Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DoRxQ2uHg70R6bLDf7y4PaYThmE.roa
File:                     DoRxQ2uHg70R6bLDf7y4PaYThmE.roa (raw, json)
Hash identifier:          rEsImT/ibpO50Ze3zioCyxxS/5zHxW8Qe/wN8Te0nlI=
Subject key identifier:   0E:84:71:43:6B:87:83:BD:11:E9:B2:C3:7F:BC:B8:3D:A6:13:86:61
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F05
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DoRxQ2uHg70R6bLDf7y4PaYThmE.roa
Signing time:             Tue 29 Sep 2020 09:56:24 +0000
ROA not before:           Tue 29 Sep 2020 09:56:24 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        106.1.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3845 (0xf05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:24 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=0E8471436B8783BD11E9B2C37FBCB83DA6138661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:91:8c:1d:32:f8:97:18:aa:e3:f3:46:91:b4:
                    2f:97:c4:62:65:9b:7f:6d:b3:0b:60:74:f6:75:58:
                    28:44:a7:06:a4:fd:8e:d1:58:85:b2:81:10:a3:0d:
                    36:b6:c8:ab:91:60:4d:a4:91:14:2f:09:51:6a:30:
                    fb:5e:39:36:0f:5b:a2:7a:33:91:73:26:28:f3:f2:
                    a7:6a:01:d5:b2:ae:ed:d9:b1:15:d3:ba:ba:a8:7a:
                    d0:41:a3:81:7c:e8:91:05:f4:6f:e3:45:c6:2d:38:
                    2b:fd:55:03:d7:40:2e:ff:2a:fb:c7:62:07:23:c2:
                    2f:dd:96:f2:4c:af:87:d6:a8:a5:1e:36:3a:a0:84:
                    fa:06:28:68:52:2b:ae:c2:02:fd:6d:fd:3e:33:50:
                    73:96:38:ae:78:0e:fe:d1:f6:1d:c6:3d:6d:16:a5:
                    13:ae:6e:28:56:84:58:09:7a:3e:b6:e7:c4:53:29:
                    94:a6:97:d0:60:8c:35:d4:2e:c4:c7:68:19:99:c7:
                    02:bb:e9:5f:28:12:bd:a5:12:e2:b7:54:8e:88:f7:
                    94:44:5a:dc:4d:4c:cc:c8:5f:d2:8f:4b:f7:5c:5c:
                    7c:0e:0b:c9:5f:6f:b6:ee:35:57:91:43:91:2d:a7:
                    1d:c9:7c:85:b5:2c:82:8e:a5:b8:a8:11:81:43:3a:
                    8e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:84:71:43:6B:87:83:BD:11:E9:B2:C3:7F:BC:B8:3D:A6:13:86:61
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DoRxQ2uHg70R6bLDf7y4PaYThmE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         79:d2:21:5c:1c:66:97:2b:72:2e:47:ca:d2:ec:c3:c5:1d:ce:
         65:cb:95:42:1a:19:aa:56:e5:e7:f5:c7:bf:85:b2:40:39:a6:
         d1:82:73:af:bf:0b:f2:6a:d8:4c:a8:bc:db:fd:fb:1b:50:2b:
         00:db:7c:62:e7:5c:40:9a:fe:a5:77:ce:d9:bb:0b:74:aa:e9:
         59:c3:d5:b1:b1:c2:48:12:0e:45:12:28:e3:88:5a:0e:92:b5:
         61:c4:7f:c2:9d:e8:e2:d9:3d:d8:4e:d9:ab:ee:d8:59:82:29:
         13:f2:ab:56:e3:3a:01:59:18:47:33:59:6b:58:11:bd:dd:af:
         ae:dd:14:03:02:f6:41:85:0c:92:4c:ba:47:25:ba:93:90:d3:
         80:d1:f2:6b:d3:c5:c0:c7:df:ea:60:95:fc:91:b4:51:97:a5:
         f0:2f:dc:29:5b:9c:4c:1c:a7:54:8c:26:65:1b:17:31:7e:4b:
         55:3f:35:66:fe:0f:7e:df:ff:c0:df:20:0c:ea:7b:ea:91:6c:
         d2:0b:be:eb:a0:75:2b:f0:cc:b6:b0:19:51:98:67:a3:4a:3b:
         9e:49:b4:8f:fb:39:22:4c:2c:9f:b0:98:ac:a1:44:0c:2c:77:
         d5:44:eb:43:01:28:a2:4c:eb:60:30:e3:d1:79:d9:8f:1a:1e:
         78:02:63:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----