Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/27J2Sn8N3iwUouqOqlnfAdUGcGw.roa
File:                     27J2Sn8N3iwUouqOqlnfAdUGcGw.roa (raw, json)
Hash identifier:          rhDEy1Xji7RSe7JWAkkF8lHaa7FNDVj7BFLJK0Bu4fs=
Subject key identifier:   DB:B2:76:4A:7F:0D:DE:2C:14:A2:EA:8E:AA:59:DF:01:D5:06:70:6C
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       08EA
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/27J2Sn8N3iwUouqOqlnfAdUGcGw.roa
Signing time:             Sun 07 Feb 2021 11:37:04 +0000
ROA not before:           Sun 07 Feb 2021 11:37:04 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24158
IP address blocks:        101.8.0.0/13 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2282 (0x8ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Feb  7 11:37:04 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=DBB2764A7F0DDE2C14A2EA8EAA59DF01D506706C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:62:6e:ed:fe:80:7f:0d:34:d1:a8:ee:a8:76:
                    f6:4c:d9:f0:df:0e:e8:34:e2:b4:dc:c4:13:b7:59:
                    92:38:eb:cc:d7:e4:0a:5f:85:1e:4e:93:a5:31:2d:
                    47:c1:e2:d9:a9:95:77:64:44:c0:93:2e:d2:43:7f:
                    88:26:74:3a:31:d1:88:7d:06:bd:a7:d3:79:76:3d:
                    5a:37:4a:54:34:c5:fb:ea:29:da:d5:10:27:99:86:
                    7d:6b:49:16:0a:1e:7a:4c:a3:5f:0e:58:6f:e4:b0:
                    42:79:8f:55:30:c0:95:62:b7:df:92:16:10:dd:f3:
                    3d:8c:ec:b6:1d:1c:56:77:eb:ac:5e:4a:88:61:3a:
                    de:8f:27:91:46:fc:ab:62:9e:f4:3c:bc:67:e7:a6:
                    75:3b:14:11:2f:ca:39:22:f6:91:a4:5e:56:da:2b:
                    27:37:30:a4:58:79:17:11:2e:95:a6:0a:01:06:18:
                    b2:ec:bc:18:b0:75:2f:d9:da:d2:8e:7c:5f:03:72:
                    88:44:8e:ac:2c:02:6e:d1:e7:f0:eb:04:1b:ff:bc:
                    8a:4c:cc:27:18:27:41:99:80:8e:66:ca:ff:a0:3b:
                    c5:a1:83:77:2f:21:b8:f2:04:d8:fc:2b:4a:62:51:
                    0d:da:ac:92:80:17:a8:be:36:7c:7d:53:1f:9a:ea:
                    58:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B2:76:4A:7F:0D:DE:2C:14:A2:EA:8E:AA:59:DF:01:D5:06:70:6C
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/27J2Sn8N3iwUouqOqlnfAdUGcGw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.8.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         ae:e8:6a:f9:e7:b0:29:85:bd:18:ad:94:66:58:bf:db:56:26:
         67:85:f3:a0:b0:e9:d0:e0:63:dd:5e:74:9a:5a:49:4c:4a:46:
         de:73:e4:23:6f:a8:ba:e2:8c:95:15:7c:42:a6:06:0d:16:7b:
         5b:1d:ef:e9:69:09:ff:ac:51:8c:f8:24:1e:d6:9a:c5:d8:f5:
         c9:24:e1:61:ea:0a:4c:b4:80:e2:58:bf:98:f0:96:a5:95:49:
         8e:e2:49:ca:a1:97:94:f4:ca:7d:83:46:a8:6d:a7:4d:ff:03:
         66:d1:5c:5c:61:49:72:30:38:e5:b4:cb:07:2c:3d:94:7c:ec:
         7b:67:c0:05:6b:0e:5d:9b:1e:9b:2f:f5:ab:8c:9b:61:26:db:
         e5:3c:27:17:14:54:1f:c6:17:5e:e4:f7:62:41:e2:00:14:44:
         88:76:99:a7:9c:8c:c9:bc:bf:4f:c4:e2:ef:5f:c6:04:ef:bc:
         4d:71:34:28:96:d0:a9:31:ba:9e:03:ec:51:11:aa:5a:e5:e3:
         0d:4a:88:65:d4:68:cc:7e:94:0a:d3:ac:45:13:07:bd:15:0a:
         cb:69:94:dc:d5:aa:a6:20:e9:cd:46:8b:95:e2:fd:29:2c:2e:
         99:8e:be:ed:b5:77:3f:21:0f:c4:b3:3e:08:c9:4c:58:7c:16:
         d9:09:01:51
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgICCOowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD
QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yMTAyMDcx
MTM3MDRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKERCQjI3NjRBN0YwRERF
MkMxNEEyRUE4RUFBNTlERjAxRDUwNjcwNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzYm7t/oB/DTTRqO6odvZM2fDfDug04rTcxBO3WZI468zX5Apf
hR5Ok6UxLUfB4tmplXdkRMCTLtJDf4gmdDox0Yh9Br2n03l2PVo3SlQ0xfvqKdrV
ECeZhn1rSRYKHnpMo18OWG/ksEJ5j1UwwJVit9+SFhDd8z2M7LYdHFZ366xeSohh
Ot6PJ5FG/KtinvQ8vGfnpnU7FBEvyjki9pGkXlbaKyc3MKRYeRcRLpWmCgEGGLLs
vBiwdS/Z2tKOfF8DcohEjqwsAm7R5/DrBBv/vIpMzCcYJ0GZgI5myv+gO8Whg3cv
IbjyBNj8K0piUQ3arJKAF6i+Nnx9Ux+a6lgVAgMBAAGjggH5MIIB9TAdBgNVHQ4E
FgQU27J2Sn8N3iwUouqOqlnfAdUGcGwwHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg
6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg
VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO
TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH
AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp
L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B
Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov
L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFLzI3SjJT
bjhOM2l3VW91cU9xbG5mQWRVR2NHdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v
cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzAN
MAsEAgABMAUDAwNlCDANBgkqhkiG9w0BAQsFAAOCAQEAruhq+eewKYW9GK2UZli/
21YmZ4XzoLDp0OBj3V50mlpJTEpG3nPkI2+ouuKMlRV8QqYGDRZ7Wx3v6WkJ/6xR
jPgkHtaaxdj1ySThYeoKTLSA4li/mPCWpZVJjuJJyqGXlPTKfYNGqG2nTf8DZtFc
XGFJcjA45bTLByw9lHzse2fABWsOXZsemy/1q4ybYSbb5TwnFxRUH8YXXuT3YkHi
ABREiHaZp5yMyby/T8Ti71/GBO+8TXE0KJbQqTG6ngPsURGqWuXjDUqIZdRozH6U
CtOsRRMHvRUKy2mU3NWqpiDpzUaLleL9KSwumY6+7bV3PyEPxLM+CMlMWHwW2QkB
UQ==
-----END CERTIFICATE-----