Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JJyBBS2aMOF7LZiZQ4RJSMaO7G4.roa
File:                     JJyBBS2aMOF7LZiZQ4RJSMaO7G4.roa (raw, json)
Hash identifier:          0JDNdlTTkIB759PdIwkY3wAybUp/tUf5FToTWPr/xS4=
Subject key identifier:   24:9C:81:05:2D:9A:30:E1:7B:2D:98:99:43:84:49:48:C6:8E:EC:6E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C73
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JJyBBS2aMOF7LZiZQ4RJSMaO7G4.roa
Signing time:             Wed 29 Sep 2021 02:47:47 +0000
ROA not before:           Wed 29 Sep 2021 02:47:47 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.176.253.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7283 (0x1c73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:47 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=249C81052D9A30E17B2D989943844948C68EEC6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fc:0f:98:37:9d:aa:35:34:e7:f0:29:51:59:
                    b7:5b:17:20:84:37:75:79:de:d5:37:bd:9c:1d:21:
                    8c:31:54:7c:a3:1f:eb:83:a3:28:4d:3e:e5:a0:63:
                    15:c5:53:03:ff:15:f3:e6:83:4f:b2:a1:b6:b1:0b:
                    ab:66:a4:6d:5b:59:2d:16:5e:d8:f5:71:d6:fc:ae:
                    b4:a5:93:87:83:34:17:af:ea:9a:91:bb:7b:80:62:
                    c6:38:8f:78:d6:34:cc:f0:1a:03:5b:2c:d3:02:d9:
                    80:a4:ff:4c:88:88:a5:08:81:4c:0a:76:0a:9e:2e:
                    0b:18:cb:9c:33:83:aa:09:78:96:4c:7b:92:ca:eb:
                    20:fa:32:a6:05:a9:dc:8f:b6:be:d9:c3:98:f0:9b:
                    00:45:db:1f:95:de:ac:e8:a1:ea:b5:03:11:c7:a4:
                    fa:14:7e:1a:9c:7a:6c:b0:77:7f:64:ae:1d:e5:1f:
                    36:20:07:bf:82:f4:27:b0:37:38:29:11:26:16:a9:
                    93:8b:0f:11:d8:10:09:73:77:95:fe:fd:16:18:d8:
                    c6:b6:af:28:87:60:7a:ac:65:c2:f8:c4:c7:66:53:
                    de:b9:95:f1:bd:5e:9c:16:21:fb:ea:7f:00:da:d5:
                    ed:96:01:01:55:fa:12:a3:1d:14:f9:f2:c4:4d:87:
                    36:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:9C:81:05:2D:9A:30:E1:7B:2D:98:99:43:84:49:48:C6:8E:EC:6E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JJyBBS2aMOF7LZiZQ4RJSMaO7G4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:06:64:62:4b:43:04:eb:f1:6f:f6:5f:29:fe:5e:44:06:13:
         39:70:c2:35:b6:59:9e:3d:cc:61:6f:c3:c2:71:cf:6c:8b:48:
         11:33:b4:17:1b:75:7b:6b:ca:9f:03:bb:25:f7:b1:62:e1:51:
         ce:d8:38:01:6b:af:f8:2c:5b:be:8c:51:14:a1:ee:d2:17:0e:
         ca:46:37:d6:38:76:cf:28:96:30:8e:6f:26:ee:25:ba:b7:4b:
         8f:04:8f:8d:31:66:3c:51:59:86:86:f8:32:81:c2:cc:b8:5a:
         25:22:bf:d6:60:61:31:b3:39:ae:9c:89:4b:03:39:40:1c:be:
         d2:09:84:0c:20:1e:00:64:ce:39:6e:6f:19:b4:65:e5:74:b1:
         f9:0e:7e:4a:b9:3f:bc:8c:c2:9a:61:c4:40:4d:b5:62:08:02:
         e1:f3:70:ec:4e:2e:70:b6:ad:36:fb:e1:31:b7:75:9a:02:a4:
         12:3b:4c:e8:3c:c6:62:46:98:d8:be:3c:ef:3d:a8:7e:df:0b:
         03:56:2a:79:09:cc:93:aa:b5:d9:65:62:67:ba:c3:b0:d4:3c:
         56:50:97:2c:11:0a:1a:eb:b2:39:b2:9a:04:c9:67:8c:fc:cf:
         77:c1:ae:59:e9:f6:17:1b:da:4e:a1:40:70:da:02:ab:fe:eb:
         ac:9b:6c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----