Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jpwbcZouptxjfkfGyU7DSrS75pw.roa
File:                     jpwbcZouptxjfkfGyU7DSrS75pw.roa (raw, json)
Hash identifier:          VgEYvFS73USNis4RPL7uO+3Y04b24zFiMUbMw0JgJjY=
Subject key identifier:   8E:9C:1B:71:9A:2E:A6:DC:63:7E:47:C6:C9:4E:C3:4A:B4:BB:E6:9C
Certificate issuer:       /CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
Certificate serial:       087D
Authority key identifier: 8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jpwbcZouptxjfkfGyU7DSrS75pw.roa
Signing time:             Sun 07 Feb 2021 13:00:12 +0000
ROA not before:           Sun 07 Feb 2021 13:00:12 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131618
IP address blocks:        103.129.136.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2173 (0x87d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
        Validity
            Not Before: Feb  7 13:00:12 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=8E9C1B719A2EA6DC637E47C6C94EC34AB4BBE69C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:22:7d:03:a1:b0:29:1e:c9:ee:ab:ec:4d:90:
                    67:66:5d:a0:e5:05:d4:75:4c:fe:19:ab:50:fd:c9:
                    af:6b:c1:1a:5c:89:f7:b6:b9:4e:f7:88:17:53:9b:
                    fc:6c:7b:37:1e:48:3f:60:b1:68:e0:ed:f8:47:bf:
                    9a:c6:58:c2:4b:d8:ea:29:a6:ba:49:0d:2d:42:d9:
                    be:19:37:ea:89:87:9a:39:d9:f1:a6:3c:87:3a:85:
                    bd:4b:33:e7:e7:fa:7f:1f:81:42:03:62:ab:6e:e5:
                    e5:07:ce:84:9a:82:93:53:ed:39:87:ba:90:98:77:
                    ac:00:f0:8c:c8:25:09:2a:f4:63:4a:b5:e7:05:95:
                    4d:72:3b:0b:09:56:6f:3f:56:22:a0:36:26:80:ce:
                    33:e8:09:59:67:2c:0b:a1:cb:37:df:b0:1d:e6:ec:
                    77:39:13:96:53:d9:46:06:c2:95:7e:8c:65:6d:21:
                    c3:7e:ea:3b:ee:a1:0f:1c:a1:71:8a:a8:79:4d:e5:
                    7e:4d:bd:50:ef:57:69:cc:fa:ed:29:45:59:4e:1c:
                    69:3b:6c:be:1d:f0:07:87:db:d9:50:48:af:62:bf:
                    52:0a:cc:a6:43:b0:4b:3a:11:67:05:84:c9:40:91:
                    fd:64:be:1e:60:04:8d:0c:81:b8:d6:65:af:2a:13:
                    5a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9C:1B:71:9A:2E:A6:DC:63:7E:47:C6:C9:4E:C3:4A:B4:BB:E6:9C
            X509v3 Authority Key Identifier:
                keyid:8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jpwbcZouptxjfkfGyU7DSrS75pw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:f1:3b:a0:7a:61:5f:9a:2f:8e:f4:55:1b:62:51:fb:16:f4:
         15:67:eb:51:bf:fc:e3:f4:eb:32:fb:7b:9c:ad:6d:07:7d:f6:
         9c:73:0a:70:a1:f3:06:17:63:d0:0b:44:38:d4:22:0d:6f:08:
         6a:35:cf:f4:9c:97:08:ca:25:5f:7b:94:69:ee:a0:7c:1a:93:
         57:ac:36:c2:40:a5:ad:1a:15:1b:ed:03:07:cc:bc:62:b6:90:
         6d:10:36:a0:a7:91:35:42:be:b2:b7:45:4c:3d:94:a7:98:17:
         8e:55:b1:78:7d:39:6f:c9:c3:28:1e:a2:67:fe:e6:f8:03:0c:
         c2:5b:c6:9e:32:8d:47:29:ba:2c:ff:32:1b:4b:14:6c:41:36:
         18:c2:e7:b3:1d:d1:1e:77:7b:8a:e6:24:67:bc:1a:e8:29:b5:
         09:f5:38:b5:ce:5b:b3:92:48:2f:5b:2a:ba:d4:c9:f7:b7:cb:
         0d:54:60:af:a1:20:66:d3:a7:41:c3:18:10:50:b5:9d:03:ad:
         65:a0:d9:5d:2e:ab:9d:cb:ca:fd:db:07:77:51:46:e4:68:9d:
         44:77:4f:20:38:4e:72:04:5b:34:a0:b5:e2:a4:83:b0:d9:2a:
         4a:f0:15:0a:d0:1a:85:24:9a:bc:11:2b:86:8a:f3:36:7a:ce:
         2c:62:d1:b6
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCH0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEMx
ODNEN0NCQTZCOUE5Q0FGRTZGNTBCRkIwMzhENjQ1RDI2REM3RjAeFw0yMTAyMDcx
MzAwMTJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDhFOUMxQjcxOUEyRUE2
REM2MzdFNDdDNkM5NEVDMzRBQjRCQkU2OUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKIn0DobApHsnuq+xNkGdmXaDlBdR1TP4Zq1D9ya9rwRpcife2
uU73iBdTm/xsezceSD9gsWjg7fhHv5rGWMJL2OopprpJDS1C2b4ZN+qJh5o52fGm
PIc6hb1LM+fn+n8fgUIDYqtu5eUHzoSagpNT7TmHupCYd6wA8IzIJQkq9GNKtecF
lU1yOwsJVm8/ViKgNiaAzjPoCVlnLAuhyzffsB3m7Hc5E5ZT2UYGwpV+jGVtIcN+
6jvuoQ8coXGKqHlN5X5NvVDvV2nM+u0pRVlOHGk7bL4d8AeH29lQSK9iv1IKzKZD
sEs6EWcFhMlAkf1kvh5gBI0MgbjWZa8qE1rtAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUjpwbcZouptxjfkfGyU7DSrS75pwwHwYDVR0jBBgwFoAUjBg9fLprmpyv5vUL
+wONZF0m3H8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0tZQ0xP
VUQvakJnOWZMcHJtcHl2NXZVTC13T05aRjBtM0g4LmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9qQmc5Zkxwcm1weXY1dlVMLXdPTlpGMG0zSDguY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TS1lDTE9VRC9qcHdiY1pvdXB0eGpm
a2ZHeVU3RFNyUzc1cHcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQCZ4GIMA0GCSqGSIb3DQEBCwUAA4IBAQAp8TugemFfmi+O9FUbYlH7FvQVZ+tR
v/zj9Osy+3ucrW0HffaccwpwofMGF2PQC0Q41CINbwhqNc/0nJcIyiVfe5Rp7qB8
GpNXrDbCQKWtGhUb7QMHzLxitpBtEDagp5E1Qr6yt0VMPZSnmBeOVbF4fTlvycMo
HqJn/ub4AwzCW8aeMo1HKbos/zIbSxRsQTYYwuezHdEed3uK5iRnvBroKbUJ9Ti1
zluzkkgvWyq61Mn3t8sNVGCvoSBm06dBwxgQULWdA61loNldLqudy8r92wd3UUbk
aJ1Ed08gOE5yBFs0oLXipIOw2SpK8BUK0BqFJJq8ESuGivM2es4sYtG2
-----END CERTIFICATE-----