Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XINYUN/4hNXZ095ZdjY2pIY0fIM2vSurmQ.roa
File:                     4hNXZ095ZdjY2pIY0fIM2vSurmQ.roa (raw, json)
Hash identifier:          tHABsx6snH2W/xraOr2mVXy8z7ADsv+snXEvF21wE+k=
Subject key identifier:   E2:13:57:67:4F:79:65:D8:D8:DA:92:18:D1:F2:0C:DA:F4:AE:AE:64
Certificate issuer:       /CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Certificate serial:       0CB3
Authority key identifier: 84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/4hNXZ095ZdjY2pIY0fIM2vSurmQ.roa
Signing time:             Wed 29 Sep 2021 02:42:04 +0000
ROA not before:           Wed 29 Sep 2021 02:42:04 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38047
IP address blocks:        103.133.152.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3251 (0xcb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
        Validity
            Not Before: Sep 29 02:42:04 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=E21357674F7965D8D8DA9218D1F20CDAF4AEAE64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f1:a3:a0:f9:f1:62:39:ce:de:2f:da:3c:c3:
                    64:e8:91:ba:64:5a:c0:bb:a3:41:28:38:f9:76:37:
                    d8:55:db:e9:55:52:de:71:d5:e0:b8:22:36:ee:d5:
                    29:07:76:fb:cd:46:da:7f:ff:b7:c5:ad:e9:38:11:
                    c9:49:b2:a6:c9:12:f5:b7:08:33:f9:79:85:cc:89:
                    fa:81:bc:b6:ca:78:99:8a:98:20:77:87:bd:52:e0:
                    c1:42:88:be:bd:da:7b:25:51:37:af:a7:2b:98:79:
                    11:bb:e6:d1:7d:00:53:b4:08:93:6a:04:e5:f0:1d:
                    45:a2:a7:6f:65:bf:8b:fd:87:83:96:3b:4a:46:c1:
                    6e:aa:68:fb:e6:b8:b7:72:11:5b:bf:8e:dc:3c:88:
                    c7:fb:ad:c9:cc:e8:6f:31:a4:d7:bf:43:12:fe:57:
                    3f:ac:ad:45:bb:1a:7f:c7:bd:eb:d9:e4:a1:94:d5:
                    5c:25:f2:21:9a:35:24:1c:03:be:fb:09:db:18:f8:
                    ae:60:90:c1:8f:4d:45:7b:8b:2d:8f:89:43:43:64:
                    e1:0d:26:06:20:d8:9f:76:0d:54:66:3f:d5:0c:6c:
                    58:08:ea:d9:18:fa:56:e1:e0:57:14:c2:c2:4f:7e:
                    5b:c0:4b:12:e4:84:bd:0a:24:11:dd:5c:84:25:e7:
                    47:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:13:57:67:4F:79:65:D8:D8:DA:92:18:D1:F2:0C:DA:F4:AE:AE:64
            X509v3 Authority Key Identifier:
                keyid:84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/4hNXZ095ZdjY2pIY0fIM2vSurmQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:c5:7d:c0:36:a5:01:9e:90:84:c3:30:66:49:ba:b6:85:7e:
         83:a4:a8:77:33:9b:44:5a:9d:69:6c:70:9f:54:13:93:af:de:
         73:93:77:b4:1d:78:d6:de:40:8d:4a:d3:62:37:aa:0d:f1:38:
         be:ae:ba:e1:99:7c:37:ce:4b:55:89:d8:f1:c3:a6:ca:4b:bf:
         c3:0a:b7:78:e8:9d:88:79:98:e4:d4:3c:d8:30:c5:f8:73:a2:
         e9:11:23:0b:90:60:31:7a:12:98:01:17:b0:47:59:3f:93:b5:
         15:51:6e:de:40:38:f3:b9:92:77:4b:e2:58:b8:46:bd:e3:6f:
         0f:59:e5:5a:c6:7a:45:3d:f7:5a:7a:32:db:21:e9:a7:39:cf:
         6c:2c:91:52:53:a5:f6:b6:5d:8d:7b:62:74:30:05:18:aa:86:
         73:ee:c2:80:11:d9:56:1c:a9:10:42:5c:06:83:ae:6e:8a:df:
         96:51:20:1a:e8:52:2d:ed:51:64:c8:bc:1a:1a:6b:42:5f:87:
         f6:17:06:de:45:06:f4:5d:77:f7:56:eb:16:a1:db:b7:93:af:
         23:be:54:99:cd:94:3c:2a:3c:44:24:15:ab:ca:5b:fa:17:9f:
         05:1f:33:c3:6a:4a:c7:a2:9f:ad:3f:55:1b:bf:14:07:25:41:
         5e:95:e0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----