Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GFBR6XB7lAzBa83NbRcEi2ZlDyE.roa
File:                     GFBR6XB7lAzBa83NbRcEi2ZlDyE.roa (raw, json)
Hash identifier:          kfqz8KkkuugWHmeOEy0JsdzSBTlhGiUkz268HUVDzvo=
Subject key identifier:   18:50:51:E9:70:7B:94:0C:C1:6B:CD:CD:6D:17:04:8B:66:65:0F:21
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D81
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GFBR6XB7lAzBa83NbRcEi2ZlDyE.roa
Signing time:             Mon 04 Oct 2021 01:44:50 +0000
ROA not before:           Mon 04 Oct 2021 01:44:50 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        2407:4d00:ff06::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7553 (0x1d81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Oct  4 01:44:50 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=185051E9707B940CC16BCDCD6D17048B66650F21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:66:b9:8a:cd:09:fb:76:d8:76:d9:52:91:a0:
                    87:86:f2:65:74:1c:92:22:e7:7d:a7:f8:0d:19:41:
                    35:4c:40:2a:d9:0e:a4:0f:3b:89:09:96:20:7f:e1:
                    ca:bd:0a:b9:b9:1b:9e:7d:80:63:b5:4e:8f:1d:c9:
                    be:0f:fe:15:d7:c0:27:e8:c8:02:86:75:c4:19:6f:
                    67:73:57:bd:6f:09:41:42:08:92:1b:cc:ab:83:19:
                    2e:fc:aa:5c:e3:bf:5c:0d:80:6a:cf:78:04:38:f4:
                    0c:2f:58:52:bc:00:bd:98:1e:b3:34:45:fd:50:53:
                    02:fc:82:da:b7:fd:fe:2b:1f:a2:dc:6e:e0:69:01:
                    f3:17:8b:0f:f8:dd:b8:7e:cf:ba:9e:8e:fb:e0:44:
                    69:03:31:01:c0:c5:09:23:28:cb:d0:c3:43:82:c3:
                    e7:88:10:ae:a2:09:35:1b:a2:02:05:f4:02:19:15:
                    48:92:5c:b6:b7:d5:8c:e9:72:c2:ba:d1:aa:a1:ce:
                    a9:f2:ac:24:b1:b4:18:91:2a:51:5e:41:a1:b1:c6:
                    34:62:43:3a:13:79:6e:98:cd:35:e5:30:77:14:e4:
                    84:4f:3e:16:9f:3e:96:9b:53:12:28:9e:85:bb:db:
                    6e:f0:0d:c9:bb:15:49:63:e2:77:9a:3c:80:a2:7c:
                    8c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:50:51:E9:70:7B:94:0C:C1:6B:CD:CD:6D:17:04:8B:66:65:0F:21
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GFBR6XB7lAzBa83NbRcEi2ZlDyE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4d00:ff06::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:6e:7b:17:b4:c0:de:d6:7b:9f:0c:ae:1a:bb:46:98:91:ec:
         0d:bb:7c:9c:10:b8:ea:99:42:1e:9d:30:59:21:97:32:56:7a:
         e6:45:16:00:6e:f7:bf:56:38:f2:2d:22:59:8a:8f:a5:b5:f8:
         a9:2a:a4:0e:4b:29:53:17:27:fc:d1:a5:40:98:92:a8:fc:45:
         b0:7f:77:9c:7d:e7:02:22:e2:fd:9f:1b:c2:1f:f4:fe:10:a8:
         7a:4a:97:a6:3b:6a:40:e8:1c:98:bd:97:d1:fc:e8:2b:04:b8:
         99:ca:2c:91:41:c4:67:ec:33:87:70:ba:de:0a:7a:96:5e:1f:
         a5:b5:b5:51:ad:ae:7d:96:4b:8d:f3:72:9f:d8:11:5a:62:26:
         d9:95:e6:4c:1a:a5:df:a7:4a:3f:38:d9:08:21:89:21:95:69:
         a6:b9:ec:ff:f6:91:24:b1:84:ea:37:ec:b7:48:eb:1c:98:83:
         e5:d3:b9:c1:fd:44:31:50:3a:59:0c:49:f1:28:e4:5a:0a:af:
         6c:80:13:d8:a8:66:3a:d8:0e:fb:ae:9c:b5:8e:b9:61:a4:11:
         c6:ed:e2:d4:dc:aa:89:3f:4c:02:78:d5:f7:5d:6d:9e:65:19:
         8c:63:cc:2f:42:72:7b:ae:67:2a:19:2b:fb:2c:0c:8e:68:43:
         6b:c2:44:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----