Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/FWdvB1Xe3tscJ1PZXlwpgH1qItg.roa
File:                     FWdvB1Xe3tscJ1PZXlwpgH1qItg.roa (raw, json)
Hash identifier:          0rqLQCJSiI/nFzg/4A7mdzNLM33Sj6oAi0XMCpxIs2o=
Subject key identifier:   15:67:6F:07:55:DE:DE:DB:1C:27:53:D9:5E:5C:29:80:7D:6A:22:D8
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0A3C
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/FWdvB1Xe3tscJ1PZXlwpgH1qItg.roa
Signing time:             Wed 29 Sep 2021 02:52:49 +0000
ROA not before:           Wed 29 Sep 2021 02:52:49 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18424
IP address blocks:        121.50.144.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2620 (0xa3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 29 02:52:49 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=15676F0755DEDEDB1C2753D95E5C29807D6A22D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cf:dd:39:d4:4e:fb:60:64:6a:3a:88:bf:92:
                    20:14:d7:22:d8:d3:44:e9:4f:1a:c7:d8:09:aa:6f:
                    e4:b2:1e:62:76:ff:0e:95:5e:fc:0f:55:fb:5a:36:
                    62:b3:3f:2f:a8:15:47:1a:a7:17:0c:f0:a8:e5:45:
                    68:b6:b0:8e:ad:2b:95:4e:8a:cc:57:4c:38:64:71:
                    18:0d:f5:db:44:9d:23:5f:75:58:ce:28:fb:70:60:
                    b9:5f:63:27:f6:12:33:60:c4:a7:97:47:99:a7:60:
                    52:8f:82:e9:55:7f:b1:0b:dc:b3:e2:35:8f:5f:24:
                    81:c2:ad:be:aa:56:1c:74:64:12:27:7c:48:55:21:
                    a5:4c:32:25:71:4e:02:03:51:0d:79:4c:7a:4b:ec:
                    fb:71:fc:e3:9a:e2:aa:45:cd:b3:73:b7:76:80:a3:
                    2c:05:dc:76:b2:a7:9c:54:9b:5a:27:6d:6c:10:4a:
                    e3:4d:36:90:99:87:b3:5b:2f:51:65:75:b5:dd:be:
                    72:a1:3f:14:88:3c:a9:15:6a:e8:6e:b2:bb:96:a2:
                    4b:cf:d2:c7:6c:43:76:a6:0d:f5:23:ae:0c:42:d9:
                    77:ec:92:d1:d6:8c:94:2b:10:c4:bc:03:57:bc:f1:
                    f7:77:50:19:21:2d:11:b5:fe:9e:c3:54:e2:af:b0:
                    0a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:67:6F:07:55:DE:DE:DB:1C:27:53:D9:5E:5C:29:80:7D:6A:22:D8
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/FWdvB1Xe3tscJ1PZXlwpgH1qItg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6f:2b:a8:31:d7:d5:f3:08:c5:47:26:ea:58:d4:5d:ab:39:04:
         4c:a3:28:d8:d3:7b:a4:3f:ef:ae:74:93:c3:23:ae:7d:f0:84:
         1e:ae:ab:6f:8a:5d:d0:b4:a2:14:03:b7:06:da:6a:5d:f2:60:
         bd:66:ff:ee:9f:49:16:8c:c6:a6:72:3f:03:20:61:b6:09:e3:
         94:be:b3:b7:9f:42:87:07:5c:fd:cd:69:78:88:b3:78:85:3f:
         d5:20:f7:22:50:c1:b7:ab:db:46:7d:c5:94:13:16:ab:04:82:
         d6:00:d2:b3:d1:bb:14:19:4d:7c:c4:ad:4e:cf:f8:b7:96:ad:
         00:17:6a:e5:b0:fe:18:42:f0:06:be:6f:77:39:be:44:00:86:
         88:2a:6f:0a:bb:5e:6e:fb:84:fa:a1:f0:35:b7:f2:a8:d8:19:
         e2:fd:c1:74:33:b5:6b:66:e8:7d:d9:40:2e:5d:e0:e6:fc:c8:
         0d:d5:bd:e1:b7:9e:37:2f:38:1f:17:c8:72:b2:75:34:3e:97:
         a2:3f:6d:56:6f:e9:f3:ba:b8:02:ca:a8:ec:2a:79:91:b7:2c:
         65:2f:24:7c:a7:53:c1:1f:89:54:fe:34:17:66:79:4a:d3:f6:
         e5:e6:b6:ab:e6:f0:30:30:21:2c:85:da:0d:e0:b3:73:cc:e5:
         29:42:66:18
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICCjwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3
RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yMTA5Mjkw
MjUyNDlaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDE1Njc2RjA3NTVERURF
REIxQzI3NTNEOTVFNUMyOTgwN0Q2QTIyRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOz9051E77YGRqOoi/kiAU1yLY00TpTxrH2Amqb+SyHmJ2/w6V
XvwPVftaNmKzPy+oFUcapxcM8KjlRWi2sI6tK5VOisxXTDhkcRgN9dtEnSNfdVjO
KPtwYLlfYyf2EjNgxKeXR5mnYFKPgulVf7EL3LPiNY9fJIHCrb6qVhx0ZBInfEhV
IaVMMiVxTgIDUQ15THpL7Ptx/OOa4qpFzbNzt3aAoywF3Hayp5xUm1onbWwQSuNN
NpCZh7NbL1FldbXdvnKhPxSIPKkVauhusruWokvP0sdsQ3amDfUjrgxC2XfsktHW
jJQrEMS8A1e88fd3UBkhLRG1/p7DVOKvsApfAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUFWdvB1Xe3tscJ1PZXlwpgH1qItgwHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN
caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ
V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL0ZXZHZCMVhlM3Rz
Y0oxUFpYbHdwZ0gxcUl0Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAN5MpAwDQYJKoZIhvcNAQELBQADggEBAG8rqDHX1fMIxUcm6ljUXas5BEyj
KNjTe6Q/7650k8Mjrn3whB6uq2+KXdC0ohQDtwbaal3yYL1m/+6fSRaMxqZyPwMg
YbYJ45S+s7efQocHXP3NaXiIs3iFP9Ug9yJQwber20Z9xZQTFqsEgtYA0rPRuxQZ
TXzErU7P+LeWrQAXauWw/hhC8Aa+b3c5vkQAhogqbwq7Xm77hPqh8DW38qjYGeL9
wXQztWtm6H3ZQC5d4Ob8yA3VveG3njcvOB8XyHKydTQ+l6I/bVZv6fO6uALKqOwq
eZG3LGUvJHynU8EfiVT+NBdmeUrT9uXmtqvm8DAwISyF2g3gs3PM5SlCZhg=
-----END CERTIFICATE-----