Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EHXLw0aFSruNZsrHhGfmtzdG8qc.roa
File:                     EHXLw0aFSruNZsrHhGfmtzdG8qc.roa (raw, json)
Hash identifier:          fLMIKUDTaQCjIwBZ+8p3zph0hbsYVZmNAAHuKQeYrIE=
Subject key identifier:   10:75:CB:C3:46:85:4A:BB:8D:66:CA:C7:84:67:E6:B7:37:46:F2:A7
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D09
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EHXLw0aFSruNZsrHhGfmtzdG8qc.roa
Signing time:             Wed 29 Sep 2021 02:48:32 +0000
ROA not before:           Wed 29 Sep 2021 02:48:32 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.193.247.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7433 (0x1d09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:32 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=1075CBC346854ABB8D66CAC78467E6B73746F2A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cb:36:59:19:2e:b2:e3:8b:1d:71:09:7e:a5:
                    4c:27:92:db:0c:db:01:9d:14:e9:ef:12:19:51:52:
                    41:48:bc:c4:cd:1b:c4:c7:7f:2b:0f:dd:2f:03:09:
                    b9:0d:68:11:f3:f5:a6:d5:69:47:9f:dd:ac:ee:93:
                    1a:05:c6:a5:19:d7:11:e7:c4:77:97:73:23:64:3c:
                    61:bc:16:84:7e:d2:d0:4c:01:71:bc:86:43:f4:1a:
                    53:5e:b7:75:c9:be:71:5f:9d:0a:70:15:88:cf:b9:
                    af:e8:37:2a:ba:aa:c9:9c:67:7d:e4:1a:38:bb:41:
                    42:6e:9d:78:21:2e:63:90:47:cb:04:a5:79:58:dd:
                    0a:99:7f:ba:3a:dc:fe:1b:42:cc:40:1e:cd:7b:85:
                    4c:0b:5b:44:1a:97:f5:4d:8d:89:85:57:ce:32:13:
                    a3:80:d8:74:f3:c5:42:43:64:37:00:7a:f2:1e:3e:
                    0f:16:0c:d0:e8:6e:34:5b:74:cc:8d:6c:d0:69:16:
                    cd:ef:89:6a:ca:ba:71:d3:0c:7a:df:8a:61:b1:7c:
                    22:63:43:b9:1c:f1:85:95:a8:d8:54:75:99:3a:77:
                    63:35:2b:bb:7a:f2:c2:de:00:c3:4d:12:24:10:e8:
                    58:21:84:8f:b0:3b:85:05:a6:29:5b:17:1c:63:4e:
                    8e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:75:CB:C3:46:85:4A:BB:8D:66:CA:C7:84:67:E6:B7:37:46:F2:A7
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EHXLw0aFSruNZsrHhGfmtzdG8qc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:bc:b4:11:65:73:9a:26:32:3e:05:0f:bd:2f:a8:49:29:93:
         14:f2:c0:a3:aa:72:e3:c0:d5:43:76:d0:aa:79:48:f5:ce:23:
         02:41:68:29:ce:e8:e0:63:84:5a:41:fd:d8:69:18:60:8a:6d:
         c9:c9:7d:cf:58:e5:cc:33:6b:ac:9d:1a:6e:38:f6:5d:2b:d2:
         f4:27:3d:b3:c0:16:32:7d:7f:d4:0f:87:32:5e:d5:57:c4:37:
         ba:99:a1:1a:51:30:1f:a1:43:ed:73:66:1f:5c:d6:78:c4:5d:
         b1:e4:3e:de:6c:1b:72:57:3f:d8:7a:5e:1a:f1:c8:6b:fb:6f:
         07:08:14:e6:3b:59:42:04:e5:16:d8:30:b6:4e:6e:a9:1a:45:
         56:78:9c:d3:ca:a0:ea:06:02:d2:9c:22:f6:f7:23:b1:6a:9a:
         04:68:b4:05:ba:01:e2:eb:e2:b1:7a:a9:ee:ab:49:68:42:71:
         1e:cb:47:05:5c:6a:ed:e7:be:34:ec:f9:06:ad:5e:d8:0d:ab:
         aa:a0:d1:3d:2e:da:94:be:e8:2e:6d:f4:ea:5e:be:54:49:11:
         d7:0f:69:c8:61:df:92:d1:54:e8:10:f3:9e:be:46:85:a0:66:
         95:da:0a:43:26:8a:5e:03:96:c8:71:9b:ad:c6:4a:96:5f:3f:
         5c:6b:a6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----