Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L26j4s5VHiFsur1s8NZFjlVAWjU.roa
File:                     L26j4s5VHiFsur1s8NZFjlVAWjU.roa (raw, json)
Hash identifier:          9oylCRvbWJdLIKU6i0b6V5YWroX+xZJh3LlbzhJqGTA=
Subject key identifier:   2F:6E:A3:E2:CE:55:1E:21:6C:BA:BD:6C:F0:D6:45:8E:55:40:5A:35
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1F73
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L26j4s5VHiFsur1s8NZFjlVAWjU.roa
Signing time:             Tue 06 Sep 2022 02:29:01 +0000
ROA not before:           Tue 06 Sep 2022 02:29:01 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18429
IP address blocks:        118.232.199.64/27 maxlen: 27

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8051 (0x1f73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  6 02:29:01 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=2F6EA3E2CE551E216CBABD6CF0D6458E55405A35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:06:5d:0b:8f:ce:d8:cd:6f:db:92:59:89:ec:
                    77:df:d5:c3:09:15:4e:d3:f4:1c:8b:42:b6:2d:fa:
                    69:1e:89:b4:c6:3b:58:15:85:47:85:ef:29:24:cc:
                    ec:f7:34:a9:9d:56:cb:e4:1b:a2:52:71:4e:28:5c:
                    87:c8:ff:61:8e:29:ff:b5:6f:6a:71:b6:d3:80:f6:
                    63:6e:51:98:69:1d:31:f0:2b:b0:bc:90:a9:c5:29:
                    40:ad:05:69:0b:e5:20:78:95:1f:45:90:c2:aa:8f:
                    0f:dc:64:03:af:d5:eb:f6:dd:1f:c6:5a:e0:2d:f1:
                    c8:f8:14:1e:f8:04:22:cf:3c:6f:b1:f6:14:23:71:
                    91:46:4b:91:42:81:41:47:80:5c:97:fd:08:56:04:
                    50:d0:da:89:9a:d7:a1:8e:45:19:12:99:49:9a:d8:
                    f7:b3:16:5b:58:96:66:ae:11:ea:ee:34:89:20:41:
                    1f:1a:c4:0a:ad:1a:a0:d0:22:3d:63:7e:54:69:d6:
                    41:35:e8:56:18:ae:8e:53:b6:ec:d2:13:3a:28:f2:
                    b1:96:92:99:59:f4:91:cf:80:a9:dc:a9:a9:b1:2c:
                    86:8d:8e:2f:c6:ca:fa:38:79:60:4e:65:b0:7b:14:
                    e4:b7:3f:9b:6f:5e:99:26:ab:61:c1:b0:30:6d:d9:
                    11:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6E:A3:E2:CE:55:1E:21:6C:BA:BD:6C:F0:D6:45:8E:55:40:5A:35
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L26j4s5VHiFsur1s8NZFjlVAWjU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.199.64/27

    Signature Algorithm: sha256WithRSAEncryption
         9c:4a:4d:03:1c:74:24:5f:2b:6a:66:eb:09:64:69:ba:e5:fe:
         c8:d2:4b:7c:88:bd:12:4d:d4:26:a7:c8:a3:8a:c8:b7:b0:f8:
         a1:80:3a:a7:7d:ed:75:86:d4:5e:97:3c:ec:85:80:0c:b9:11:
         34:7f:8f:1c:a3:49:b3:8e:23:02:c8:54:e7:e4:d7:a8:e3:81:
         ee:4d:83:7e:7e:2a:29:eb:27:64:5a:16:e2:59:b0:7f:e3:9c:
         a9:8b:8a:b5:d3:59:63:48:3c:69:e8:66:7e:90:58:53:02:16:
         a1:e6:8b:48:4c:97:f1:9e:55:f2:dd:b4:37:e9:58:25:88:94:
         c0:62:d1:a2:c2:e9:cd:83:14:58:54:86:e5:7c:70:e5:f7:44:
         c1:f3:5a:dd:ad:3b:47:4b:03:de:d0:5b:47:92:5e:0d:21:71:
         28:5c:cb:7f:e9:6c:83:1d:a8:10:8c:bc:17:10:da:27:b7:b1:
         84:5b:17:ba:af:32:5d:a7:50:c9:58:4a:5b:9e:26:5e:f1:bc:
         9d:f9:ee:b2:15:21:d5:2f:59:a4:46:fe:8b:bc:8b:15:8f:86:
         cd:01:40:66:00:1d:0d:4d:78:fe:a6:d0:17:ea:aa:7b:92:14:
         33:0d:9c:f2:01:1f:67:d1:c9:dd:09:08:da:7b:8b:9e:44:9d:
         5a:60:7a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----