Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/Eo82b1wg4LIuKIBlYKgmR0x2sJI.roa
File:                     Eo82b1wg4LIuKIBlYKgmR0x2sJI.roa (raw, json)
Hash identifier:          HFyh1r/UB1AxZeID/xfyOnJvT5Q7I2wKUuzsV4gQkCk=
Subject key identifier:   12:8F:36:6F:5C:20:E0:B2:2E:28:80:65:60:A8:26:47:4C:76:B0:92
Certificate issuer:       /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Certificate serial:       1016
Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/Eo82b1wg4LIuKIBlYKgmR0x2sJI.roa
Signing time:             Wed 29 Sep 2021 02:50:26 +0000
ROA not before:           Wed 29 Sep 2021 02:50:26 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131631
IP address blocks:        103.123.217.0/24 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4118 (0x1016)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
        Validity
            Not Before: Sep 29 02:50:26 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=128F366F5C20E0B22E28806560A826474C76B092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6c:bf:46:b0:81:00:15:28:33:82:18:02:cc:
                    34:dc:b0:8d:95:a1:1d:31:1c:fd:a1:0e:87:7b:ef:
                    0a:12:11:69:49:81:c2:0c:94:06:41:ca:53:ac:9a:
                    af:0b:d7:22:76:91:ac:c1:cc:85:51:40:ba:a9:7c:
                    af:ed:ea:a2:d2:f2:ba:37:b3:c6:63:b0:26:f1:e6:
                    0e:ac:f9:a3:22:7d:51:02:56:08:43:4b:2d:87:24:
                    24:b7:60:f3:9d:14:09:4b:d9:f6:f1:93:2b:af:f2:
                    04:f6:94:69:96:d5:2d:10:57:15:46:75:1b:f4:af:
                    5d:55:06:c3:09:2c:88:16:69:19:9d:b3:0b:47:8b:
                    ac:fe:8c:92:f6:86:aa:b5:92:c7:cf:39:f6:bf:11:
                    2a:35:2e:17:ac:9d:6e:78:55:11:25:af:96:fe:5b:
                    15:4a:7a:92:2a:0d:4c:60:c7:d3:65:52:01:06:88:
                    c7:49:8a:30:4b:57:12:37:3a:ea:78:ec:9b:b9:6b:
                    32:2a:3f:25:90:70:91:87:c4:82:45:0a:35:99:79:
                    91:c5:57:cc:63:85:8a:fb:58:7e:04:3a:2b:21:ff:
                    c6:7c:cf:13:3b:40:ab:5f:82:e1:80:c8:66:b1:8c:
                    57:60:4b:9e:c5:2e:fd:7f:09:7d:e3:c4:4d:49:85:
                    fe:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8F:36:6F:5C:20:E0:B2:2E:28:80:65:60:A8:26:47:4C:76:B0:92
            X509v3 Authority Key Identifier:
                keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/Eo82b1wg4LIuKIBlYKgmR0x2sJI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:7c:10:61:b7:91:63:f4:ce:67:0e:95:a3:79:93:4d:45:b7:
         ff:56:52:af:c9:51:38:dd:99:ec:6e:f9:5c:02:4d:83:20:48:
         43:ae:f7:f6:d8:54:5b:83:86:e0:fa:69:77:e8:86:3e:9d:83:
         21:16:59:0a:18:ff:11:72:17:f1:8d:17:8f:53:fe:69:1b:09:
         b9:f3:99:bf:f6:3b:77:f3:07:1d:79:14:38:7c:5c:21:ed:ac:
         02:d4:82:bc:50:4c:1f:5b:39:09:35:2a:bc:9d:89:48:94:0d:
         83:61:11:e0:49:78:dd:6f:b0:0d:38:33:72:ed:d5:e9:25:c9:
         a0:98:8f:30:ec:85:2b:55:eb:db:b9:c0:45:bb:0f:18:d6:a3:
         a7:e1:1b:dd:73:f0:74:cd:54:00:70:3e:e2:06:d7:c2:66:9d:
         fd:00:ea:a0:09:d2:e4:6a:4a:a5:e9:21:10:01:1b:c4:47:8b:
         92:ff:ea:e0:33:73:64:27:fe:12:a4:e3:64:88:58:df:0b:82:
         77:3c:aa:48:d7:71:69:58:94:c7:ed:1c:a8:6a:08:04:fd:df:
         85:6a:12:3b:7b:e9:db:4c:1c:78:4a:b1:03:d8:d6:eb:6a:66:
         a5:51:cb:91:19:b6:b7:7b:af:bf:44:a3:26:34:05:0d:6e:dd:
         2d:5f:70:05
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICEBYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzQ5
QjlDRTkwQUUwM0RBRDE5QkM1NERGRjYzQUU4QzQxRTIyMzk0ODAeFw0yMTA5Mjkw
MjUwMjZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDEyOEYzNjZGNUMyMEUw
QjIyRTI4ODA2NTYwQTgyNjQ3NEM3NkIwOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCubL9GsIEAFSgzghgCzDTcsI2VoR0xHP2hDod77woSEWlJgcIM
lAZBylOsmq8L1yJ2kazBzIVRQLqpfK/t6qLS8ro3s8ZjsCbx5g6s+aMifVECVghD
Sy2HJCS3YPOdFAlL2fbxkyuv8gT2lGmW1S0QVxVGdRv0r11VBsMJLIgWaRmdswtH
i6z+jJL2hqq1ksfPOfa/ESo1LhesnW54VRElr5b+WxVKepIqDUxgx9NlUgEGiMdJ
ijBLVxI3Oup47Ju5azIqPyWQcJGHxIJFCjWZeZHFV8xjhYr7WH4EOish/8Z8zxM7
QKtfguGAyGaxjFdgS57FLv1/CX3jxE1Jhf5nAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUEo82b1wg4LIuKIBlYKgmR0x2sJIwHwYDVR0jBBgwFoAUNJuc6QrgPa0ZvFTf
9jroxB4iOUgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0NORVQv
Tkp1YzZRcmdQYTBadkZUZjlqcm94QjRpT1VnLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9OSnVjNlFyZ1BhMFp2RlRmOWpyb3hCNGlPVWcuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TQ05FVC9FbzgyYjF3ZzRMSXVLSUJsWUtn
bVIweDJzSkkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3vZ
MA0GCSqGSIb3DQEBCwUAA4IBAQAHfBBht5Fj9M5nDpWjeZNNRbf/VlKvyVE43Zns
bvlcAk2DIEhDrvf22FRbg4bg+ml36IY+nYMhFlkKGP8RchfxjRePU/5pGwm585m/
9jt38wcdeRQ4fFwh7awC1IK8UEwfWzkJNSq8nYlIlA2DYRHgSXjdb7ANODNy7dXp
JcmgmI8w7IUrVevbucBFuw8Y1qOn4Rvdc/B0zVQAcD7iBtfCZp39AOqgCdLkakql
6SEQARvER4uS/+rgM3NkJ/4SpONkiFjfC4J3PKpI13FpWJTH7RyoaggE/d+FahI7
e+nbTBx4SrED2NbramalUcuRGba3e6+/RKMmNAUNbt0tX3AF
-----END CERTIFICATE-----