Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KKWYvv9WNP1BjlvMELNZpwIkMTE.roa
File:                     KKWYvv9WNP1BjlvMELNZpwIkMTE.roa (raw, json)
Hash identifier:          P3KEliXWmmMrOPdAUdMSXm861sKzMMrdPgFzoXRMARk=
Subject key identifier:   28:A5:98:BE:FF:56:34:FD:41:8E:5B:CC:10:B3:59:A7:02:24:31:31
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0EF6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KKWYvv9WNP1BjlvMELNZpwIkMTE.roa
Signing time:             Tue 29 Sep 2020 09:56:21 +0000
ROA not before:           Tue 29 Sep 2020 09:56:21 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.100.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3830 (0xef6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:21 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=28A598BEFF5634FD418E5BCC10B359A702243131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:92:ad:99:76:02:c3:32:af:70:b7:1d:43:63:
                    f9:ec:c5:b0:b0:b5:31:46:11:ef:0b:4b:45:04:48:
                    93:00:85:79:85:d3:49:08:0f:17:1a:94:f6:75:3e:
                    c6:2b:cc:e6:87:51:4f:78:e6:c3:49:46:c9:76:95:
                    99:31:d5:df:39:3e:c4:68:e8:89:3f:38:e5:cb:19:
                    d3:30:c0:b9:38:91:06:9d:97:1e:32:fe:e4:d0:0f:
                    bf:74:c9:41:fb:fe:f1:79:87:9d:d2:3c:65:4d:14:
                    1d:97:c3:66:55:d5:ba:d2:06:51:71:5b:27:ff:b0:
                    c4:99:ee:94:53:2e:4b:0e:18:94:a4:fa:44:9d:36:
                    8e:8b:9e:29:c6:9a:0b:cc:ee:3a:21:be:84:9b:d5:
                    8b:67:94:bf:35:a5:92:81:b1:31:fc:4c:f0:7f:7c:
                    b5:76:06:cd:04:fe:93:ef:96:f1:71:76:86:b7:4b:
                    ac:c0:fd:94:9d:9c:3b:b0:f4:52:6f:93:d4:8f:7b:
                    0b:d8:dc:0b:76:e6:09:bc:f1:c7:53:72:16:d2:9b:
                    ad:ec:9b:0a:68:ea:3b:89:2c:0c:24:a4:0b:c3:85:
                    58:83:20:31:b3:6a:3b:88:b6:38:49:07:1f:80:d7:
                    6e:22:c5:bf:d0:9a:51:ed:00:c2:37:8c:7b:af:7b:
                    4c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A5:98:BE:FF:56:34:FD:41:8E:5B:CC:10:B3:59:A7:02:24:31:31
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KKWYvv9WNP1BjlvMELNZpwIkMTE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:13:c7:50:fe:e7:9d:0a:a0:4e:70:6d:1f:c6:16:48:bb:35:
         78:80:36:08:25:04:40:5a:09:c0:3a:b3:5a:49:b9:b9:f4:aa:
         ec:0e:f8:78:22:c9:62:a7:9f:ac:0b:c5:c5:58:ee:4e:3b:4a:
         65:93:c5:74:27:10:0f:f3:39:5a:db:58:7a:65:ee:af:2c:c6:
         da:2a:63:03:af:51:bb:9e:2b:4d:43:0b:d7:38:01:5e:1b:26:
         13:6e:4f:66:f1:a3:b7:7a:ad:0e:93:d8:5c:b4:fc:0d:45:3f:
         51:8d:4c:b4:ae:19:11:02:1f:6b:82:fb:2e:4b:bf:fb:ee:72:
         ee:17:0e:d3:f0:3f:cd:ea:ae:a6:98:65:cb:c0:10:25:f6:9c:
         67:13:d8:93:25:17:75:e7:6b:ad:79:c0:f6:3e:09:db:4d:81:
         11:46:e2:0c:db:9e:b9:22:b8:7f:95:f4:99:a7:22:f1:16:c9:
         e5:52:e1:75:0c:d0:99:ed:a2:97:c7:6d:ef:b0:7e:a3:77:c6:
         07:d8:15:12:63:6c:cf:3a:26:4a:33:75:cb:75:39:30:6c:3c:
         de:e7:b4:0c:58:65:9a:5c:85:95:36:f6:1d:7b:46:93:49:a6:
         4d:67:9f:20:d1:4d:3f:90:48:ef:9b:a6:95:6f:81:ec:3c:46:
         da:4f:9a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----