Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8vllatBEncJ747yz8Xc9EP4x6sA.roa
File:                     8vllatBEncJ747yz8Xc9EP4x6sA.roa (raw, json)
Hash identifier:          bnNTzzx57y9QpJoeAS3LoSz+UePl9QMulE+FwqxCdik=
Subject key identifier:   F2:F9:65:6A:D0:44:9D:C2:7B:E3:BC:B3:F1:77:3D:10:FE:31:EA:C0
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1BC3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8vllatBEncJ747yz8Xc9EP4x6sA.roa
Signing time:             Wed 29 Sep 2021 02:46:57 +0000
ROA not before:           Wed 29 Sep 2021 02:46:57 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        45.64.29.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7107 (0x1bc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:57 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=F2F9656AD0449DC27BE3BCB3F1773D10FE31EAC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:23:bf:65:f7:bd:33:f3:51:ab:7f:88:36:53:
                    b3:41:18:98:c5:ff:0f:f7:04:9f:9b:8c:9e:31:cb:
                    0b:27:6c:fc:da:02:95:55:21:ec:93:7c:e5:2b:f3:
                    8e:b1:1c:4c:b5:38:71:a8:5a:83:3d:68:de:bf:66:
                    60:1c:7e:1e:01:19:79:c1:ef:f1:5f:c6:94:e6:5b:
                    ae:b2:d2:be:f8:15:35:41:c6:79:7d:65:cb:82:a7:
                    a9:59:a4:8f:3a:c4:eb:8a:3b:5f:48:be:6b:f3:99:
                    a3:39:54:0f:80:eb:27:04:70:7b:32:fd:de:b1:f3:
                    df:92:86:23:ae:08:1f:90:99:b8:87:5d:df:1c:49:
                    7d:8d:d7:03:d9:92:0b:f1:c4:e4:eb:1e:5b:ad:cd:
                    f4:6c:46:9a:bc:c2:e6:6b:f6:fc:2a:0e:c5:1b:3a:
                    d3:8e:3d:56:49:d6:32:44:c5:49:90:69:3d:13:55:
                    e1:ce:b4:e3:4b:f6:b6:66:a5:c2:e0:d0:e5:d2:51:
                    55:32:d1:cf:0b:08:1c:5e:65:8e:25:9d:e0:de:99:
                    3a:b8:9b:ed:31:a1:a3:9e:9e:bc:84:7a:49:71:9b:
                    1b:de:36:4d:03:5f:88:ef:4a:e9:92:83:92:13:21:
                    8f:38:38:0a:f0:8e:12:21:95:57:dd:dd:2c:4a:55:
                    11:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F9:65:6A:D0:44:9D:C2:7B:E3:BC:B3:F1:77:3D:10:FE:31:EA:C0
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8vllatBEncJ747yz8Xc9EP4x6sA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.64.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:63:b8:34:92:bc:f4:20:fe:51:1f:de:fe:c3:73:82:62:57:
         9f:3c:41:13:31:f3:95:5b:90:ea:44:52:36:35:c4:c9:7f:fe:
         87:79:e5:97:e3:55:8d:6a:94:98:2d:d6:4e:a9:67:aa:ca:a8:
         45:1c:f6:81:dc:47:3b:10:dc:a3:01:78:b4:51:4d:15:8b:33:
         d1:3f:ba:99:4b:f2:15:7d:67:15:65:6f:e1:bd:dc:bd:4f:32:
         11:1b:1e:38:70:33:fc:f6:62:9e:f0:f8:90:7c:5a:dc:d5:c9:
         89:7d:95:aa:c4:48:ab:27:ad:a9:e8:43:e8:3c:1e:74:6a:d6:
         fc:2f:09:1e:c5:98:a4:57:df:ea:17:b9:7f:1a:fb:40:c5:3f:
         14:36:f1:b1:15:a7:62:d6:6d:ba:1a:72:21:f7:cd:40:7e:43:
         10:29:5c:71:61:b6:79:77:32:3e:9d:b6:cb:ec:7b:db:82:85:
         a3:bc:2b:ce:f0:d3:fd:91:a0:ba:b9:a8:21:21:5a:37:c0:c2:
         3a:0e:be:8f:5a:f5:c3:d4:10:af:f2:f3:13:fb:98:67:b9:c9:
         05:40:da:9c:02:c1:ea:9d:f6:1f:ed:f7:03:7d:a6:de:2a:80:
         a7:0b:b1:d2:b4:2a:77:a6:88:7a:d5:61:8a:93:38:61:78:ae:
         7a:b3:6c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----