Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-RkkVIMyyvZRf9GKMiIRJTMcc44.roa
File:                     -RkkVIMyyvZRf9GKMiIRJTMcc44.roa (raw, json)
Hash identifier:          bA2AVhCCVYiSbq77jW8DpEz+xa6dn+1091Ff+YIGB5g=
Subject key identifier:   F9:19:24:54:83:32:CA:F6:51:7F:D1:8A:32:22:11:25:33:1C:73:8E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1AB0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-RkkVIMyyvZRf9GKMiIRJTMcc44.roa
Signing time:             Wed 29 Sep 2021 02:45:38 +0000
ROA not before:           Wed 29 Sep 2021 02:45:38 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.176.16.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6832 (0x1ab0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:45:38 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=F91924548332CAF6517FD18A32221125331C738E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:01:ce:38:c7:87:81:e5:2f:2f:59:18:c8:03:
                    52:9d:3c:fb:25:19:ec:79:46:d2:8f:40:06:4d:12:
                    88:32:0c:6e:62:c6:d4:e0:94:42:70:91:ee:ee:72:
                    b4:c5:b1:46:8b:1d:0e:6c:30:c2:72:c0:bb:e2:2f:
                    8a:dd:ec:93:22:43:74:df:fa:c4:fb:08:6f:11:5f:
                    43:e8:b6:d7:cc:4a:dd:3e:aa:f6:af:4b:63:40:d8:
                    30:ea:cc:b2:58:62:f1:d9:85:87:f1:e2:ca:6e:10:
                    aa:05:e6:e4:49:f1:54:cd:98:e6:42:f3:13:69:1d:
                    9e:37:3b:91:a6:53:a9:96:d1:a7:3d:5e:32:91:36:
                    40:7b:6d:a8:38:9f:22:f4:4b:a6:af:5c:d2:f1:0e:
                    a5:b1:04:f7:bf:52:77:f5:b1:d8:48:18:50:30:28:
                    ba:de:a2:77:d7:b3:24:d7:7b:73:7d:a2:f1:dd:2c:
                    0e:52:f7:8f:4b:61:48:ab:b5:84:8f:3a:da:fb:44:
                    ac:07:45:e7:dd:2e:75:6e:ec:fb:a7:56:52:98:4d:
                    dd:b2:b2:c2:c4:f2:65:eb:5b:25:a7:a2:05:27:39:
                    23:20:47:a4:3d:f2:a7:0f:7f:78:8a:84:0f:bd:f0:
                    c3:3a:e6:72:d9:5e:e3:d7:86:85:45:fa:ab:fd:e5:
                    e9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:19:24:54:83:32:CA:F6:51:7F:D1:8A:32:22:11:25:33:1C:73:8E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-RkkVIMyyvZRf9GKMiIRJTMcc44.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b4:5d:92:60:ee:0a:0e:62:d9:c8:f0:4c:5b:b8:ab:07:fd:50:
         99:fe:f0:28:f9:67:3b:71:f2:0c:66:99:8e:c3:79:07:d0:7e:
         41:96:6a:88:8b:aa:c4:b5:e0:23:a5:13:59:7f:f9:04:bf:f9:
         44:60:c3:17:4b:c6:c0:ff:43:c3:4b:62:18:4b:d8:bd:b3:ae:
         85:6a:b0:dd:75:15:48:e1:5f:42:ba:f9:59:4c:0a:d5:7f:cc:
         f6:44:83:78:21:5c:df:58:c2:eb:43:b1:e7:b6:05:8f:79:15:
         6d:e9:1c:3c:07:36:5e:5b:75:22:15:cb:ad:13:ca:ec:3f:6c:
         fb:e2:08:d1:b4:e1:73:9d:91:60:d3:07:1d:30:52:58:fd:75:
         17:27:59:04:59:77:33:96:e5:e4:32:01:fe:d0:1d:4e:8a:3f:
         c7:80:8c:19:be:b9:fb:7c:51:d3:f6:cd:b6:88:9e:ad:79:e3:
         40:f2:e4:0a:f0:9b:8d:39:63:e2:79:5a:74:ac:6b:b4:92:20:
         1a:91:51:8c:de:b8:4a:b4:59:c6:9d:99:11:c0:d2:62:b1:27:
         11:da:52:b7:58:fa:8e:07:b4:cb:9a:de:02:f2:e7:67:26:97:
         25:da:c0:28:3a:ef:2f:83:99:f9:34:8c:15:d9:cf:b6:19:f7:
         c8:db:66:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----