Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/v7fycIIQDNVL7XetDqqsw2A2tNY.roa
File:                     v7fycIIQDNVL7XetDqqsw2A2tNY.roa (raw, json)
Hash identifier:          h3CiOtuXEfdqLgM1V0czIH10Tyba9x0lVAIICVz0Nt0=
Subject key identifier:   BF:B7:F2:70:82:10:0C:D5:4B:ED:77:AD:0E:AA:AC:C3:60:36:B4:D6
Certificate issuer:       /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Certificate serial:       0974
Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/v7fycIIQDNVL7XetDqqsw2A2tNY.roa
Signing time:             Thu 30 Sep 2021 14:07:24 +0000
ROA not before:           Thu 30 Sep 2021 14:07:24 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131584
IP address blocks:        101.3.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2420 (0x974)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
        Validity
            Not Before: Sep 30 14:07:24 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=BFB7F27082100CD54BED77AD0EAAACC36036B4D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:37:86:1f:cd:5b:a0:80:0f:4c:31:e6:04:b2:
                    eb:0b:6e:59:15:e5:38:c9:b0:fa:7f:01:4e:86:76:
                    06:f8:19:1d:72:5a:71:03:07:1c:7f:a2:8c:3b:ff:
                    0e:c1:40:f2:48:4a:1f:ef:ca:18:b9:9b:d5:21:c6:
                    c9:7d:ff:df:66:bf:42:6f:2b:e3:60:22:bd:be:8d:
                    14:78:f4:ba:27:4f:8c:29:b9:5d:13:ba:73:4b:52:
                    03:23:14:03:99:dd:31:8d:d6:55:af:9e:cc:1b:fe:
                    9e:8a:7f:9f:ea:50:91:18:d6:d3:13:52:54:6d:44:
                    c5:6b:ca:78:ff:3f:2b:c2:0a:17:6d:22:6b:0f:b8:
                    fa:3c:f8:41:05:5e:c2:a4:a4:5d:58:85:a4:07:02:
                    12:f6:ab:04:fb:ab:5d:12:ff:85:ba:e4:e8:50:f6:
                    61:4b:ca:26:fd:e0:62:37:71:19:f5:62:a7:52:73:
                    87:d6:40:8a:e3:34:41:4f:ad:bc:0e:1c:5a:b7:7b:
                    76:65:fa:cd:52:2d:58:4f:15:c0:43:55:78:55:ce:
                    4c:99:76:2b:59:97:60:f1:85:de:46:07:fa:93:e9:
                    f8:96:0f:8f:28:83:8e:f3:01:d9:e5:8c:b2:ee:2c:
                    75:5a:af:92:da:52:9c:cd:47:fa:18:0b:46:f9:49:
                    e1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B7:F2:70:82:10:0C:D5:4B:ED:77:AD:0E:AA:AC:C3:60:36:B4:D6
            X509v3 Authority Key Identifier:
                keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/v7fycIIQDNVL7XetDqqsw2A2tNY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.3.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2a:b6:4b:60:96:f6:a8:14:e5:9f:55:b4:19:02:bb:c9:02:0a:
         22:a0:73:ca:ba:b5:ac:22:f2:02:8f:c9:a4:d9:e3:2d:5e:56:
         f2:bc:6a:a8:bf:5f:a2:a4:c1:69:0b:34:1d:65:cc:7e:dc:17:
         11:71:59:c4:c9:87:0c:01:7f:29:03:22:0c:f2:31:e4:a3:4c:
         2b:ee:13:7c:bf:3f:d1:06:99:d9:7c:b4:46:6d:ae:42:56:9d:
         73:2c:65:51:86:b2:69:2c:f5:6a:01:0e:b5:0d:49:44:b9:0e:
         d0:2b:32:f7:eb:12:75:b9:01:2d:c6:f4:21:fc:5a:b0:0e:e4:
         fa:a2:3f:14:44:70:c1:32:9a:0e:bc:e0:02:e2:8e:84:9d:e9:
         b3:0c:d9:e7:17:d8:4a:e2:90:2a:cc:5b:25:34:e6:f9:f2:33:
         e3:f6:45:3c:a3:50:61:54:95:db:aa:c8:3d:d0:bb:fa:2a:5b:
         39:33:35:47:42:3d:62:d8:68:24:e7:35:f8:fc:84:eb:d7:9c:
         c0:c9:12:86:62:e2:18:5d:47:61:f2:cb:a8:75:f3:c8:11:08:
         ec:6a:a8:65:24:64:69:45:78:fa:54:ff:a3:aa:4e:de:0c:5d:
         20:de:87:ef:ad:e0:b5:60:67:27:4c:e2:24:05:6c:da:f3:ee:
         6d:0c:18:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----