Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/EDoYyKhRopQEXBumBaa5RSPl_W8.roa
File:                     EDoYyKhRopQEXBumBaa5RSPl_W8.roa (raw, json)
Hash identifier:          w14Lr9gK9I87pROjR5EFjZIdosbSwXFUhc47RRovKzM=
Subject key identifier:   10:3A:18:C8:A8:51:A2:94:04:5C:1B:A6:05:A6:B9:45:23:E5:FD:6F
Certificate issuer:       /CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5
Certificate serial:       0924
Authority key identifier: 99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/EDoYyKhRopQEXBumBaa5RSPl_W8.roa
Signing time:             Wed 29 Sep 2021 02:50:24 +0000
ROA not before:           Wed 29 Sep 2021 02:50:24 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131633
IP address blocks:        2403:86c0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2340 (0x924)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5
        Validity
            Not Before: Sep 29 02:50:24 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=103A18C8A851A294045C1BA605A6B94523E5FD6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:23:0f:4f:e5:65:ad:34:64:ff:16:46:2e:67:
                    2d:71:9a:06:f9:d1:09:ed:dc:0c:cd:63:73:22:41:
                    81:24:ac:01:72:08:23:d7:96:5b:de:09:29:65:5c:
                    d9:c2:87:fd:c0:bb:95:eb:d9:92:72:ff:79:c7:17:
                    79:36:b7:0e:e3:53:72:14:89:05:5f:52:46:95:1d:
                    f4:d5:b2:23:57:1a:ea:e8:d9:91:8a:54:68:2a:37:
                    fc:ca:07:ec:04:61:60:50:e6:0c:3b:36:8e:b9:88:
                    14:1b:ce:30:b3:2a:8f:8d:bf:d0:6c:72:b0:35:dc:
                    7a:1e:8e:76:0b:02:b7:42:a4:6d:bd:75:59:85:33:
                    1d:5d:a7:15:92:26:f8:6b:95:0b:44:97:2f:79:26:
                    63:9b:f5:a0:98:06:b2:a7:31:c5:29:f7:e0:f9:50:
                    60:fc:01:5d:8d:84:41:48:2e:90:a9:da:95:bf:34:
                    c9:ce:a9:6a:07:6e:7d:78:46:f2:aa:b3:3a:b4:16:
                    08:e7:9b:51:7b:b3:55:6f:74:1a:ed:06:d2:ed:39:
                    07:69:52:ca:dc:8f:cd:c6:a2:84:35:79:7e:62:2e:
                    ec:e7:b6:05:ef:87:0c:30:cb:31:f9:9e:dd:0f:25:
                    c8:73:6f:a2:e1:3b:6f:a2:68:f0:20:82:a7:a6:db:
                    4b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:3A:18:C8:A8:51:A2:94:04:5C:1B:A6:05:A6:B9:45:23:E5:FD:6F
            X509v3 Authority Key Identifier:
                keyid:99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/EDoYyKhRopQEXBumBaa5RSPl_W8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:86c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:cf:0d:56:65:9d:6d:7b:06:dd:75:d7:c7:21:df:90:c3:b7:
         b0:97:56:07:c8:a1:09:3f:e3:58:6d:dd:ff:1b:aa:dd:90:25:
         87:a8:36:e1:1f:c8:0f:90:67:2e:7e:ad:5b:6f:62:89:91:8c:
         58:16:be:a8:b0:39:62:69:b5:a5:91:f3:9c:2a:f9:f5:b1:ca:
         1f:43:d0:28:3d:1d:c8:c1:fc:4c:05:07:8d:85:4d:3a:f2:5f:
         25:f7:21:18:56:8f:2f:27:51:87:5a:77:87:f1:e8:96:77:5f:
         8e:87:e9:de:b1:06:a4:af:4d:28:2d:3d:5b:e0:27:1f:1d:13:
         19:5f:6c:7d:73:a7:83:47:87:73:dd:18:8b:2f:a8:d0:63:71:
         16:66:25:20:bf:53:19:c1:d4:af:f0:7e:c3:d4:28:d4:23:d5:
         d4:6c:86:25:60:27:3d:34:c9:71:d2:bc:3d:53:fb:96:bd:e6:
         fc:f6:74:63:4a:cc:c1:ce:ae:31:3b:70:e6:62:6c:de:e0:0d:
         4c:97:3c:23:5f:0c:6b:b3:3c:a4:37:f6:96:2b:cd:6d:13:a1:
         ff:c1:20:e5:9a:f5:bb:e9:4e:70:5e:00:f2:dd:56:c4:44:9c:
         22:70:59:37:a0:31:78:51:3f:e0:77:6b:dd:80:99:5b:c8:c7:
         7b:13:f9:f2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----