Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/99nd67DetRmaOyUb2CYpjdt5C88.roa
File:                     99nd67DetRmaOyUb2CYpjdt5C88.roa (raw, json)
Hash identifier:          ZP9MRg81b0k+sIRq6pYjI6uY8WbVRQpIl+ME0xuaXTw=
Subject key identifier:   F7:D9:DD:EB:B0:DE:B5:19:9A:3B:25:1B:D8:26:29:8D:DB:79:0B:CF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0CE2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/99nd67DetRmaOyUb2CYpjdt5C88.roa
Signing time:             Tue 29 Sep 2020 09:53:55 +0000
ROA not before:           Tue 29 Sep 2020 09:53:55 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.176.108.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3298 (0xce2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:53:55 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F7D9DDEBB0DEB5199A3B251BD826298DDB790BCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e2:3f:05:aa:a4:17:9a:7e:11:54:e2:5e:f7:
                    8c:15:fd:4e:c8:fa:72:54:43:c7:db:aa:a6:34:41:
                    80:bb:c4:a8:bd:2e:23:17:2a:ea:13:2d:60:2c:cf:
                    8e:1f:8d:2f:17:62:56:25:4e:43:b6:5b:4a:4e:a2:
                    7f:99:08:25:42:e4:4f:8f:d2:0f:e1:9c:13:91:02:
                    36:59:d0:a6:84:23:bb:c9:94:cb:5e:72:06:a6:fe:
                    fd:1b:3e:5f:c8:8d:1b:85:a7:7f:44:7c:70:ec:93:
                    d3:bd:d8:02:e9:c2:48:e2:35:09:21:a8:cf:91:72:
                    f0:fe:ee:99:18:76:f9:93:0d:20:fe:07:94:70:56:
                    37:c0:18:e1:d5:5b:2f:c1:1a:fe:b1:c0:a6:52:2e:
                    1f:bc:80:ad:aa:50:d6:cb:b3:1a:9a:2e:53:00:0e:
                    c6:36:2a:aa:e0:4d:14:a3:23:31:90:d0:8b:09:f1:
                    27:64:91:ca:a3:04:f6:1b:8b:1c:73:a3:c8:50:17:
                    83:70:21:89:5d:11:69:dd:5d:3a:3c:3e:79:a5:ac:
                    1d:6b:f6:be:bc:69:6a:8a:89:a0:4c:80:6e:01:0d:
                    9b:52:08:6a:bb:65:47:02:24:ef:4f:7b:62:cc:31:
                    97:79:eb:c8:bc:3b:3e:cb:1c:05:ad:49:f9:55:51:
                    8a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D9:DD:EB:B0:DE:B5:19:9A:3B:25:1B:D8:26:29:8D:DB:79:0B:CF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/99nd67DetRmaOyUb2CYpjdt5C88.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:ca:fe:d3:cd:52:59:61:37:6f:83:c2:ed:87:09:8b:99:fc:
         e3:59:46:23:1e:86:d2:4e:54:2e:71:e4:52:a5:14:d5:e7:cd:
         08:4b:17:ec:d1:6b:54:e7:ac:c7:cc:ab:88:56:a8:61:72:83:
         c5:e3:ff:70:04:bc:1e:9f:a6:86:53:72:7c:96:b5:54:5d:09:
         ec:2f:90:9a:c2:08:fc:fb:12:cf:54:d6:e5:7d:1f:f7:03:d9:
         c5:ab:ae:63:d4:75:1b:f8:18:ed:71:8a:39:6b:f2:2a:a4:75:
         76:3d:02:fa:85:0c:fd:ff:e3:ec:ed:e5:05:d6:d6:d5:d4:13:
         12:69:bb:7d:3d:da:c9:06:c1:48:4f:f0:1e:84:07:e9:44:8d:
         2c:04:d7:f1:57:6c:df:cc:fe:06:11:33:be:94:41:81:ba:df:
         23:13:aa:7c:0c:a2:c4:33:42:89:8d:1b:c1:2c:e8:93:cb:eb:
         14:1c:bd:13:92:9c:ea:2c:5a:57:65:71:d2:30:7e:33:6d:37:
         8e:7e:9f:54:d1:f4:0c:2e:29:8c:c9:9a:08:2c:5f:77:86:a2:
         9c:62:af:8f:63:e6:4e:f6:01:b8:e5:ee:f9:5b:e1:fe:a0:3f:
         40:a8:9a:fe:c1:af:0c:de:34:ed:21:56:43:9f:84:74:00:c8:
         50:e7:50:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----