Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7lg1Ttkv8yrkT_fVuZq4iNTs640.roa
File:                     7lg1Ttkv8yrkT_fVuZq4iNTs640.roa (raw, json)
Hash identifier:          C3fUV8oQdeeGrDldrVTiVlHvusSD8ViA+AF0BuqAMtE=
Subject key identifier:   EE:58:35:4E:D9:2F:F3:2A:E4:4F:F7:D5:B9:9A:B8:88:D4:EC:EB:8D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0DA4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7lg1Ttkv8yrkT_fVuZq4iNTs640.roa
Signing time:             Tue 29 Sep 2020 09:54:47 +0000
ROA not before:           Tue 29 Sep 2020 09:54:47 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        211.76.124.128/25 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3492 (0xda4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:47 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=EE58354ED92FF32AE44FF7D5B99AB888D4ECEB8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b7:1c:1b:0d:b0:44:b2:be:ca:2a:0e:72:c6:
                    df:ba:45:3b:72:7b:96:68:c3:2f:be:a0:56:55:1b:
                    dd:29:16:b7:95:46:ae:13:c9:21:b5:a0:3e:44:82:
                    43:7e:83:56:6d:bd:16:d6:f4:11:9d:05:43:21:ef:
                    e2:a7:85:29:81:a8:d2:86:58:9e:f2:3a:c1:1e:49:
                    59:eb:c3:94:39:ad:e0:16:60:af:5e:7a:4b:c4:dc:
                    bf:1f:f6:98:e9:03:fe:0e:6f:68:d3:72:eb:8d:76:
                    07:11:07:84:f4:12:89:e7:31:3b:2b:3f:7d:7a:b8:
                    5a:f0:9d:d9:4a:ac:1e:b7:27:46:4d:7b:41:d8:0b:
                    01:7a:ce:b4:14:0f:1d:91:4f:43:e9:e6:1c:cd:ae:
                    b6:f3:ed:7b:06:35:c4:2e:8c:1a:8c:ab:5b:0a:87:
                    f1:ce:71:32:74:3b:28:d5:a0:2c:6b:68:fd:ec:24:
                    8c:db:7c:39:3b:7e:70:12:10:5d:29:8e:d0:bd:c2:
                    f7:dc:6f:ba:8e:e1:75:f6:09:a5:be:7b:ea:62:3a:
                    f8:21:a1:1b:b6:f9:23:37:47:5f:e2:48:14:72:0d:
                    ac:ac:6d:ce:d7:6b:43:69:34:69:70:70:1f:a1:7a:
                    9c:9e:72:44:a1:e1:cb:5f:e7:9b:ae:49:e1:5c:2a:
                    d4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:58:35:4E:D9:2F:F3:2A:E4:4F:F7:D5:B9:9A:B8:88:D4:EC:EB:8D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7lg1Ttkv8yrkT_fVuZq4iNTs640.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.124.128/25

    Signature Algorithm: sha256WithRSAEncryption
         33:8f:3a:f9:f0:24:76:11:66:65:f8:c0:9f:50:f5:3e:e4:b0:
         b5:b7:14:a2:02:fd:f2:f3:18:9d:18:0b:e0:6d:16:80:87:30:
         94:f7:85:23:f6:6d:a9:5b:e9:e6:e3:7c:21:0d:36:41:f7:dc:
         8c:9d:f8:dd:ce:d4:5f:ee:76:6e:e1:89:0e:78:73:42:ed:25:
         66:8b:7e:da:a4:d6:a6:f6:79:cf:c6:75:e1:d2:d9:be:e6:1e:
         0b:c3:4c:00:9f:3e:3b:08:dc:21:47:bd:dc:b5:3c:b4:d5:a5:
         de:0b:4b:ed:90:40:f1:c8:f4:be:36:3d:ef:ff:b5:96:4e:f6:
         99:a1:46:14:20:1b:69:26:f3:c5:6e:f4:c0:24:7d:65:2b:5d:
         d6:aa:96:20:0a:21:0f:cd:f9:68:38:de:f8:13:0f:4a:70:cc:
         67:9f:c7:e5:90:2c:d4:a4:15:cb:a1:5f:87:cc:34:f2:9a:22:
         90:70:1e:bd:eb:b4:48:2b:ba:52:da:f9:9d:35:b9:10:e6:c2:
         e0:11:e2:01:63:fd:b8:0b:b1:44:87:9f:2a:58:10:4d:3b:20:
         53:23:a5:a4:6c:02:cc:6f:89:a6:1a:71:58:33:e5:b1:ec:c2:
         77:69:b7:bd:c2:b9:4f:cb:bb:c3:b2:e6:e9:88:a1:4b:c3:34:
         a5:1a:fe:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----