Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/9VCqos4fXEG3bOnzHCQuh9AM3b4.roa
File:                     9VCqos4fXEG3bOnzHCQuh9AM3b4.roa (raw, json)
Hash identifier:          L9DKGnlkE2k8ayuqQX63tHd/89TNf3VNAmdRniVC6cU=
Subject key identifier:   F5:50:AA:A2:CE:1F:5C:41:B7:6C:E9:F3:1C:24:2E:87:D0:0C:DD:BE
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0A48
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/9VCqos4fXEG3bOnzHCQuh9AM3b4.roa
Signing time:             Wed 29 Sep 2021 02:52:52 +0000
ROA not before:           Wed 29 Sep 2021 02:52:52 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18424
IP address blocks:        103.30.44.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2632 (0xa48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 29 02:52:52 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=F550AAA2CE1F5C41B76CE9F31C242E87D00CDDBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:67:38:48:d5:39:8d:6b:8c:54:08:f2:84:78:
                    49:17:6e:d3:75:d4:6f:50:b7:eb:04:54:c2:ff:4f:
                    8a:69:99:51:cf:24:06:01:ca:7d:a1:fd:71:b5:eb:
                    6b:d9:5e:67:fa:74:0a:e3:c5:9f:c6:b2:01:6b:53:
                    b6:d2:f2:2f:8d:3c:f5:87:15:03:70:59:66:9b:ed:
                    8b:1b:bd:d2:5c:d0:f2:07:a2:ff:c2:57:92:87:40:
                    87:99:67:93:f4:95:75:a9:f0:a5:73:f7:83:4e:01:
                    a0:5f:80:9c:6a:e3:2d:c0:aa:6a:35:58:33:81:c6:
                    db:a2:7e:e8:e0:6e:f6:c3:ed:23:b4:3f:2b:48:1d:
                    fe:0f:eb:2b:9c:98:6c:53:e0:9c:f6:49:03:24:41:
                    43:14:26:a4:72:63:6a:09:ed:ef:8f:1a:26:42:59:
                    f1:5e:12:bf:4c:28:d3:c9:21:29:81:47:59:94:8b:
                    67:4d:5a:33:af:1e:de:fa:7e:78:12:15:4d:2b:ec:
                    f2:ce:c9:ef:2d:8e:19:d1:22:5c:88:e7:b0:ff:82:
                    be:fd:a2:79:e0:85:07:75:a6:f6:b3:4f:b2:a1:34:
                    9e:6f:ea:58:10:21:bc:82:4f:c5:13:16:37:2e:91:
                    55:70:11:2d:e9:56:61:45:ab:a3:59:d7:88:b5:cf:
                    8c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:50:AA:A2:CE:1F:5C:41:B7:6C:E9:F3:1C:24:2E:87:D0:0C:DD:BE
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/9VCqos4fXEG3bOnzHCQuh9AM3b4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:a1:8c:fa:3b:b2:1c:b1:02:5b:af:f5:90:23:4c:87:ac:14:
         92:a3:04:4f:7e:8d:2d:6f:41:e2:88:c6:cb:03:7f:bb:e0:04:
         b9:49:22:6b:02:22:5c:5d:b3:98:94:29:65:5f:3d:6d:e7:17:
         3f:25:5d:d5:70:02:b0:e0:e4:f2:d2:4e:63:cf:6b:38:00:39:
         ac:c5:cf:00:ac:71:fa:b0:fa:2a:f2:e2:c1:0f:2f:9d:d4:94:
         6c:e6:63:9e:75:e8:d9:84:6c:49:04:28:24:8c:c3:b8:1d:37:
         fc:af:10:b9:5d:46:90:b2:3c:0e:4f:a8:de:72:60:3a:9e:9c:
         9d:0b:d8:0b:f6:16:52:23:ac:04:f3:8f:b9:f9:12:5b:b2:70:
         ec:16:ce:23:32:7d:b9:7f:37:bc:fb:1d:71:93:b7:25:1d:ce:
         46:db:9c:e1:d2:44:6d:67:6c:41:ff:7b:fb:82:f2:41:75:22:
         6b:8c:14:2f:e4:ea:86:d9:3e:c6:f1:c3:0f:5b:91:9e:bc:b9:
         a1:56:35:74:1f:ae:5b:06:4a:2a:12:3b:1b:78:fe:65:88:2b:
         bb:64:e5:d6:e5:5b:75:14:12:32:91:94:b3:83:0e:0f:b6:cc:
         28:fb:86:a0:79:d3:0d:7b:a3:56:54:df:4b:a7:96:49:88:00:
         e6:3b:5e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----