Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2Qwsfw30TynqfVx6cGWphLaPvc8.roa
File:                     2Qwsfw30TynqfVx6cGWphLaPvc8.roa (raw, json)
Hash identifier:          BhhbBYdKtatTJqtZC8ltI+KgActhq4eGR/V69G0VdCk=
Subject key identifier:   D9:0C:2C:7F:0D:F4:4F:29:EA:7D:5C:7A:70:65:A9:84:B6:8F:BD:CF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1A68
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2Qwsfw30TynqfVx6cGWphLaPvc8.roa
Signing time:             Wed 29 Sep 2021 02:45:18 +0000
ROA not before:           Wed 29 Sep 2021 02:45:18 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        118.232.0.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6760 (0x1a68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:45:18 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=D90C2C7F0DF44F29EA7D5C7A7065A984B68FBDCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:da:32:d7:64:95:3c:7f:93:59:af:11:65:bd:
                    62:79:5e:53:d2:05:e2:ae:ed:0a:03:e1:b8:e4:d4:
                    1d:be:e6:a9:43:2c:ee:9b:b8:56:05:9a:04:75:7d:
                    ad:2c:e9:50:9e:cc:f4:f6:7b:3e:47:9d:ff:80:fe:
                    52:21:13:35:94:dc:01:53:15:b4:59:18:ce:ff:9f:
                    36:89:94:67:35:64:a4:de:22:d9:01:ab:0d:bf:4e:
                    08:ad:e9:71:58:02:28:35:8e:40:33:30:f3:06:0a:
                    39:e7:81:ba:5d:39:89:0f:d5:f9:5a:ea:e1:7b:f5:
                    b8:d8:ea:0f:78:c4:f4:f9:b5:8a:fd:5e:99:f5:fc:
                    02:56:3c:cf:90:97:fe:4d:e9:c9:6a:b1:50:ef:c0:
                    a5:47:5c:fc:ff:0e:ae:61:eb:92:7b:8f:55:3c:7c:
                    fe:88:dc:d0:e6:b2:3c:2b:15:34:35:ec:d6:60:be:
                    ff:4b:67:20:16:e2:f0:84:c8:e4:ef:48:f2:f2:d8:
                    ed:0a:c3:5f:32:45:ef:98:f4:86:15:9d:2c:fa:ac:
                    b1:3a:f6:51:40:09:8b:76:f3:09:c9:44:b8:14:55:
                    3c:c0:86:b6:b9:ba:da:aa:45:94:e9:f2:70:a9:71:
                    af:30:17:5d:76:1c:08:1e:8d:97:7e:ad:1e:ce:20:
                    67:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:0C:2C:7F:0D:F4:4F:29:EA:7D:5C:7A:70:65:A9:84:B6:8F:BD:CF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2Qwsfw30TynqfVx6cGWphLaPvc8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         68:50:88:d7:ac:cc:5d:69:0d:8c:71:0f:bc:e4:5c:10:2f:ec:
         95:74:b1:3c:09:ce:12:a6:02:e0:fc:03:2d:70:2d:82:3f:6b:
         00:ee:a6:8c:47:1f:7c:3c:39:9f:06:c8:90:72:2c:83:a8:cb:
         aa:12:59:87:e4:2c:a4:85:e5:2b:48:96:33:32:cc:53:c7:ff:
         4c:5c:d1:9d:24:e8:9a:e1:86:0e:9f:12:21:bb:7b:ad:09:03:
         1f:18:08:94:c0:b6:7f:62:2d:b9:93:12:a0:d9:ba:7a:48:36:
         3f:cd:53:2b:d7:e8:35:18:cf:7a:49:0f:5f:10:06:9c:ce:5e:
         a3:cc:e8:6f:68:4e:4e:43:b2:60:92:55:94:68:79:57:b9:68:
         7f:2e:dc:18:d4:d1:e4:38:a3:42:df:9e:40:45:09:67:cc:c8:
         bc:34:a5:2b:3c:80:02:74:b5:e0:d6:3a:73:04:c7:1f:87:b1:
         c1:c4:c1:15:8f:c6:1b:dd:04:8f:75:20:5a:c3:ac:3a:ed:b8:
         3a:dc:d4:e5:8b:af:e9:30:39:79:1a:19:e7:ff:45:66:70:7f:
         34:8a:d8:71:53:cb:f5:39:0a:e1:10:80:60:a4:25:a2:49:8b:
         3a:59:9b:f6:3b:e7:ba:fe:0a:a2:3f:88:7f:1f:0a:77:d7:2a:
         3d:59:6e:f2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGmgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ1MThaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEQ5MEMyQzdGMERGNDRG
MjlFQTdENUM3QTcwNjVBOTg0QjY4RkJEQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJ2jLXZJU8f5NZrxFlvWJ5XlPSBeKu7QoD4bjk1B2+5qlDLO6b
uFYFmgR1fa0s6VCezPT2ez5Hnf+A/lIhEzWU3AFTFbRZGM7/nzaJlGc1ZKTeItkB
qw2/Tgit6XFYAig1jkAzMPMGCjnngbpdOYkP1fla6uF79bjY6g94xPT5tYr9Xpn1
/AJWPM+Ql/5N6clqsVDvwKVHXPz/Dq5h65J7j1U8fP6I3NDmsjwrFTQ17NZgvv9L
ZyAW4vCEyOTvSPLy2O0Kw18yRe+Y9IYVnSz6rLE69lFACYt28wnJRLgUVTzAhra5
utqqRZTp8nCpca8wF112HAgejZd+rR7OIGfvAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU2Qwsfw30TynqfVx6cGWphLaPvc8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzJRd3NmdzMwVHlucWZWeDZj
R1dwaExhUHZjOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV2
6AAwDQYJKoZIhvcNAQELBQADggEBAGhQiNeszF1pDYxxD7zkXBAv7JV0sTwJzhKm
AuD8Ay1wLYI/awDupoxHH3w8OZ8GyJByLIOoy6oSWYfkLKSF5StIljMyzFPH/0xc
0Z0k6Jrhhg6fEiG7e60JAx8YCJTAtn9iLbmTEqDZunpINj/NUyvX6DUYz3pJD18Q
BpzOXqPM6G9oTk5DsmCSVZRoeVe5aH8u3BjU0eQ4o0LfnkBFCWfMyLw0pSs8gAJ0
teDWOnMExx+HscHEwRWPxhvdBI91IFrDrDrtuDrc1OWLr+kwOXkaGef/RWZwfzSK
2HFTy/U5CuEQgGCkJaJJizpZm/Y757r+CqI/iH8fCnfXKj1ZbvI=
-----END CERTIFICATE-----