Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/32dFdxzgRhGVqXlv8kw9rDCMNsU.roa
File:                     32dFdxzgRhGVqXlv8kw9rDCMNsU.roa (raw, json)
Hash identifier:          m3R5DYgPKfKMOhK9wIPBpg0h8tmdJ0tw5raIeKR9ALM=
Subject key identifier:   DF:67:45:77:1C:E0:46:11:95:A9:79:6F:F2:4C:3D:AC:30:8C:36:C5
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       15E7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/32dFdxzgRhGVqXlv8kw9rDCMNsU.roa
Signing time:             Sun 07 Feb 2021 12:07:10 +0000
ROA not before:           Sun 07 Feb 2021 12:07:10 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.176.232.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5607 (0x15e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:07:10 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=DF6745771CE0461195A9796FF24C3DAC308C36C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:65:cc:45:ff:1d:1a:fe:66:46:ad:4e:e4:a8:
                    ae:c1:c2:dc:ad:c1:02:7b:d8:78:2e:42:e2:19:bc:
                    e9:91:ff:9d:0f:39:e0:ef:ef:69:fa:93:c1:fd:b5:
                    02:3c:28:2f:63:3b:bf:72:5a:6f:2b:aa:07:64:66:
                    4d:29:71:03:9b:d6:29:e8:ce:23:2d:16:df:ce:a0:
                    a4:a4:10:00:b2:e3:25:43:82:05:9f:2e:d8:c8:e4:
                    20:f8:cd:23:fe:27:82:92:ff:83:e0:68:f7:7b:6c:
                    d8:a0:f2:4d:ae:f2:57:5f:9b:f7:40:f2:c9:98:df:
                    87:9f:64:d1:0f:44:c2:a7:e0:53:8e:50:aa:f7:56:
                    d5:22:18:e9:9d:75:ed:fe:ed:20:1d:04:8e:ba:4e:
                    81:8b:b1:ad:8e:79:ff:9f:24:66:37:5d:37:7d:12:
                    89:fa:ec:b6:d5:73:38:a2:89:67:9f:7d:55:c2:f8:
                    ce:92:57:9d:8c:34:77:05:3c:39:e0:ad:85:c4:40:
                    f8:57:40:77:7f:84:8b:82:62:d1:a4:fb:4d:65:98:
                    35:20:e2:8a:db:4e:14:b6:89:44:56:55:f4:35:28:
                    32:3e:7d:4f:90:a0:0a:a1:e4:5c:cb:b4:8b:dd:30:
                    38:58:73:22:38:dc:d1:a1:bb:d4:95:70:8a:51:43:
                    04:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:67:45:77:1C:E0:46:11:95:A9:79:6F:F2:4C:3D:AC:30:8C:36:C5
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/32dFdxzgRhGVqXlv8kw9rDCMNsU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:23:56:2f:a7:15:42:a2:ad:cc:1e:a4:5e:a1:ae:d2:0b:50:
         ae:9d:7a:b8:d6:c6:e5:ac:71:d5:73:61:0d:ca:66:69:bb:31:
         92:80:5b:87:22:3a:7a:34:cf:16:6e:73:36:b5:c0:13:9e:aa:
         00:96:46:e6:56:e4:0d:ea:1f:5a:a1:3c:94:ce:08:d8:06:03:
         86:95:c8:c8:45:3b:96:26:78:49:e7:2d:bf:6f:fe:81:6b:6d:
         a1:ef:8e:cf:49:52:ba:e8:f0:82:fd:38:5d:10:3c:bb:ef:84:
         ea:6c:d2:9d:7e:00:ca:de:f2:8e:91:1c:e8:af:f3:f5:d3:3c:
         8a:b5:7c:db:fc:52:ab:65:85:1e:97:2d:8f:96:b4:84:70:d0:
         b1:00:19:e4:c5:ae:39:4a:97:a7:d6:b1:3a:c8:bb:22:93:91:
         57:c7:86:54:5c:b5:b1:c5:86:dc:92:c7:8a:24:b0:aa:11:c7:
         ad:a3:9c:9d:e1:c8:c1:96:4c:9a:f0:7f:1a:95:92:be:0b:d7:
         d3:f1:52:7f:ad:6b:8c:72:fb:88:90:1f:99:94:9f:4d:5c:6f:
         28:e7:47:72:78:5d:f3:4f:d5:9d:7b:70:d8:2b:5d:13:ec:1f:
         00:44:8f:af:a5:7e:6a:f2:ab:93:2f:37:65:ee:a2:df:36:1e:
         62:e7:2b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----