Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LqI2EkMpVMnt1heo67vBGdbqBCM.roa
File:                     LqI2EkMpVMnt1heo67vBGdbqBCM.roa (raw, json)
Hash identifier:          s6poWkkWERBYLJSKxE52L8bkzkuAOjlLXl96UL57Q3E=
Subject key identifier:   2E:A2:36:12:43:29:54:C9:ED:D6:17:A8:EB:BB:C1:19:D6:EA:04:23
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1AC1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LqI2EkMpVMnt1heo67vBGdbqBCM.roa
Signing time:             Wed 29 Sep 2021 02:45:43 +0000
ROA not before:           Wed 29 Sep 2021 02:45:43 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        106.1.176.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6849 (0x1ac1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:45:43 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=2EA23612432954C9EDD617A8EBBBC119D6EA0423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:16:9a:15:c4:d6:c9:59:32:06:87:fa:17:c9:
                    8e:a1:40:f4:d5:c4:dd:9c:2b:e8:e7:71:20:0e:15:
                    ad:ca:8d:3b:a5:fb:4b:ab:f6:fb:0a:14:11:ed:04:
                    7f:12:03:9b:b0:01:95:ad:81:b4:3c:2a:79:1c:47:
                    d9:e3:65:93:50:33:78:9e:9f:f3:31:6a:e6:d6:bc:
                    62:ae:2d:a4:e6:c6:a7:61:88:ba:cd:66:18:76:f6:
                    23:88:96:cb:4c:31:14:5f:94:d9:9a:00:14:5d:eb:
                    14:ea:b3:81:bf:86:13:db:9a:52:ba:74:6c:2d:73:
                    a9:86:69:4f:58:de:3b:84:ae:04:02:00:38:7d:1f:
                    33:63:7e:40:d0:c5:10:26:66:06:29:8c:88:cd:12:
                    7c:29:7a:77:8e:24:ed:10:74:7a:f0:bb:8e:76:ae:
                    4d:27:0f:fa:4f:98:a7:84:44:f3:3e:de:5f:cf:08:
                    22:5b:6c:90:2d:df:c1:e8:24:b6:23:3d:8d:eb:93:
                    c9:89:c6:43:32:a7:73:bf:07:82:99:a7:5a:9a:9f:
                    23:73:67:bd:c0:3a:ed:1a:f0:8c:72:80:62:a3:9e:
                    80:7d:af:76:d7:08:78:36:3a:d7:5f:ba:9b:50:4f:
                    5f:bc:ed:f5:7f:ea:9c:76:7e:5f:02:5c:7a:da:5e:
                    a2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A2:36:12:43:29:54:C9:ED:D6:17:A8:EB:BB:C1:19:D6:EA:04:23
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LqI2EkMpVMnt1heo67vBGdbqBCM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:3b:2c:e3:ea:d4:c7:31:35:66:7f:d8:53:98:85:2c:9c:9f:
         f8:69:82:72:2c:34:1c:59:1e:05:3c:45:fd:3b:91:54:a3:6e:
         df:e3:b2:5f:74:2f:b4:0b:b6:1d:8d:0f:49:30:47:9d:b9:e1:
         9e:90:21:5e:b3:ad:0d:2b:a6:c8:7d:ff:ca:71:72:2e:1f:d6:
         8f:f9:70:a3:83:7e:f2:3e:e0:a0:73:c0:6c:3e:60:36:7e:26:
         c0:42:33:12:3f:fb:07:7d:09:6f:86:a1:89:ed:fe:24:2a:b6:
         c5:cf:05:b2:3a:9d:35:07:0e:03:6f:1f:3e:b8:81:18:eb:05:
         8d:c1:e6:9c:87:34:b2:fd:5a:78:b8:ea:a6:da:11:07:02:04:
         0f:5d:5c:9b:b7:c1:a8:ca:66:2d:3c:b9:1e:61:97:42:67:e9:
         b8:e3:cc:36:d7:93:77:7b:d9:9f:8d:a2:5c:bf:6e:5d:28:2a:
         bc:aa:e1:91:99:0c:fa:51:33:1f:2c:db:40:f2:40:19:4d:8b:
         02:f9:b2:97:ab:d8:79:b3:e1:d6:14:9b:6e:c9:cd:d2:4d:c9:
         b4:38:c0:c8:d4:bc:ec:78:2f:a1:f6:dc:f1:e9:66:3b:f1:91:
         6c:0b:86:e9:12:da:03:33:93:20:3b:c3:15:9a:f6:02:bc:81:
         4b:e2:d9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----