Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2zkBfWAKC3qiongOus0W30KvVQQ.roa
File:                     2zkBfWAKC3qiongOus0W30KvVQQ.roa (raw, json)
Hash identifier:          tXWS4qGpM8Fd+hZpAyALk3nFO+1XKJuFUlPi3bGr8N4=
Subject key identifier:   DB:39:01:7D:60:0A:0B:7A:A2:A2:78:0E:BA:CD:16:DF:42:AF:55:04
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E52
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2zkBfWAKC3qiongOus0W30KvVQQ.roa
Signing time:             Tue 29 Sep 2020 09:55:36 +0000
ROA not before:           Tue 29 Sep 2020 09:55:36 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.72.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3666 (0xe52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:36 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=DB39017D600A0B7AA2A2780EBACD16DF42AF5504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b3:58:af:12:44:b3:b7:28:5e:ee:ef:0d:98:
                    76:a6:30:09:dd:2a:fc:87:69:c1:5f:bb:ed:b6:81:
                    c7:0a:13:c6:11:e2:d7:7e:ea:c8:71:91:48:b4:c2:
                    67:ab:9f:8d:2b:b2:0a:e1:d1:ac:c9:40:37:00:10:
                    29:be:50:30:02:42:91:7f:ef:a8:03:0e:c1:a0:ba:
                    92:05:30:09:57:20:c0:04:c0:57:74:8a:07:af:1b:
                    f9:fe:4d:a7:62:16:31:8f:43:51:0e:5f:b9:04:fa:
                    e5:7b:fc:1f:c9:58:08:dc:31:37:2c:ff:b2:d8:02:
                    2b:8e:40:81:d6:c3:f0:4b:fb:99:cd:e0:02:cf:d8:
                    af:cf:94:ab:17:79:2d:10:cd:44:47:be:fa:9d:b7:
                    a7:d8:b4:b6:db:4c:79:b6:90:59:b6:b2:68:cf:2c:
                    4c:0c:2a:27:5c:2a:09:09:e7:1a:0b:db:01:f9:02:
                    d6:cd:f7:5b:af:e8:63:b9:36:da:7b:81:5b:3b:e9:
                    b3:a4:9d:25:8a:c2:4d:84:ae:0b:ae:a6:d2:1b:ee:
                    77:48:e6:c9:a7:92:b7:f8:34:b1:ef:14:7d:fa:af:
                    18:66:98:de:0d:70:24:35:39:21:f6:f5:b8:10:6c:
                    fb:ba:60:a0:1d:23:88:ca:57:ff:20:34:d5:ef:55:
                    d9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:39:01:7D:60:0A:0B:7A:A2:A2:78:0E:BA:CD:16:DF:42:AF:55:04
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2zkBfWAKC3qiongOus0W30KvVQQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         65:2f:9e:7a:11:f9:98:96:b3:cc:f1:5e:c1:4e:37:aa:53:3d:
         a3:1b:53:ef:c4:ba:05:1e:19:60:d5:57:ed:f5:8f:dc:3a:c9:
         6e:0c:44:d2:15:f2:54:09:84:66:a6:08:ad:c2:0f:ad:56:86:
         c0:d6:e0:d2:73:eb:1f:cd:a3:c5:33:14:39:78:e7:4c:aa:6c:
         ce:b7:3b:69:f7:8f:bc:0c:bf:b4:c3:45:24:57:80:6c:06:41:
         b3:7c:70:af:9b:e5:8b:b2:13:2c:da:44:72:5f:3f:f3:5b:d2:
         2a:ab:45:06:7b:84:af:33:44:c3:05:2d:48:63:af:a8:4b:24:
         89:0e:99:92:78:11:bf:4c:46:0a:5f:a2:5f:e4:46:70:47:d8:
         ff:41:05:b8:5a:88:8b:00:9a:df:c9:ca:ac:51:b6:ef:26:60:
         3a:db:bf:ef:c4:54:87:8d:55:5c:f1:dc:76:3f:cc:6c:5f:11:
         2e:ac:b7:30:5a:75:9b:de:73:e5:0a:6b:e5:5a:fc:4b:21:8e:
         60:95:1d:60:83:88:82:f2:94:99:fe:db:02:b9:81:4d:4b:93:
         ec:ea:a2:fc:aa:13:2d:3e:e1:f5:5d:89:35:f6:6c:a2:6a:96:
         46:87:e9:bf:04:a1:b0:ad:49:3f:25:20:8c:86:15:3f:80:ea:
         6f:2b:d3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----