Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/i5rrQ2cxM-ggcHXga3qd2lhHumg.roa
File:                     i5rrQ2cxM-ggcHXga3qd2lhHumg.roa (raw, json)
Hash identifier:          nGZkIZsib9e9oC7dQ8JXlFlXs/t/NinlAmS2lYa5mW0=
Subject key identifier:   8B:9A:EB:43:67:31:33:E8:20:70:75:E0:6B:7A:9D:DA:58:47:BA:68
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0791
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/i5rrQ2cxM-ggcHXga3qd2lhHumg.roa
Signing time:             Tue 29 Sep 2020 10:00:33 +0000
ROA not before:           Tue 29 Sep 2020 10:00:33 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24168
IP address blocks:        121.50.147.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1937 (0x791)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 29 10:00:33 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=8B9AEB43673133E8207075E06B7A9DDA5847BA68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:61:f4:6f:f2:4f:e4:98:ed:ad:28:b7:c0:a2:
                    a2:6a:d7:03:89:93:1b:9e:6f:fa:ca:78:65:44:ca:
                    a2:4e:a9:7c:22:c7:34:6a:bc:27:ff:0f:32:1d:90:
                    39:7a:89:34:ce:fe:39:23:77:66:1d:56:ab:59:e8:
                    eb:86:9d:33:24:f8:30:f6:7d:69:10:b2:22:1f:3f:
                    25:e0:62:e7:19:2c:55:47:e2:85:e6:c9:2f:b1:15:
                    27:ac:08:5e:b9:35:8b:20:d9:80:af:21:07:9a:88:
                    de:61:b5:1f:2e:0d:93:6c:6a:e7:a3:0b:b8:d3:f1:
                    f5:9e:fa:1f:15:ee:65:e8:c2:6a:a8:65:89:cd:c8:
                    ed:9b:06:bf:ab:6f:c5:96:a7:90:a2:a6:33:3f:b4:
                    e0:c0:1b:75:35:fe:23:35:4b:48:17:cf:f0:46:c7:
                    94:cc:40:e0:3b:b6:81:1c:00:02:6c:50:e5:58:85:
                    9c:a5:6a:54:ae:f0:60:e7:e0:f8:e7:99:69:d4:18:
                    47:43:b1:11:f5:e4:b8:98:6f:8f:db:17:db:35:c0:
                    b3:4c:c4:d7:37:98:56:8d:fa:2b:2b:2c:9a:f0:a2:
                    9a:78:e6:7b:6b:2d:be:94:8a:47:4e:b5:86:9f:eb:
                    25:21:24:b3:20:24:4f:33:51:c1:9b:ab:74:46:b4:
                    b3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9A:EB:43:67:31:33:E8:20:70:75:E0:6B:7A:9D:DA:58:47:BA:68
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/i5rrQ2cxM-ggcHXga3qd2lhHumg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:1c:8a:ce:0e:a5:a1:36:17:97:f5:eb:f2:fd:47:5f:9f:fa:
         b3:c6:e7:f8:bf:d9:25:32:94:ba:72:2e:b2:4a:6b:cf:a1:62:
         d5:9f:83:c1:99:30:59:9e:25:ea:f0:1b:fe:3b:95:8d:3b:62:
         f0:10:87:91:02:39:0a:b3:cd:d6:b9:11:f3:12:85:1a:bf:cc:
         8f:9f:fe:0d:af:f8:5a:33:23:a6:ee:24:82:bd:3e:ec:77:d0:
         f5:5e:dc:f3:31:db:9b:47:03:9f:b9:97:6f:e3:df:76:4a:2d:
         74:7e:42:c0:e9:ea:5c:d9:3c:62:c5:e5:33:a2:b9:07:7a:79:
         cb:b1:d0:ab:c3:bc:18:ac:17:c9:bd:0d:67:65:c4:6f:f5:d8:
         75:89:ec:a3:64:97:35:37:38:3a:3c:de:5c:4e:9c:73:4a:7f:
         ff:7c:6d:1d:0c:26:9f:22:06:a9:11:93:ed:62:d8:a9:e2:a2:
         6f:3b:bd:2e:e9:58:4a:78:fa:a7:bd:aa:28:92:88:bc:96:16:
         76:35:93:4e:0b:de:57:fc:50:bd:4b:f9:d9:6d:92:d7:73:22:
         c5:13:48:20:f1:33:c5:78:bd:4d:e2:a0:83:ff:77:61:6f:7e:
         e4:d1:01:c2:fc:dc:c5:fc:c8:79:66:1f:69:34:1b:02:ca:5e:
         66:b1:6a:dc
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICB5EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3
RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yMDA5Mjkx
MDAwMzNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDhCOUFFQjQzNjczMTMz
RTgyMDcwNzVFMDZCN0E5RERBNTg0N0JBNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9YfRv8k/kmO2tKLfAoqJq1wOJkxueb/rKeGVEyqJOqXwixzRq
vCf/DzIdkDl6iTTO/jkjd2YdVqtZ6OuGnTMk+DD2fWkQsiIfPyXgYucZLFVH4oXm
yS+xFSesCF65NYsg2YCvIQeaiN5htR8uDZNsauejC7jT8fWe+h8V7mXowmqoZYnN
yO2bBr+rb8WWp5CipjM/tODAG3U1/iM1S0gXz/BGx5TMQOA7toEcAAJsUOVYhZyl
alSu8GDn4PjnmWnUGEdDsRH15LiYb4/bF9s1wLNMxNc3mFaN+isrLJrwopp45ntr
Lb6UikdOtYaf6yUhJLMgJE8zUcGbq3RGtLP5AgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUi5rrQ2cxM+ggcHXga3qd2lhHumgwHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN
caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ
V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL2k1cnJRMmN4TS1n
Z2NIWGdhM3FkMmxoSHVtZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAB5MpMwDQYJKoZIhvcNAQELBQADggEBAC4cis4OpaE2F5f16/L9R1+f+rPG
5/i/2SUylLpyLrJKa8+hYtWfg8GZMFmeJerwG/47lY07YvAQh5ECOQqzzda5EfMS
hRq/zI+f/g2v+FozI6buJIK9Pux30PVe3PMx25tHA5+5l2/j33ZKLXR+QsDp6lzZ
PGLF5TOiuQd6ecux0KvDvBisF8m9DWdlxG/12HWJ7KNklzU3ODo83lxOnHNKf/98
bR0MJp8iBqkRk+1i2Kniom87vS7pWEp4+qe9qiiSiLyWFnY1k04L3lf8UL1L+dlt
ktdzIsUTSCDxM8V4vU3ioIP/d2FvfuTRAcL83MX8yHlmH2k0GwLKXmaxatw=
-----END CERTIFICATE-----