Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/rWQP4hvvabHtP691xRYAa0ZykIE.roa
File:                     rWQP4hvvabHtP691xRYAa0ZykIE.roa (raw, json)
Hash identifier:          BOBnq0sjbVZUDlSX/f4Zb4taWtHzqlBbuK0lRyOVuXU=
Subject key identifier:   AD:64:0F:E2:1B:EF:69:B1:ED:3F:AF:75:C5:16:00:6B:46:72:90:81
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       078B
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/rWQP4hvvabHtP691xRYAa0ZykIE.roa
Signing time:             Tue 29 Sep 2020 10:06:25 +0000
ROA not before:           Tue 29 Sep 2020 10:06:25 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24158
IP address blocks:        123.99.0.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1931 (0x78b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Sep 29 10:06:25 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=AD640FE21BEF69B1ED3FAF75C516006B46729081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:59:c5:7a:a6:2b:e2:77:58:9d:8a:71:8b:e7:
                    e3:c1:0f:5b:54:f9:cd:f6:f3:bf:4e:4e:ff:47:c4:
                    92:34:76:87:9e:d4:e9:d1:62:ea:c2:2c:58:44:1e:
                    f0:13:75:1b:12:f7:39:bb:8a:fd:ce:99:80:3d:a1:
                    cf:44:50:14:c0:86:c2:6c:05:ec:87:03:bb:c2:dc:
                    7b:4b:de:50:fc:0f:20:8b:5d:02:0f:a3:cb:5a:52:
                    1e:0a:35:f2:12:46:e0:db:b3:81:33:55:11:05:ac:
                    5d:59:f2:21:a6:78:da:e2:a2:59:81:d6:51:62:67:
                    51:0b:18:eb:0d:e8:91:71:d2:41:2e:39:38:d5:fc:
                    26:6a:c9:77:dd:f4:c2:d0:53:d3:19:38:3d:20:69:
                    d8:76:52:db:a0:78:f9:5a:62:13:52:a4:d2:aa:36:
                    4c:e7:42:ca:2a:b9:56:35:a6:01:0b:8b:56:ca:ef:
                    f9:23:63:21:42:9f:48:9c:6c:f2:8b:88:2f:9d:a4:
                    87:1c:87:5f:12:5b:b0:7d:d6:4f:ce:85:11:ac:a6:
                    65:5f:03:be:39:fb:88:ce:12:53:f3:40:5a:f4:57:
                    f1:05:eb:6d:f1:4f:14:9d:12:19:12:b7:39:da:75:
                    2f:34:79:0c:38:3e:d5:0f:c4:08:b8:9a:b4:76:e8:
                    0f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:64:0F:E2:1B:EF:69:B1:ED:3F:AF:75:C5:16:00:6B:46:72:90:81
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/rWQP4hvvabHtP691xRYAa0ZykIE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.99.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9b:fe:95:84:ae:f8:f9:b6:de:9e:9f:3a:07:c1:e5:53:12:19:
         c5:84:e5:72:4a:2f:4d:f0:26:70:db:f6:47:2f:19:e9:57:00:
         43:cf:ce:78:3c:f7:ef:ea:46:d8:f0:b3:05:0e:37:bb:f6:df:
         f8:c7:35:62:7d:46:5a:2e:d2:f2:c8:6f:09:49:c7:06:42:6f:
         f4:1b:38:ae:fb:07:cd:fb:49:7a:13:0e:b3:8d:49:af:35:0f:
         f4:88:61:f0:1b:88:a5:42:d0:32:be:9d:1e:01:15:e3:ef:9a:
         45:d1:11:56:80:70:4b:5c:08:20:5f:34:75:01:66:91:af:d5:
         69:d7:34:b1:94:26:a4:50:bf:99:cd:6a:e8:d6:6e:38:6a:9a:
         14:07:30:1d:f1:f7:03:ad:7d:d7:27:d1:1c:cc:39:9a:a5:7c:
         6a:8c:ec:fb:a3:b2:c9:c3:b4:0e:35:0d:7b:17:ea:d7:c9:94:
         2d:0c:7d:14:a4:dc:4d:98:36:3f:98:10:79:3f:b5:23:b9:6c:
         b9:d9:10:3c:ee:3b:4f:e4:2d:3e:75:ce:71:1c:b1:47:ef:c4:
         ec:e3:a4:52:51:4f:26:7d:e9:62:f7:ba:86:86:9f:ea:04:67:
         bf:8f:3d:bc:e2:14:f3:65:19:bd:14:67:ee:21:c5:68:7a:c9:
         3e:8e:e4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----