Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8nnyUJMWKiIi0m2FtJWcZ6Xq5Gs.roa
File:                     8nnyUJMWKiIi0m2FtJWcZ6Xq5Gs.roa (raw, json)
Hash identifier:          /FRgD4x3DNdSiNmybmWy325L2/oEbkR+zlJUrSAoPuQ=
Subject key identifier:   F2:79:F2:50:93:16:2A:22:22:D2:6D:85:B4:95:9C:67:A5:EA:E4:6B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1A80
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8nnyUJMWKiIi0m2FtJWcZ6Xq5Gs.roa
Signing time:             Wed 29 Sep 2021 02:45:25 +0000
ROA not before:           Wed 29 Sep 2021 02:45:25 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.194.24.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6784 (0x1a80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:45:25 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=F279F25093162A2222D26D85B4959C67A5EAE46B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:12:58:db:e9:95:2a:d0:9c:71:ef:45:4b:b7:
                    d8:fe:34:82:ce:77:6c:cc:4c:b7:46:d0:16:e4:f7:
                    33:47:48:5f:3b:3d:06:93:a3:fa:15:2a:ed:8f:53:
                    2c:db:79:15:f7:1f:42:d5:33:c5:4c:70:7b:2e:7b:
                    a1:7c:00:6c:38:5e:c4:47:57:45:6c:3c:de:06:42:
                    ee:18:d4:7c:01:97:09:33:b7:46:ba:20:5f:af:ba:
                    17:48:40:77:a7:15:06:64:e1:f1:d4:6d:fd:fe:fc:
                    21:43:f7:0b:67:1a:dd:a8:f2:6a:56:18:d6:41:b0:
                    df:a6:eb:80:46:1e:c1:2a:e6:b9:92:04:54:bd:02:
                    f2:7c:42:95:59:d7:fd:de:1b:98:8d:03:1e:1d:d7:
                    c5:e2:52:96:44:77:33:91:e5:c3:ec:4d:b8:f2:11:
                    ce:f3:0d:46:ba:c8:50:59:44:e6:49:eb:7e:dd:10:
                    8c:db:55:b0:a7:0b:1f:4e:7e:95:cd:7e:ac:0d:ed:
                    42:94:40:89:15:eb:57:cc:74:ef:cd:12:78:7b:5a:
                    8e:18:aa:6d:8e:0e:01:61:13:c3:aa:0f:cd:d1:12:
                    cb:8f:2e:4e:3c:8f:2a:2a:7a:ab:5d:90:4f:9b:89:
                    14:69:a8:61:90:8f:ac:43:2c:3e:bd:3e:5c:a8:d3:
                    6d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:79:F2:50:93:16:2A:22:22:D2:6D:85:B4:95:9C:67:A5:EA:E4:6B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8nnyUJMWKiIi0m2FtJWcZ6Xq5Gs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:55:47:b4:fc:75:15:08:e2:f1:84:8b:62:39:c1:0b:c2:b7:
         74:27:7a:b7:89:b3:ea:c9:90:dc:f6:e5:08:44:2f:b1:4a:a7:
         91:ba:71:dc:f5:62:53:d2:f2:52:2e:04:85:36:b6:6c:6d:ff:
         76:24:b1:47:4f:e2:89:18:02:35:94:90:e5:3c:26:f0:c2:72:
         a9:8c:86:8e:c3:20:a8:f6:6f:80:65:d5:cb:37:ac:c9:03:48:
         7d:3f:00:03:75:c0:64:5b:b5:52:7a:a4:8e:34:71:c1:72:ad:
         a0:43:de:02:92:96:cf:64:6b:85:fa:b0:95:2d:5d:3c:35:e0:
         25:62:ae:f6:35:12:a6:54:92:fa:c0:d9:86:14:5e:53:e7:54:
         d3:3c:88:fb:0d:db:06:1b:00:73:b2:bc:f0:75:d2:60:2c:62:
         2f:fb:0b:4a:8a:d3:49:96:8f:68:6c:09:e4:f1:36:6d:d9:c8:
         5c:7c:96:53:b2:61:54:81:ac:b3:a2:d6:70:25:76:07:df:d1:
         69:54:85:43:9c:02:fe:7c:71:3f:0b:66:c7:ed:f2:30:c1:0f:
         00:2c:dd:fe:cd:1b:bf:1a:7d:05:54:80:18:11:52:4b:79:9b:
         69:23:f4:64:c0:95:89:78:2f:d5:0c:b2:ee:3f:b7:d1:88:7d:
         43:ae:32:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----