Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JGDvtrvxMfxTlAYVsDwxpylimd8.roa
File:                     JGDvtrvxMfxTlAYVsDwxpylimd8.roa (raw, json)
Hash identifier:          ruinPPHm2Ll6/UGtYhrGYCpBl5N2N2JZIo3muxUdL4s=
Subject key identifier:   24:60:EF:B6:BB:F1:31:FC:53:94:06:15:B0:3C:31:A7:29:62:99:DF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D35
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JGDvtrvxMfxTlAYVsDwxpylimd8.roa
Signing time:             Tue 29 Sep 2020 09:54:18 +0000
ROA not before:           Tue 29 Sep 2020 09:54:18 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        180.177.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3381 (0xd35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:18 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=2460EFB6BBF131FC53940615B03C31A7296299DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:86:15:b2:ae:c2:e0:e2:78:7d:cb:36:c1:2e:
                    46:19:cb:8b:4f:ef:b8:17:76:dc:ba:0e:cf:02:23:
                    cf:45:b7:4e:3b:ce:ca:09:8d:0f:b2:51:34:2b:86:
                    40:05:cd:42:bc:cb:2a:73:e7:ea:fc:c1:99:9c:e9:
                    f7:d2:c0:3e:6c:39:f3:77:2a:ea:d7:2f:25:32:20:
                    7c:70:59:8a:37:f2:c8:10:e3:96:bf:f0:15:91:4d:
                    a1:21:bb:f9:db:2d:78:fe:c0:c4:f5:69:99:cf:37:
                    a2:e0:a4:8a:45:77:ee:6e:56:e8:e2:25:f6:9c:fc:
                    8e:9b:60:59:df:a7:8a:13:ee:3e:1a:08:9c:90:64:
                    e9:4f:a7:49:b8:c9:69:26:b5:9c:86:10:ed:96:f8:
                    43:02:67:c9:27:6e:03:8d:3b:ab:92:c2:f3:8b:c4:
                    62:3e:c6:4f:eb:c5:22:b5:f5:da:48:2b:c3:0b:e2:
                    8e:7d:cd:4c:f8:02:7f:62:1f:5f:94:a2:c7:1a:21:
                    e4:9b:c5:52:6d:7a:fc:b5:c6:b4:f9:f0:42:d0:9b:
                    53:e1:e0:af:b8:2e:4e:6a:f0:5c:ef:f3:34:55:38:
                    6c:8e:24:12:da:13:f5:89:92:75:82:6f:95:4f:e1:
                    28:af:11:aa:cc:f1:21:08:d7:28:a2:eb:41:01:1b:
                    85:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:60:EF:B6:BB:F1:31:FC:53:94:06:15:B0:3C:31:A7:29:62:99:DF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JGDvtrvxMfxTlAYVsDwxpylimd8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3a:c3:04:23:7a:da:54:8a:de:55:77:ba:9c:85:01:81:9d:5a:
         80:b8:ad:67:d0:dd:15:88:b6:13:07:a6:eb:2c:f8:11:55:dc:
         13:72:9e:ea:ed:2f:1a:93:b0:60:a4:65:77:07:1a:a4:fd:55:
         93:b9:cc:41:d7:b6:69:5c:fc:5a:a9:f9:ca:4f:5d:e5:b1:e4:
         a2:20:3c:e6:b5:2b:ef:88:3a:0c:dc:91:cc:67:26:a1:82:4a:
         da:c8:d4:4c:87:86:8b:b7:8c:4a:db:c9:ce:5d:c7:35:30:86:
         c8:77:7c:6b:b1:c9:9d:5a:53:30:b6:b4:34:b9:ed:13:70:99:
         50:0d:d1:59:0b:2a:59:8c:68:30:d0:5d:4c:24:43:9f:1f:1e:
         23:e3:fe:07:3c:e0:2d:53:f6:7e:19:9d:db:bf:b2:93:c8:51:
         c5:c6:99:31:6a:2e:1b:4b:db:e1:fb:dd:25:63:8f:9b:cb:92:
         aa:dd:f3:64:ab:43:d8:52:00:7a:1b:bf:ff:99:47:d0:56:1c:
         24:09:0c:8b:51:7d:69:c3:19:54:f8:27:82:98:33:8c:54:b5:
         3f:dc:6d:8b:96:a8:0f:f6:96:c7:3f:45:28:fa:24:ba:7a:47:
         d6:3c:80:ae:4a:7f:c2:2a:80:e7:6c:eb:58:ec:48:35:61:aa:
         d6:78:de:b9
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICDTUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU0MThaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDI0NjBFRkI2QkJGMTMx
RkM1Mzk0MDYxNUIwM0MzMUE3Mjk2Mjk5REYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfhhWyrsLg4nh9yzbBLkYZy4tP77gXdty6Ds8CI89Ft047zsoJ
jQ+yUTQrhkAFzUK8yypz5+r8wZmc6ffSwD5sOfN3KurXLyUyIHxwWYo38sgQ45a/
8BWRTaEhu/nbLXj+wMT1aZnPN6LgpIpFd+5uVujiJfac/I6bYFnfp4oT7j4aCJyQ
ZOlPp0m4yWkmtZyGEO2W+EMCZ8knbgONO6uSwvOLxGI+xk/rxSK19dpIK8ML4o59
zUz4An9iH1+UoscaIeSbxVJtevy1xrT58ELQm1Ph4K+4Lk5q8Fzv8zRVOGyOJBLa
E/WJknWCb5VP4SivEarM8SEI1yii60EBG4VJAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUJGDvtrvxMfxTlAYVsDwxpylimd8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0pHRHZ0cnZ4TWZ4VGxBWVZz
RHd4cHlsaW1kOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwC0
sTANBgkqhkiG9w0BAQsFAAOCAQEAOsMEI3raVIreVXe6nIUBgZ1agLitZ9DdFYi2
Ewem6yz4EVXcE3Ke6u0vGpOwYKRldwcapP1Vk7nMQde2aVz8Wqn5yk9d5bHkoiA8
5rUr74g6DNyRzGcmoYJK2sjUTIeGi7eMStvJzl3HNTCGyHd8a7HJnVpTMLa0NLnt
E3CZUA3RWQsqWYxoMNBdTCRDnx8eI+P+BzzgLVP2fhmd27+yk8hRxcaZMWouG0vb
4fvdJWOPm8uSqt3zZKtD2FIAehu//5lH0FYcJAkMi1F9acMZVPgngpgzjFS1P9xt
i5aoD/aWxz9FKPokunpH1jyArkp/wiqA52zrWOxINWGq1njeuQ==
-----END CERTIFICATE-----