Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9lC-EPbj1jUebvZtvrc9ahvn-TA.roa
File:                     9lC-EPbj1jUebvZtvrc9ahvn-TA.roa (raw, json)
Hash identifier:          RyIlsPzCUv3GFie6DzpVpkLAqZje5J+3QJVeyN6hsyQ=
Subject key identifier:   F6:50:BE:10:F6:E3:D6:35:1E:6E:F6:6D:BE:B7:3D:6A:1B:E7:F9:30
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B7A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9lC-EPbj1jUebvZtvrc9ahvn-TA.roa
Signing time:             Wed 29 Sep 2021 02:46:38 +0000
ROA not before:           Wed 29 Sep 2021 02:46:38 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        118.233.248.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7034 (0x1b7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:38 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=F650BE10F6E3D6351E6EF66DBEB73D6A1BE7F930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:14:79:08:1d:98:d4:2c:f2:ee:ae:54:0c:d5:
                    a2:03:ab:70:f8:7b:fe:de:9c:b0:b2:09:83:45:e0:
                    73:d3:ce:d0:a1:d2:b9:a6:cb:96:27:dd:a1:2c:e3:
                    76:a5:c2:65:ec:0d:97:b7:36:e0:b6:c6:79:a3:57:
                    52:55:e7:c7:d1:ad:97:d8:67:04:39:9c:b7:f9:68:
                    8f:11:1f:b8:c3:a8:c6:92:5a:9f:d0:a6:cb:64:6a:
                    a3:94:c9:5f:73:bc:0d:ca:bc:95:48:ca:11:e9:82:
                    b7:1d:b9:da:19:3d:8e:11:e9:03:d2:bf:0d:ea:93:
                    6f:bf:66:45:fa:f6:c7:03:28:19:89:2f:7c:17:51:
                    e0:0f:3b:8c:7b:83:a4:b0:17:5e:44:c8:40:48:7f:
                    2e:d8:eb:e7:a1:f3:f2:4f:69:64:33:3f:e9:d7:b1:
                    c3:2f:f3:35:20:d8:7d:92:21:23:59:64:56:1d:c0:
                    7d:e8:11:17:af:36:df:89:6b:ea:de:71:f3:cf:06:
                    26:a1:be:71:e9:1d:1f:6c:7a:58:1c:4b:39:48:5f:
                    a1:dc:17:f4:a0:29:ce:ab:8c:1f:b0:80:b0:b0:81:
                    2c:2d:a8:9a:48:e8:e4:3e:fb:bf:b7:1c:3b:85:55:
                    7e:51:73:0e:c8:54:f3:a1:28:c8:d0:91:1b:0d:3e:
                    9c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:50:BE:10:F6:E3:D6:35:1E:6E:F6:6D:BE:B7:3D:6A:1B:E7:F9:30
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9lC-EPbj1jUebvZtvrc9ahvn-TA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:ec:78:6c:a6:39:88:44:44:72:3a:ee:d5:ea:4b:d6:1d:49:
         b2:83:05:d3:73:5d:6d:c5:43:53:c9:ed:bb:8a:90:32:88:f3:
         78:c1:e7:76:88:38:16:7c:d7:d9:dd:48:38:47:fa:74:9e:e6:
         51:e0:1b:20:6c:8f:d6:7b:d4:80:be:30:4c:17:a9:be:12:9f:
         e9:b2:3d:e5:e5:30:4e:df:bc:f9:a9:89:1e:10:49:55:d5:a4:
         f8:b0:d7:19:86:ac:5e:9c:5a:70:43:29:f1:d4:b6:83:11:cc:
         9a:99:1f:b1:05:62:e2:65:9e:c7:09:03:2d:38:93:92:89:d2:
         d7:e5:3a:5f:8d:04:60:22:16:ff:8b:d6:a2:55:d1:bb:7c:3a:
         4f:fa:61:9f:75:30:bc:e4:28:3f:7f:8f:bd:50:d2:fd:79:61:
         a2:09:7e:fc:a8:b1:3b:13:8a:38:94:d5:e4:41:b9:13:74:7b:
         f0:47:47:9c:13:15:b2:fe:ba:36:1d:65:21:5f:10:0f:bf:be:
         6e:01:a5:af:77:2f:a6:44:c3:e8:50:94:c1:04:ad:fa:a5:4e:
         dc:1c:45:85:95:1b:32:62:66:b2:2f:d4:79:24:cf:1c:b6:5f:
         0e:fc:02:50:30:56:02:dc:5e:3a:f5:da:7d:c9:d1:fa:5a:bc:
         12:e6:aa:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----