Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/EF3Sgkp617RoXpmDIbgfXy6E23M.roa
File:                     EF3Sgkp617RoXpmDIbgfXy6E23M.roa (raw, json)
Hash identifier:          OMBrTP/+Bd5/FoH1EXj+9OxjThi/Ykdfuv1M6bMveUI=
Subject key identifier:   10:5D:D2:82:4A:7A:D7:B4:68:5E:99:83:21:B8:1F:5F:2E:84:DB:73
Certificate issuer:       /CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF
Certificate serial:       0DA0
Authority key identifier: ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/EF3Sgkp617RoXpmDIbgfXy6E23M.roa
Signing time:             Mon 11 Jan 2021 11:22:50 +0000
ROA not before:           Mon 11 Jan 2021 11:22:50 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131633
IP address blocks:        103.127.238.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3488 (0xda0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF
        Validity
            Not Before: Jan 11 11:22:50 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=105DD2824A7AD7B4685E998321B81F5F2E84DB73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6a:e1:60:7f:83:52:ac:94:a0:03:fa:61:cc:
                    1e:1d:81:a7:9b:ad:b1:46:db:3c:22:7f:9d:5e:0d:
                    41:f4:16:4b:b5:51:b0:cf:58:e5:45:28:e6:e2:04:
                    86:e9:05:41:65:cd:35:0e:fd:40:f0:a3:bb:a8:e0:
                    21:55:6b:d9:4e:85:f0:91:07:7f:1f:93:74:c9:d9:
                    16:3a:ad:f3:a9:c3:ec:02:41:78:c6:8c:9b:0a:81:
                    57:28:c8:b3:e7:60:f5:58:4e:13:93:ca:7b:5d:1a:
                    6e:98:5a:11:e7:59:6f:a4:c9:47:d8:d9:28:d1:fd:
                    57:96:7a:59:14:28:d1:19:dd:0e:4b:ca:f7:2b:f7:
                    87:cf:dd:c5:a4:79:4b:27:d6:68:e4:68:8b:f3:37:
                    7d:1a:2a:92:4a:5e:05:49:33:53:ff:c7:e5:9c:05:
                    f8:11:12:70:f3:55:c7:96:b6:f5:a0:7e:bd:91:4e:
                    50:83:b3:a4:16:8b:1f:f5:2f:b5:83:f1:3a:09:1c:
                    45:fd:cf:3d:f6:18:66:95:3e:5b:75:37:30:16:78:
                    32:fe:e3:d4:4e:34:20:60:83:67:df:cb:ab:1f:65:
                    5e:8c:5d:f4:06:70:a9:50:e5:3f:5d:a8:4c:f5:41:
                    79:be:f6:be:92:2e:f5:5b:5d:c7:eb:04:0a:30:04:
                    62:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:5D:D2:82:4A:7A:D7:B4:68:5E:99:83:21:B8:1F:5F:2E:84:DB:73
            X509v3 Authority Key Identifier:
                keyid:ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/EF3Sgkp617RoXpmDIbgfXy6E23M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:ea:0f:c9:dd:2c:7a:6a:f0:76:8d:02:76:bb:d7:bb:27:d8:
         21:fd:10:08:cc:59:09:11:83:24:de:d3:88:2d:52:55:8d:1f:
         cf:e4:f1:58:95:54:9e:d4:b9:9f:51:07:95:ac:63:5c:1a:32:
         08:86:07:06:d1:c9:32:be:c5:a9:3b:98:01:0d:ef:98:8a:11:
         c5:fd:65:36:4d:c0:8d:c2:4f:03:3a:51:39:1c:12:d6:ff:80:
         0e:a8:f6:fc:32:5d:ae:7f:4b:05:17:f4:7e:7a:9a:3f:c2:bc:
         8f:81:9e:df:59:ad:c7:04:00:4d:ec:b6:29:bf:5c:03:0d:22:
         58:a4:25:5f:0d:15:57:61:d1:13:3f:cc:da:35:96:19:e3:4d:
         98:b4:2e:69:d5:51:66:83:c3:f0:79:48:2b:6b:44:44:9e:bb:
         02:fc:bb:a7:c3:9c:d1:ca:78:d9:5a:a7:52:c8:12:5f:77:e5:
         72:1c:ec:8a:3c:e8:0b:48:fb:f9:b9:eb:e1:86:8f:2d:dd:ca:
         33:67:c4:ba:95:ce:53:21:0a:e1:09:7c:6f:7f:f1:0a:ac:22:
         2f:ac:13:ee:9d:a0:ec:13:9d:78:19:77:70:e9:c2:d7:4d:94:
         9e:b3:8c:b8:5d:71:41:ba:98:f0:ec:a4:2c:29:d1:cc:de:ac:
         9f:8f:7c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----