Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CFJyyHZ3m4dZHGiqUot3QXaeTHI.roa
File:                     CFJyyHZ3m4dZHGiqUot3QXaeTHI.roa (raw, json)
Hash identifier:          8LTxMHO+dAkrRGghCBiwO5ukO4XegAoU/4sKZCs1ZUQ=
Subject key identifier:   08:52:72:C8:76:77:9B:87:59:1C:68:AA:52:8B:77:41:76:9E:4C:72
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1BF4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CFJyyHZ3m4dZHGiqUot3QXaeTHI.roa
Signing time:             Wed 29 Sep 2021 02:47:12 +0000
ROA not before:           Wed 29 Sep 2021 02:47:12 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.177.151.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7156 (0x1bf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:12 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=085272C876779B87591C68AA528B7741769E4C72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d1:60:b6:00:61:43:a1:dc:ff:68:6c:0e:58:
                    53:57:34:ff:13:5b:9f:2c:a5:d5:0b:34:ce:9f:9c:
                    c9:98:e9:79:92:bc:af:c3:49:7f:da:9c:e5:17:d3:
                    db:34:f7:87:81:dc:78:a5:bf:07:19:98:17:95:69:
                    4d:e0:c5:5c:10:01:2d:08:0a:01:14:84:d9:91:2c:
                    97:ec:22:57:18:55:b4:d5:19:61:eb:c2:32:8e:0d:
                    81:59:fb:59:24:4f:2e:2d:47:68:e0:ba:35:a8:2c:
                    33:2a:35:d9:37:eb:e7:bd:e4:68:0f:bb:68:61:5f:
                    1d:f1:76:5f:eb:c3:9d:0f:87:7e:88:2f:ff:72:0d:
                    2e:3d:0c:fe:c9:f1:fb:7c:4b:b0:c0:74:9b:b3:5e:
                    24:07:3f:89:6b:11:33:3d:99:68:b1:1b:56:d3:3b:
                    cb:bf:dd:e2:b0:61:b4:d9:58:0c:1c:8d:2b:2b:eb:
                    c9:cf:3f:40:e8:2f:e6:01:d7:49:53:34:7c:c6:df:
                    fb:fb:37:46:bc:56:94:08:5f:ec:0f:30:1c:3a:9a:
                    7e:e4:19:93:d2:e9:93:17:19:50:4e:c4:20:dc:03:
                    0e:7d:f6:db:66:98:99:45:ff:f1:10:95:0d:24:52:
                    d0:9d:34:dc:97:e6:ed:68:15:0b:66:c9:a3:35:cf:
                    c6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:52:72:C8:76:77:9B:87:59:1C:68:AA:52:8B:77:41:76:9E:4C:72
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CFJyyHZ3m4dZHGiqUot3QXaeTHI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:2d:92:67:33:76:62:c9:67:16:9a:66:0d:2c:7e:d3:8a:c6:
         4e:6d:1e:52:07:32:84:57:4b:e7:87:b0:91:b5:9f:dd:a6:a5:
         1d:99:3f:19:d5:cb:ad:86:d5:c8:ed:ab:40:d4:5b:da:60:ff:
         7d:b0:ce:8a:3a:b2:cb:2e:91:19:a9:3a:4c:2e:0e:2b:46:27:
         6f:68:c9:0d:39:46:24:99:bd:f1:15:4c:b0:c6:a8:78:3b:c9:
         7f:13:15:2d:5b:25:9a:3d:e5:6d:ab:b5:2c:4f:55:5d:62:18:
         db:2e:78:c5:c4:b0:e5:cd:6f:95:f4:30:f4:4d:b3:b3:0c:1f:
         9a:da:5f:ab:11:71:7e:39:a2:e4:97:ac:e8:9c:da:91:67:eb:
         46:00:87:88:e8:7f:15:97:47:bf:d1:34:26:33:eb:7d:8e:d2:
         34:45:7e:ac:c9:6b:a7:fb:32:fa:90:ec:6b:1f:de:6a:15:78:
         87:6a:cc:5d:6e:b2:a1:98:b4:0b:16:92:42:79:70:a6:04:d7:
         e9:ce:eb:d9:0c:2e:f8:ff:43:9d:cf:20:c6:e3:75:5f:9e:a3:
         1d:85:ae:b8:1d:cf:32:07:65:fa:ab:8e:d2:30:ae:f4:75:0d:
         05:58:ff:a4:14:84:4f:eb:6d:1e:64:e2:37:f9:39:09:31:5a:
         fa:94:64:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----