate issuer:       /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial:       095D
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/3c2Z3_GaDWrejCSLdzHB_0uTx9k.roa
Signing time:             Sun 07 Feb 2021 13:08:53 +0000
ROA not before:           Sun 07 Feb 2021 13:08:53 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     198949
IP address blocks:        223.27.32.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2397 (0x95d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
        Validity
            Not Before: Feb  7 13:08:53 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=DDCD99DFF19A0D6ADE8C248B7731C1FF4B93C7D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:63:2f:a9:34:d3:04:7b:86:38:5a:ba:a7:b9:
                    08:42:00:7c:8c:35:c0:4b:54:c0:34:c6:60:be:b6:
                    17:28:84:f6:f6:09:17:5d:09:d8:bd:f7:30:85:0e:
                    68:22:40:19:e6:00:61:b2:ff:33:3d:b6:f2:c4:d6:
                    e4:fd:49:a1:85:ab:a1:06:ed:40:fb:6e:fc:aa:d5:
                    9d:38:e4:d2:49:ae:c8:98:89:05:61:61:29:ba:f5:
                    45:57:c4:3e:43:cf:b6:fb:d1:67:1d:9a:33:e9:81:
                    41:6d:af:05:c9:56:45:04:a1:fa:5f:53:1f:b2:a7:
                    68:ad:8f:9c:5c:53:9a:ff:a1:9c:ad:49:83:a7:eb:
                    c0:88:a1:ac:7d:88:9e:f3:b5:a6:42:7d:a4:67:ce:
                    66:ba:43:2f:7c:a6:9c:31:c7:ab:0e:f8:3a:1a:ba:
                    7c:c2:b8:c1:0b:c9:f5:aa:3a:79:eb:e4:6e:f5:ba:
                    36:7e:9e:de:b4:d1:6c:0d:0f:67:33:a4:b8:ba:09:
                    c0:4c:3e:2b:6b:74:f9:36:56:b0:74:69:37:74:1c:
                    5a:f0:83:a8:40:2c:c2:a9:a8:c5:45:e3:bb:d6:bd:
                    79:00:25:be:c6:40:a2:f5:c5:f4:c6:b1:ec:a6:5c:
                    ec:bb:74:13:fd:26:c4:4b:c2:0a:4a:55:e2:a8:5e:
                    e6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:CD:99:DF:F1:9A:0D:6A:DE:8C:24:8B:77:31:C1:FF:4B:93:C7:D9
            X509v3 Authority Key Identifier:
                keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/3c2Z3_GaDWrejCSLdzHB_0uTx9k.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.27.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:d5:08:9b:9b:d7:35:f1:00:eb:4c:e3:81:d0:2a:af:b9:bb:
         5a:95:f9:12:4e:e4:e0:1b:41:84:8d:c3:80:59:db:66:bd:38:
         21:5a:a4:cd:a3:d2:03:82:b4:29:0e:5f:35:9a:f7:24:4e:0b:
         7d:4b:6f:46:62:0c:5a:58:b0:3c:e8:fc:aa:d4:39:e5:23:8c:
         77:68:63:89:b7:b0:32:24:84:73:3d:1c:6d:a2:c5:70:41:1c:
         d4:a2:15:9c:bd:f4:0c:e3:d7:f9:81:2b:3c:cd:6c:01:0e:0a:
         82:13:c6:d6:a8:11:87:bc:17:63:45:bf:b0:e6:5c:07:c6:4a:
         ae:cb:49:d4:99:d1:39:3d:75:2d:c6:d3:f1:97:97:77:6a:82:
         e7:52:4c:11:45:56:56:1a:ab:2a:70:87:3f:79:15:51:d3:12:
         16:12:da:fe:44:38:3d:00:4c:89:30:d5:87:8f:3c:01:e5:7d:
         7a:8c:14:bb:78:de:2c:18:52:8d:41:ef:6d:08:d9:90:8a:7f:
         7f:79:3f:20:84:a8:30:f7:80:b5:c0:99:98:12:95:fc:29:9b:
         55:d1:9a:f5:70:f4:45:da:d6:71:e3:9a:fe:e6:6d:81:81:76:
         06:6f:fb:b4:b0:d8:30:08:4d:f2:b5:19:c7:ca:da:55:39:c9:
         29:0d:83:68
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCV0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRE
RDQzMjk2MUFDNDJENjQ0QUVBRjM0QjE0QUVDNzAyNzVCMDZBMzAeFw0yMTAyMDcx
MzA4NTNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEREQ0Q5OURGRjE5QTBE
NkFERThDMjQ4Qjc3MzFDMUZGNEI5M0M3RDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRYy+pNNMEe4Y4WrqnuQhCAHyMNcBLVMA0xmC+thcohPb2CRdd
Cdi99zCFDmgiQBnmAGGy/zM9tvLE1uT9SaGFq6EG7UD7bvyq1Z045NJJrsiYiQVh
YSm69UVXxD5Dz7b70WcdmjPpgUFtrwXJVkUEofpfUx+yp2itj5xcU5r/oZytSYOn
68CIoax9iJ7ztaZCfaRnzma6Qy98ppwxx6sO+DoaunzCuMELyfWqOnnr5G71ujZ+
nt600WwND2czpLi6CcBMPitrdPk2VrB0aTd0HFrwg6hALMKpqMVF47vWvXkAJb7G
QKL1xfTGseymXOy7dBP9JsRLwgpKVeKoXuZHAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU3c2Z3/GaDWrejCSLdzHB/0uTx9kwHwYDVR0jBBgwFoAUNN1DKWGsQtZErq80
sUrscCdbBqMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFVNTy9O
TjFES1dHc1F0WkVycTgwc1Vyc2NDZGJCcU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L05OMURLV0dzUXRaRXJxODBzVXJzY0NkYkJxTS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1BVTU8vM2MyWjNfR2FEV3JlakNTTGR6SEJf
MHVUeDlrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAN8bIDAN
BgkqhkiG9w0BAQsFAAOCAQEAKdUIm5vXNfEA60zjgdAqr7m7WpX5Ek7k4BtBhI3D
gFnbZr04IVqkzaPSA4K0KQ5fNZr3JE4LfUtvRmIMWliwPOj8qtQ55SOMd2hjibew
MiSEcz0cbaLFcEEc1KIVnL30DOPX+YErPM1sAQ4KghPG1qgRh7wXY0W/sOZcB8ZK
rstJ1JnROT11LcbT8ZeXd2qC51JMEUVWVhqrKnCHP3kVUdMSFhLa/kQ4PQBMiTDV
h488AeV9eowUu3jeLBhSjUHvbQjZkIp/f3k/IISoMPeAtcCZmBKV/CmbVdGa9XD0
RdrWceOa/uZtgYF2Bm/7tLDYMAhN8rUZx8raVTnJKQ2DaA==
-----END CERTIFICATE-----