Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hXJrZ3w72HBwnpQ-VWeDAuyzbXw.roa
File:                     hXJrZ3w72HBwnpQ-VWeDAuyzbXw.roa (raw, json)
Hash identifier:          W8FhyTYUplUjMAdByFL5+EGL3edFs/cO3ZIq+L/o4aE=
Subject key identifier:   85:72:6B:67:7C:3B:D8:70:70:9E:94:3E:55:67:83:02:EC:B3:6D:7C
Certificate issuer:       /CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Certificate serial:       0CB6
Authority key identifier: 84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hXJrZ3w72HBwnpQ-VWeDAuyzbXw.roa
Signing time:             Wed 29 Sep 2021 02:42:04 +0000
ROA not before:           Wed 29 Sep 2021 02:42:04 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38047
IP address blocks:        103.133.153.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3254 (0xcb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
        Validity
            Not Before: Sep 29 02:42:04 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=85726B677C3BD870709E943E55678302ECB36D7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d0:f2:c2:fc:57:5f:e5:84:70:a0:c6:4b:9a:
                    53:ed:1a:81:81:ff:e1:0f:a9:59:7c:fa:f9:2d:9f:
                    b6:46:70:3c:d7:0f:4f:53:bb:bc:86:2c:25:f6:4e:
                    98:06:11:ab:0e:aa:8c:e9:cd:81:34:7e:f5:89:39:
                    6f:05:96:91:62:a5:12:5a:0b:9b:d9:81:4c:68:a3:
                    c7:f5:49:e7:33:51:27:8f:61:91:0f:aa:20:24:15:
                    1f:06:ec:e4:53:35:5a:50:73:f3:18:42:ef:67:d6:
                    48:d3:cc:81:1f:42:ca:96:f9:f3:b7:7a:36:52:8b:
                    eb:eb:99:e6:b3:9d:6f:0b:00:52:ad:2f:15:38:4d:
                    90:86:fd:5c:1e:fe:0c:7a:75:d4:ed:4c:21:70:87:
                    c5:8c:9b:a0:3e:6e:ae:3a:9a:87:b0:b4:be:8e:1a:
                    51:45:8f:45:b5:84:e5:98:a2:43:47:b2:b0:19:ac:
                    9c:25:26:a2:d0:a2:8c:6b:76:0e:d7:24:18:a0:08:
                    1f:14:86:e5:fc:35:f2:fb:0e:17:63:32:8c:fd:25:
                    b5:6d:fa:a8:fb:07:76:46:5d:7f:af:51:4e:5e:b6:
                    0f:f1:2f:d3:08:71:08:2c:31:13:ab:21:e0:8a:70:
                    8d:90:90:6b:c5:2a:8b:1e:e1:91:92:a8:72:9b:9d:
                    ff:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:72:6B:67:7C:3B:D8:70:70:9E:94:3E:55:67:83:02:EC:B3:6D:7C
            X509v3 Authority Key Identifier:
                keyid:84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hXJrZ3w72HBwnpQ-VWeDAuyzbXw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:23:11:cc:4c:96:93:16:78:86:f6:fd:e8:24:c4:3a:8e:6c:
         1f:ab:0d:61:73:88:70:78:1e:78:59:37:26:02:97:1b:80:33:
         37:ed:d8:30:e3:2b:cf:e1:57:4d:d3:08:61:ce:c9:e6:51:6c:
         d7:13:29:e8:6d:c9:f3:75:02:7f:a5:19:80:0d:c1:87:81:35:
         75:ae:8e:18:c9:d4:63:11:75:85:6f:42:e6:0d:e3:36:0c:6b:
         9f:cf:b6:ef:97:96:55:99:7a:7b:5e:40:5f:0d:cb:56:c5:2f:
         c2:eb:73:3e:02:58:9a:7f:a1:e3:81:43:31:a8:9d:a6:25:6e:
         46:4c:ba:4e:a4:e0:f7:a9:a8:ea:db:b1:b4:d6:b7:4c:26:d0:
         da:01:a4:d8:2d:0d:85:36:d0:8a:99:26:ff:71:32:0d:98:3f:
         26:0d:09:08:af:c2:6b:f8:55:b0:a4:23:81:39:2b:33:72:74:
         e6:87:a7:da:1a:4f:99:0d:a5:74:79:90:d5:de:a7:3d:7c:57:
         f8:c5:5f:ba:71:e4:b9:ac:cd:4e:f7:e3:8e:0b:05:4d:b9:63:
         95:43:76:87:95:18:b1:09:2d:4b:37:0a:62:a0:87:41:d6:3b:
         a0:3a:9f:7e:a4:55:6d:23:2e:6d:2f:44:5d:df:ed:e3:c5:1c:
         8f:e3:24:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----