Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/MXI8zrKRZLiYHttkUuiYHhUwmnE.roa
File:                     MXI8zrKRZLiYHttkUuiYHhUwmnE.roa (raw, json)
Hash identifier:          2pEG1GSKpwApiH5l52pNL236QPkFXFJ9tb1FgrhswaA=
Subject key identifier:   31:72:3C:CE:B2:91:64:B8:98:1E:DB:64:52:E8:98:1E:15:30:9A:71
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       08EE
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/MXI8zrKRZLiYHttkUuiYHhUwmnE.roa
Signing time:             Sun 07 Feb 2021 11:37:07 +0000
ROA not before:           Sun 07 Feb 2021 11:37:07 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24158
IP address blocks:        115.80.0.0/14 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2286 (0x8ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Feb  7 11:37:07 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=31723CCEB29164B8981EDB6452E8981E15309A71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9d:d8:32:ec:12:cb:e3:8f:16:0e:f2:6c:7f:
                    d3:38:5c:7c:56:24:c8:4a:56:92:1e:1f:ee:a6:a5:
                    a2:30:21:59:16:50:c8:c7:67:cb:55:60:17:b1:41:
                    8c:44:07:c2:54:24:d1:08:5b:a0:aa:0e:fa:6d:c9:
                    77:3f:83:20:41:c3:9d:72:e6:99:fb:5b:06:32:a5:
                    2a:89:dc:28:a1:cc:5a:d7:3e:c4:1d:99:bf:7a:d4:
                    1b:7c:c3:c2:9c:a9:03:67:7e:92:95:bb:90:de:2a:
                    a2:08:b7:26:44:aa:38:85:dd:68:e9:b1:1c:e9:37:
                    23:ce:2c:07:59:b5:d9:8c:02:43:df:d7:b8:31:f9:
                    d1:ad:74:da:37:aa:4b:7e:a6:6b:11:62:e8:7b:cb:
                    4f:c5:27:66:5d:ac:de:56:d5:46:a7:d2:c2:ae:10:
                    60:46:2b:14:e7:f0:ad:c2:3e:1e:8a:42:75:65:17:
                    5b:c8:4a:2c:7a:64:fa:b1:a1:40:f5:fc:87:a4:94:
                    1c:82:b1:b1:8f:6e:0e:32:dc:a9:16:0c:0c:55:da:
                    63:fc:1d:0d:eb:81:c8:4c:81:8c:8f:77:9a:56:c8:
                    a8:ae:64:29:18:17:b1:4a:fd:b7:38:4f:18:ea:91:
                    ef:e5:ab:59:e5:47:b5:f6:b0:db:ac:2a:3f:b7:ba:
                    4d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:72:3C:CE:B2:91:64:B8:98:1E:DB:64:52:E8:98:1E:15:30:9A:71
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/MXI8zrKRZLiYHttkUuiYHhUwmnE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.80.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         6b:12:02:2e:16:b5:3f:cf:9d:f6:d1:57:b4:69:50:28:35:64:
         99:ca:0e:eb:12:63:fb:5b:18:5a:00:3e:e9:15:95:40:e8:af:
         a1:ce:94:bc:7e:15:fc:ba:84:f3:8f:47:07:23:4d:3e:4f:8c:
         f7:33:48:89:8e:68:6e:3b:30:c8:e7:c4:87:fe:69:1b:b2:e1:
         c2:cc:63:0a:29:5f:c5:c1:5b:8f:b7:60:5c:29:1d:e4:2e:ee:
         cd:4c:64:f9:e0:81:e5:be:0d:bd:2b:64:30:31:ca:3d:d7:ba:
         f7:55:cb:27:e4:d2:b9:cc:c7:ef:d5:f4:1b:d9:3c:94:ca:ff:
         d5:c2:c4:90:b2:71:53:ff:49:45:74:48:39:93:fd:42:37:b8:
         b0:37:5c:af:d8:ef:d7:6d:0e:70:fe:ff:c0:a9:a2:76:1c:1d:
         67:1a:87:68:15:8f:8b:76:dc:9a:0d:8e:56:24:44:12:fc:ae:
         d8:0d:b1:9c:60:f8:e6:bf:55:41:2e:b3:b2:f0:8f:fd:29:ac:
         89:3b:a1:07:8d:6e:19:f1:e6:38:c8:f3:45:11:ca:37:0f:e0:
         ef:51:18:59:76:05:8a:da:f1:02:5a:b8:b3:4a:f9:66:3e:c3:
         44:66:5f:bb:2a:d7:08:60:c6:23:68:f0:d0:1e:e2:b7:99:2a:
         63:86:8b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----