Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7a2Xs-XCyJPLVWlTaEDFHsjW8ns.roa
File:                     7a2Xs-XCyJPLVWlTaEDFHsjW8ns.roa (raw, json)
Hash identifier:          uctNu98S6zBUuwWIkgaea+/+UKb/kp4Bp4jYdgCYY1Y=
Subject key identifier:   ED:AD:97:B3:E5:C2:C8:93:CB:55:69:53:68:40:C5:1E:C8:D6:F2:7B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F87
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7a2Xs-XCyJPLVWlTaEDFHsjW8ns.roa
Signing time:             Tue 29 Sep 2020 09:57:04 +0000
ROA not before:           Tue 29 Sep 2020 09:57:04 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        211.76.120.0/25 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3975 (0xf87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:57:04 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=EDAD97B3E5C2C893CB5569536840C51EC8D6F27B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:68:6a:94:46:c9:e7:03:59:57:9e:40:01:2b:
                    dd:16:7c:6f:ff:74:ca:bd:33:28:36:3b:a8:5c:dd:
                    95:a2:85:d7:e8:bb:f8:fb:38:6e:58:bc:50:9e:54:
                    f5:f4:f5:3b:b0:c6:16:8b:19:4a:42:9f:1a:e2:63:
                    4d:f1:bb:f9:20:09:eb:1b:d7:95:f6:bb:4b:3e:19:
                    a8:ad:1b:be:b5:8f:63:f7:04:da:e1:27:55:15:5a:
                    50:b1:a6:d2:93:c6:2f:b1:c6:ee:13:7f:9d:42:b1:
                    23:98:e3:e7:6b:f7:7a:b2:01:1c:8e:1b:ae:19:19:
                    ea:11:02:cb:55:9e:81:11:6c:45:ac:36:31:b6:db:
                    b8:f5:9f:20:f4:40:14:2d:e3:ed:04:70:19:8c:1d:
                    bc:f7:3f:21:b6:92:db:8a:7e:77:96:c4:aa:8a:c7:
                    90:a4:5f:bf:9b:b8:fc:77:fe:4a:16:75:6e:c4:24:
                    3f:c0:20:8e:d2:49:1e:fa:b4:41:ec:d5:3f:41:03:
                    86:ec:32:6f:dc:e4:dc:58:f7:8a:18:80:77:6b:d4:
                    60:d3:90:f2:e4:d1:6a:7b:47:41:ea:a7:b7:ac:da:
                    68:bf:1c:2e:6a:65:47:8e:1a:5d:ec:d3:81:24:f5:
                    87:6e:b4:27:bc:d2:ac:85:ca:a9:0d:a9:2f:81:b9:
                    21:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AD:97:B3:E5:C2:C8:93:CB:55:69:53:68:40:C5:1E:C8:D6:F2:7B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7a2Xs-XCyJPLVWlTaEDFHsjW8ns.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.120.0/25

    Signature Algorithm: sha256WithRSAEncryption
         a2:0a:86:be:ae:b7:b9:3e:ba:08:7e:20:9c:8b:d5:a4:fa:a1:
         06:7c:04:f4:52:af:5e:7d:f8:e1:b0:33:28:64:e4:f2:c9:bb:
         1e:56:76:5c:6d:0f:c8:d0:56:0a:b9:42:9b:d5:e5:9b:b8:59:
         1e:21:b4:ff:fc:2c:38:06:86:66:41:33:a5:09:aa:ca:b6:d9:
         db:2c:ea:0f:34:6e:ce:3a:9c:7f:9e:5f:2d:4b:04:08:a3:02:
         98:dc:8b:a7:cd:4e:32:17:15:dc:e8:ed:9b:2a:4b:80:2d:60:
         bd:84:93:b6:86:fc:f5:ea:c5:4c:fb:e7:73:46:05:60:34:d1:
         f6:fe:45:62:0a:47:8a:0f:e2:50:73:6b:4c:66:46:1b:7a:32:
         99:9d:e9:0d:a4:b4:71:72:fa:eb:66:b8:37:5d:8a:b1:34:ec:
         63:c5:4f:17:ad:2a:7a:96:7b:3d:98:61:46:46:2a:3f:60:af:
         b5:82:1d:55:6b:3d:57:1a:be:2d:b4:d9:d2:df:9b:ed:11:4d:
         4a:46:b2:06:06:9b:10:4a:2f:e5:79:74:28:9d:19:6e:5a:24:
         8a:70:7d:55:e9:be:ac:60:03:9c:1d:51:8e:99:e0:5f:be:80:
         90:67:84:74:df:81:7c:40:88:86:e2:dd:35:f4:65:bc:23:07:
         76:2a:0f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----