Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/30bm3G2xA43lu9jc-abrbAnQnug.roa
File:                     30bm3G2xA43lu9jc-abrbAnQnug.roa (raw, json)
Hash identifier:          4+W+eOtnoERLIKrbvh5PvrSCAMy28VLjBVoAIj8HC/o=
Subject key identifier:   DF:46:E6:DC:6D:B1:03:8D:E5:BB:D8:DC:F9:A6:EB:6C:09:D0:9E:E8
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1AC5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/30bm3G2xA43lu9jc-abrbAnQnug.roa
Signing time:             Wed 29 Sep 2021 02:45:44 +0000
ROA not before:           Wed 29 Sep 2021 02:45:44 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        106.1.183.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6853 (0x1ac5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:45:44 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=DF46E6DC6DB1038DE5BBD8DCF9A6EB6C09D09EE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:49:94:97:43:8c:ff:7a:8f:63:44:94:28:6b:
                    a5:e4:5e:b2:8f:fd:2b:01:a3:e7:0b:29:dd:69:07:
                    a4:22:31:13:02:10:56:0e:30:87:12:cf:ee:7b:45:
                    6d:fc:92:db:3d:72:a0:5a:5f:f9:ec:21:37:64:53:
                    21:a7:f6:56:24:06:12:2f:4e:97:41:b3:18:55:e7:
                    46:b7:46:4a:bf:84:13:6e:09:9e:2f:48:20:ab:44:
                    68:d1:64:ec:4a:11:f7:f0:8c:93:42:8e:ba:61:10:
                    dc:49:cb:10:da:79:ab:bd:1b:06:84:40:14:59:7e:
                    33:64:d1:5c:1a:eb:1b:6f:9a:52:1e:7b:c5:15:ee:
                    e7:c1:b2:6d:13:4a:d6:3e:ba:16:34:58:b8:95:74:
                    80:37:db:b8:cd:fb:9e:90:ca:a9:02:a5:1a:93:e6:
                    61:1c:5c:89:66:25:44:ad:3a:0c:3c:8a:62:a3:77:
                    51:e2:92:52:76:c0:4d:11:02:47:67:df:b0:de:ed:
                    68:1e:a8:15:60:57:d3:88:09:c9:8b:c4:97:8f:20:
                    99:7e:e4:a0:ae:a3:5b:08:5d:00:ca:7e:dd:b7:4e:
                    73:88:9e:6c:70:a3:2c:a8:ee:47:66:90:43:48:4b:
                    21:ac:14:9b:5c:43:8d:fa:f4:7e:31:29:28:dd:30:
                    76:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:46:E6:DC:6D:B1:03:8D:E5:BB:D8:DC:F9:A6:EB:6C:09:D0:9E:E8
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/30bm3G2xA43lu9jc-abrbAnQnug.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:8b:84:87:4e:f4:fd:1b:d4:4d:3f:82:76:4a:65:a9:95:7c:
         59:10:6d:31:c6:08:3b:2a:8c:bd:cb:76:e1:4e:47:6f:fb:88:
         da:da:42:0d:e9:8f:3e:3d:5d:f1:4c:cc:d2:08:d5:7a:b1:8a:
         a8:55:b8:a3:cf:57:01:e5:4c:c4:c2:0a:4a:49:62:8e:d9:3f:
         8b:d7:ce:67:9d:5f:b1:c9:28:9e:6a:f8:ce:73:ce:8d:83:a2:
         39:0a:4e:db:1c:92:ba:02:87:41:37:44:f4:e1:e3:ae:6d:1d:
         e2:d9:08:50:75:15:a9:59:6c:71:cf:7e:39:2a:22:0b:7f:0f:
         4e:34:0d:fd:c4:72:f9:24:a3:90:6e:49:59:a1:b9:09:18:ba:
         c1:50:33:ca:e2:e2:da:1c:5a:1e:dc:f2:09:68:9d:25:48:0f:
         7e:6a:a7:b5:a2:7e:24:9a:3c:26:99:1a:8a:b0:c0:e5:01:5a:
         d6:99:5e:0c:9d:a6:81:c1:1d:de:11:20:d1:76:65:7b:7b:5b:
         2e:cb:c1:58:54:20:c3:59:6b:15:cf:19:ef:83:a1:c1:c4:5b:
         92:19:32:da:6e:f5:31:b5:d2:32:79:94:12:ad:a4:86:42:06:
         20:36:1a:c6:17:83:06:62:68:60:f4:6e:37:94:87:63:4c:34:
         8d:15:be:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----