Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2dCv3UyuYn2dz6kYK6rWCuCCf7A.roa
File:                     2dCv3UyuYn2dz6kYK6rWCuCCf7A.roa (raw, json)
Hash identifier:          CsX5NSj9MnxMSkUxfz4sjqlD7X/bjak9fLnHvLN0+7M=
Subject key identifier:   D9:D0:AF:DD:4C:AE:62:7D:9D:CF:A9:18:2B:AA:D6:0A:E0:82:7F:B0
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B51
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2dCv3UyuYn2dz6kYK6rWCuCCf7A.roa
Signing time:             Wed 29 Sep 2021 02:46:27 +0000
ROA not before:           Wed 29 Sep 2021 02:46:27 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        211.76.113.0/25 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6993 (0x1b51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:27 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=D9D0AFDD4CAE627D9DCFA9182BAAD60AE0827FB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a8:cd:64:72:dc:13:db:06:54:66:bf:30:ac:
                    30:bc:71:96:4c:c5:e6:e7:99:38:be:34:3e:5a:4f:
                    f2:7c:b4:45:97:3a:b9:3e:5c:a0:bc:f3:72:07:f0:
                    4b:c1:01:a3:ae:ac:88:ae:5e:a4:af:dd:ed:eb:6d:
                    38:db:d0:b1:d3:9e:d5:fb:94:52:cd:46:bc:1a:56:
                    49:81:71:fa:aa:9b:ca:8c:f2:e2:6c:71:16:75:6d:
                    53:22:a0:15:23:c2:a6:39:0a:0a:b4:ca:39:55:60:
                    f7:e9:2b:8c:48:1f:e7:fd:e9:02:20:06:cf:86:9a:
                    9b:3f:da:3a:52:26:6d:9d:91:b3:d8:fc:47:b2:5c:
                    e2:ba:85:4c:5a:26:4e:3d:0c:7a:4b:ac:dc:08:f9:
                    6d:96:1b:53:64:4b:4a:46:f0:53:4f:ce:06:83:56:
                    64:be:d8:2a:a6:c2:3b:be:4d:50:4a:c1:65:e8:dd:
                    95:20:61:29:2a:87:cb:38:4d:4a:ad:2a:d8:15:99:
                    b2:42:41:78:b8:7d:34:db:31:c5:fc:b3:a6:80:95:
                    a1:06:ec:64:17:ce:22:d8:8e:5a:de:f3:d1:bb:11:
                    49:cf:de:fa:cf:c2:d7:02:f3:fd:35:ae:83:27:86:
                    63:6e:2f:fd:b4:54:be:03:9c:d6:5b:b5:c7:c7:60:
                    2e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D0:AF:DD:4C:AE:62:7D:9D:CF:A9:18:2B:AA:D6:0A:E0:82:7F:B0
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2dCv3UyuYn2dz6kYK6rWCuCCf7A.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.113.0/25

    Signature Algorithm: sha256WithRSAEncryption
         19:fc:3a:44:66:5b:52:08:f6:47:46:79:63:81:52:bb:e3:fa:
         ae:bd:a8:67:df:6e:d7:5a:99:07:12:59:58:0a:3b:5f:39:07:
         8c:5a:6c:bf:1a:a7:8c:20:85:41:8c:4c:19:28:fd:2d:b3:42:
         b2:ce:99:58:e7:c7:57:63:7a:74:3a:8c:8a:cb:3f:28:74:e6:
         b3:30:70:9f:ac:4c:50:2e:29:6e:c8:a6:33:b5:38:92:6d:f2:
         2c:b2:5a:ad:89:43:5b:f8:e2:40:09:12:98:2a:ed:4a:fe:c9:
         29:89:46:75:a3:b9:da:fa:1b:ac:d7:10:fa:74:51:83:eb:7d:
         78:c8:1e:f6:57:6a:f4:7d:22:fa:50:fa:57:7e:00:43:95:3a:
         50:82:d6:cd:31:18:8b:b9:d3:a1:58:25:01:63:75:dd:d5:ff:
         6f:f0:4e:9d:0b:ee:bb:8d:12:2d:18:e5:88:e7:50:80:fc:69:
         88:8a:34:4f:7e:ba:54:6a:95:41:42:4c:c6:00:38:bb:9e:31:
         ba:f2:28:12:d3:4e:72:1d:ef:a9:08:1b:f7:bd:85:43:7a:a2:
         70:5e:96:61:c4:83:78:47:02:dc:da:1a:9e:93:e9:aa:6b:f6:
         02:9a:77:e7:8c:0a:7f:cd:6e:ac:56:95:1c:1b:68:9f:2b:a0:
         e8:0c:89:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----