Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A6mbZaHo5dZgOdPDiy3Bp8tsdng.roa
File:                     A6mbZaHo5dZgOdPDiy3Bp8tsdng.roa (raw, json)
Hash identifier:          BTsv1aAeBv5wpIW8QFhMxrA2lghkQeMAJh1hk0l8ve4=
Subject key identifier:   03:A9:9B:65:A1:E8:E5:D6:60:39:D3:C3:8B:2D:C1:A7:CB:6C:76:78
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D90
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A6mbZaHo5dZgOdPDiy3Bp8tsdng.roa
Signing time:             Tue 29 Sep 2020 09:54:42 +0000
ROA not before:           Tue 29 Sep 2020 09:54:42 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        211.76.115.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3472 (0xd90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:42 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=03A99B65A1E8E5D66039D3C38B2DC1A7CB6C7678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dd:e4:e0:7e:c2:4a:61:fa:74:39:ca:2e:c1:
                    77:02:84:8c:15:09:d9:90:75:a2:07:eb:47:d3:b3:
                    57:aa:7b:f6:86:dd:c7:2a:15:72:c1:53:d5:ba:fd:
                    fc:e8:60:fe:52:a4:13:72:b1:73:d2:48:93:34:32:
                    3e:53:83:78:30:d7:aa:88:e8:a1:36:84:ac:d8:af:
                    00:f4:44:bf:e2:3f:7c:0c:e1:c9:eb:6d:f3:29:cd:
                    5b:75:e8:19:5e:c0:3c:13:f7:24:54:28:86:19:92:
                    0e:d7:94:90:71:16:fb:46:09:e2:7b:1b:89:aa:90:
                    07:97:f4:68:c9:fa:40:01:56:e6:9a:e0:ae:60:2a:
                    b5:41:04:3c:42:db:f0:a6:3e:bb:4e:b8:17:ab:b5:
                    a4:c7:71:52:94:9f:75:f0:9f:c0:8e:56:5d:ee:5e:
                    f1:9c:ea:f2:21:d2:a0:6e:b8:5a:89:66:eb:cd:97:
                    3f:67:0f:7e:80:3c:21:7f:e6:ff:a4:a1:af:a0:5b:
                    f5:40:85:4c:5c:e2:4b:c6:56:b3:dc:fb:37:50:ab:
                    49:0d:3f:95:30:6d:21:2f:ff:70:94:32:1f:15:c7:
                    c9:12:c4:cb:e0:26:94:2c:8c:58:73:0a:89:f3:cf:
                    c9:0e:4d:3e:12:b5:a6:d4:dc:a3:34:6d:79:5c:cb:
                    01:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A9:9B:65:A1:E8:E5:D6:60:39:D3:C3:8B:2D:C1:A7:CB:6C:76:78
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A6mbZaHo5dZgOdPDiy3Bp8tsdng.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:9f:64:b6:fe:29:13:39:25:71:bf:5e:55:24:81:4f:55:2a:
         9a:98:f6:97:2a:7f:1c:f0:99:3d:b4:b4:76:4b:b1:bb:e0:d6:
         b4:8a:a4:52:d7:ea:e0:89:6c:e4:72:8c:89:3d:51:7c:93:5b:
         4c:3c:21:14:ab:55:5f:7b:3d:40:20:3c:61:4b:7c:5d:c9:f8:
         79:83:6c:13:7b:2c:b6:16:a0:88:cb:73:32:be:22:e0:c6:9d:
         da:66:21:50:31:90:32:5f:36:98:fc:4e:d5:fc:fa:e0:6d:b6:
         8a:42:75:34:53:6f:50:fa:23:37:a6:4e:e8:1f:3f:d7:7c:81:
         f9:64:d6:9f:d0:f9:0c:d1:26:3d:12:c4:d5:dc:8a:ec:39:5d:
         ef:ef:d6:d2:d9:63:2b:35:f9:8c:2c:2e:90:a1:39:a7:ad:2e:
         77:65:be:17:42:79:10:c2:cb:5a:cc:07:56:ec:a5:df:29:59:
         e0:1a:dd:4a:3d:c0:25:72:bc:1b:4a:57:6d:be:62:3b:59:4d:
         be:5d:3a:f5:72:ac:5b:cf:bd:93:e9:5c:7b:df:94:e6:6d:12:
         2c:2e:6f:93:d9:ea:25:58:33:cb:25:41:fb:a3:fc:e6:fe:a3:
         99:7b:11:5d:24:b4:48:fc:1d:6a:af:14:9e:cf:f8:d1:6a:6b:
         80:0f:56:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----