Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/PoeVjuNn-keI8wyW2aoXF9zMeeI.roa
File:                     PoeVjuNn-keI8wyW2aoXF9zMeeI.roa (raw, json)
Hash identifier:          IKJTWFEmXLfxVoqgC//xAdPAxVA2NGjm43S8ubUdTbA=
Subject key identifier:   3E:87:95:8E:E3:67:FA:47:88:F3:0C:96:D9:AA:17:17:DC:CC:79:E2
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0789
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/PoeVjuNn-keI8wyW2aoXF9zMeeI.roa
Signing time:             Tue 29 Sep 2020 10:00:31 +0000
ROA not before:           Tue 29 Sep 2020 10:00:31 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24168
IP address blocks:        103.30.47.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1929 (0x789)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 29 10:00:31 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=3E87958EE367FA4788F30C96D9AA1717DCCC79E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:22:c2:36:e7:44:3b:39:34:95:32:48:79:6f:
                    7a:24:f3:5d:95:4f:17:2a:d9:45:cb:9a:9d:3a:68:
                    02:25:80:f1:88:47:8b:91:6a:f5:e6:42:b5:14:a4:
                    c5:14:33:cd:fd:9f:8c:25:4b:01:53:83:e9:11:6a:
                    c5:0e:fb:f8:49:64:9d:ef:05:50:dd:a3:ee:b9:51:
                    48:33:7a:30:ad:82:e7:1b:be:9f:b1:00:56:e5:a7:
                    d3:2b:21:04:42:fb:81:ec:01:06:93:0f:5e:8a:5a:
                    29:75:47:d1:e9:0c:5f:1f:31:81:81:60:51:a0:a8:
                    8e:8a:4e:72:1d:ed:4c:3a:94:3b:66:84:11:ee:00:
                    b6:12:54:f3:eb:cd:77:07:2d:c8:07:78:d3:b1:57:
                    d8:48:68:75:7e:d5:e6:42:1f:db:d3:aa:18:b4:0b:
                    fc:77:3e:45:72:e1:bd:ac:9c:cd:f5:0e:e3:7e:73:
                    60:28:17:c3:af:99:cc:4b:2b:41:54:45:e5:1a:53:
                    ba:c8:de:95:c3:9a:98:b9:00:35:50:4a:a7:e5:a2:
                    95:c2:2b:98:b1:55:ca:7d:2e:1c:1a:1d:10:01:5e:
                    2f:f3:ed:51:b7:9e:8f:35:75:50:c9:9e:ff:b0:dc:
                    f2:7d:95:fd:ce:bd:42:8d:c7:77:2d:b8:93:ba:48:
                    dd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:87:95:8E:E3:67:FA:47:88:F3:0C:96:D9:AA:17:17:DC:CC:79:E2
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/PoeVjuNn-keI8wyW2aoXF9zMeeI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:5c:5d:00:f7:4c:ee:ee:e8:cd:75:e6:08:e8:9f:5d:b4:c2:
         50:51:c7:5c:ef:ce:06:73:71:26:da:71:2f:59:67:60:00:25:
         2b:a4:3b:aa:2c:60:17:2a:14:99:cb:c4:c6:fd:ee:42:83:fe:
         f4:56:f5:af:d5:8a:c0:59:08:73:36:42:8b:ea:15:1b:e0:5f:
         e1:e3:d8:35:3a:be:74:47:b5:5a:81:ac:41:97:16:88:a5:26:
         b2:9b:d9:c0:39:9d:ed:a3:f7:57:0d:3c:2b:ad:3c:8d:0c:c3:
         56:21:c8:43:33:2a:22:c8:9f:4e:05:4b:4d:8b:49:14:04:2d:
         c3:15:06:a7:37:f6:89:58:63:1b:52:25:d4:60:e2:11:93:d0:
         25:98:d1:b6:79:dd:ed:68:d0:bb:7a:1e:8e:76:1d:62:6d:94:
         8f:df:a0:63:d7:4c:7c:35:a2:f9:fc:8f:6c:0d:fc:70:56:b6:
         22:3f:97:18:28:3b:65:0e:e7:87:53:75:8a:da:68:15:4e:4a:
         6b:0f:97:ad:26:20:d1:30:c6:44:aa:a4:ef:f0:3b:90:f3:4d:
         2e:16:4b:d1:41:14:71:76:39:82:ed:cf:61:6b:62:d1:8b:c3:
         b2:5a:c2:8b:ad:8b:24:fe:51:32:9d:7f:0c:06:b1:60:db:90:
         8b:dd:e8:af
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICB4kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3
RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yMDA5Mjkx
MDAwMzFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDNFODc5NThFRTM2N0ZB
NDc4OEYzMEM5NkQ5QUExNzE3RENDQzc5RTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDuIsI250Q7OTSVMkh5b3ok812VTxcq2UXLmp06aAIlgPGIR4uR
avXmQrUUpMUUM839n4wlSwFTg+kRasUO+/hJZJ3vBVDdo+65UUgzejCtgucbvp+x
AFblp9MrIQRC+4HsAQaTD16KWil1R9HpDF8fMYGBYFGgqI6KTnId7Uw6lDtmhBHu
ALYSVPPrzXcHLcgHeNOxV9hIaHV+1eZCH9vTqhi0C/x3PkVy4b2snM31DuN+c2Ao
F8OvmcxLK0FUReUaU7rI3pXDmpi5ADVQSqflopXCK5ixVcp9LhwaHRABXi/z7VG3
no81dVDJnv+w3PJ9lf3OvUKNx3ctuJO6SN3nAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUPoeVjuNn+keI8wyW2aoXF9zMeeIwHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN
caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ
V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL1BvZVZqdU5uLWtl
STh3eVcyYW9YRjl6TWVlSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABnHi8wDQYJKoZIhvcNAQELBQADggEBALlcXQD3TO7u6M115gjon120wlBR
x1zvzgZzcSbacS9ZZ2AAJSukO6osYBcqFJnLxMb97kKD/vRW9a/VisBZCHM2Qovq
FRvgX+Hj2DU6vnRHtVqBrEGXFoilJrKb2cA5ne2j91cNPCutPI0Mw1YhyEMzKiLI
n04FS02LSRQELcMVBqc39olYYxtSJdRg4hGT0CWY0bZ53e1o0Lt6Ho52HWJtlI/f
oGPXTHw1ovn8j2wN/HBWtiI/lxgoO2UO54dTdYraaBVOSmsPl60mINEwxkSqpO/w
O5DzTS4WS9FBFHF2OYLtz2FrYtGLw7JawoutiyT+UTKdfwwGsWDbkIvd6K8=
-----END CERTIFICATE-----