Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASGC/B_Y7kRGajztU8iWgdAcdGslZ9qk.roa
File:                     B_Y7kRGajztU8iWgdAcdGslZ9qk.roa (raw, json)
Hash identifier:          FpeElrmryT2KGqhbX1tsB2IK5sxD7u9XhEs0/T7DzQM=
Subject key identifier:   07:F6:3B:91:11:9A:8F:3B:54:F2:25:A0:74:07:1D:1A:C9:59:F6:A9
Certificate issuer:       /CN=760EA9F7833EDC6366FD5E23A426BCF62BB01E6C
Certificate serial:       08B0
Authority key identifier: 76:0E:A9:F7:83:3E:DC:63:66:FD:5E:23:A4:26:BC:F6:2B:B0:1E:6C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/dg6p94M-3GNm_V4jpCa89iuwHmw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/B_Y7kRGajztU8iWgdAcdGslZ9qk.roa
Signing time:             Sun 07 Feb 2021 11:50:07 +0000
ROA not before:           Sun 07 Feb 2021 11:50:07 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24167
IP address blocks:        202.140.160.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2224 (0x8b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=760EA9F7833EDC6366FD5E23A426BCF62BB01E6C
        Validity
            Not Before: Feb  7 11:50:07 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=07F63B91119A8F3B54F225A074071D1AC959F6A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:18:92:78:a1:9a:34:4c:c9:94:b1:e8:89:5b:
                    34:a8:80:84:39:a8:8b:e3:08:c5:6a:ce:83:53:12:
                    fe:71:eb:ec:07:b8:13:0d:f6:2f:76:4e:28:a4:6e:
                    fa:76:84:8c:c9:bf:d6:b6:5c:99:8f:e5:e9:d7:f5:
                    93:21:cc:86:3d:d6:9a:8c:15:fc:f8:a1:bd:d7:0a:
                    86:1d:0c:23:2f:72:96:f9:46:ad:bb:fb:a8:be:50:
                    61:e5:6b:1e:7a:1c:94:18:19:4f:5e:ee:03:16:04:
                    59:27:68:a7:bd:13:fa:51:f8:84:9f:70:d6:57:c0:
                    f4:1b:9c:5c:2d:2a:b3:36:62:75:16:e9:75:4e:f6:
                    fb:33:7e:ad:23:c8:3a:b6:e0:f5:ad:16:e8:58:ff:
                    31:a5:a7:86:09:28:fe:12:7e:ad:b4:fc:7c:7e:7c:
                    80:1d:90:a0:c9:0c:48:d2:b2:68:b8:b3:28:b0:00:
                    3a:39:7e:08:dc:c7:ea:4c:a6:7c:03:39:3d:3e:41:
                    c7:b6:10:78:bf:b8:e5:18:e5:20:da:e5:72:12:20:
                    89:ac:ee:59:98:19:e3:b4:c1:d9:a8:93:60:ca:2b:
                    28:2f:91:ca:1a:4d:be:21:51:81:91:b0:93:31:74:
                    99:7e:a4:da:d5:1b:9d:97:94:64:1c:01:74:21:a6:
                    ac:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F6:3B:91:11:9A:8F:3B:54:F2:25:A0:74:07:1D:1A:C9:59:F6:A9
            X509v3 Authority Key Identifier:
                keyid:76:0E:A9:F7:83:3E:DC:63:66:FD:5E:23:A4:26:BC:F6:2B:B0:1E:6C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/dg6p94M-3GNm_V4jpCa89iuwHmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dg6p94M-3GNm_V4jpCa89iuwHmw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/B_Y7kRGajztU8iWgdAcdGslZ9qk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.140.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         e7:44:fa:e7:8d:37:8d:9c:a4:ef:d3:2b:87:f5:58:a4:10:ed:
         f3:18:0b:f0:30:df:8a:3b:2c:64:7b:f6:34:9a:43:3a:c6:82:
         74:90:15:81:a8:16:2a:33:c0:43:f9:98:b3:27:0b:e1:b4:82:
         16:59:c5:55:e5:19:d2:f6:b3:02:09:7f:ed:6f:c8:ce:10:09:
         5c:37:c2:b4:53:d1:7a:d8:ab:a8:07:66:f4:df:35:7e:76:cd:
         2c:b5:a9:fb:04:3e:ff:09:51:0a:e7:c5:7c:70:2c:04:f7:5a:
         68:fc:9d:d9:b1:65:09:18:78:b7:b2:af:07:ba:1c:f3:46:de:
         fb:3f:28:52:84:b5:af:df:56:19:eb:62:1c:56:f3:f6:b6:21:
         7d:fb:90:d1:fa:f9:4b:0b:7c:8d:1f:48:13:78:f4:ea:bc:ca:
         c4:4e:66:16:43:00:d7:25:72:99:64:31:f9:52:a7:07:92:07:
         16:00:f5:79:b2:47:82:f3:02:b5:5a:38:66:a1:f5:f6:ca:3d:
         8b:4b:84:23:84:38:96:16:99:64:0e:ec:36:a3:70:fe:c0:83:
         38:61:57:26:03:5f:b1:85:50:a7:b2:f1:cb:c5:b9:cf:bb:9f:
         38:18:3f:04:93:7b:21:4e:8b:19:0f:c9:e2:47:65:a4:c4:f7:
         6c:ec:aa:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----