Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MU6Xtp5NaAqWB7oL1qbHsOZGZQ0.roa
File:                     MU6Xtp5NaAqWB7oL1qbHsOZGZQ0.roa (raw, json)
Hash identifier:          /qkl3QcSI5I2+k9JJsz34RVkSFZdMBxO1S8INWaknOU=
Subject key identifier:   31:4E:97:B6:9E:4D:68:0A:96:07:BA:0B:D6:A6:C7:B0:E6:46:65:0D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0DDF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MU6Xtp5NaAqWB7oL1qbHsOZGZQ0.roa
Signing time:             Tue 29 Sep 2020 09:55:05 +0000
ROA not before:           Tue 29 Sep 2020 09:55:05 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.212.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3551 (0xddf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:05 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=314E97B69E4D680A9607BA0BD6A6C7B0E646650D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e8:fe:b3:35:47:fe:b8:3a:17:0e:ec:41:2d:
                    bd:c0:11:bb:86:e7:a4:39:45:4f:22:e2:2e:b8:d3:
                    aa:c4:68:37:69:97:f1:a0:62:55:47:60:18:e1:6b:
                    72:a7:1a:ff:50:78:2d:6a:35:38:e5:55:98:ca:6c:
                    4f:03:68:90:e7:6f:ab:29:95:05:65:14:a6:e6:50:
                    d3:53:5b:94:07:c7:01:87:88:9d:1d:1c:44:08:10:
                    d7:c2:e7:36:7f:13:49:66:33:88:8a:04:bb:63:0e:
                    8d:de:6c:e7:0d:90:46:9e:b2:a6:0d:70:ac:4f:00:
                    f6:8c:30:7a:ea:14:06:15:4d:dd:7d:a7:02:15:ac:
                    59:4c:42:9e:bc:a4:df:35:64:3f:f2:c4:ab:83:30:
                    b8:72:bc:9e:71:8b:9f:71:75:d7:b0:47:66:cb:6f:
                    85:c5:3b:51:dc:42:4c:dd:95:bc:5c:d8:25:1b:38:
                    92:b5:d1:66:be:ad:63:be:7b:7a:7c:04:9f:1b:df:
                    be:13:d2:f9:8e:13:85:3a:ed:cb:c1:14:17:7c:d6:
                    e6:2b:a2:08:c3:4c:97:de:ad:6f:f1:e3:8b:17:89:
                    26:c7:32:8f:15:e8:2f:5e:eb:97:bc:c4:c7:88:ba:
                    46:c3:2f:9e:08:b0:91:28:84:59:9d:46:40:09:93:
                    0f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:4E:97:B6:9E:4D:68:0A:96:07:BA:0B:D6:A6:C7:B0:E6:46:65:0D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MU6Xtp5NaAqWB7oL1qbHsOZGZQ0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:81:26:f7:8d:6c:03:b4:f6:0b:08:0f:46:eb:0d:9c:f7:5d:
         ae:64:e9:79:92:5f:26:13:25:90:78:f8:5c:40:f7:b6:20:ee:
         28:4b:cd:d5:88:1a:a6:41:97:02:d1:9d:26:15:a4:3e:12:65:
         c7:89:d0:77:eb:b9:be:23:24:99:56:06:28:9e:19:1b:7d:88:
         3c:fa:e6:e2:1b:f8:81:e9:2c:83:a4:12:1a:ad:7d:af:eb:71:
         f7:61:70:3a:df:85:db:78:ba:a8:ac:da:a6:7c:40:e3:61:42:
         4a:44:9b:f3:09:8c:f8:c6:39:e8:8c:bf:df:78:a0:0a:99:4b:
         4d:7a:24:4c:71:c2:e3:83:b6:24:4a:7e:fb:be:25:6f:aa:6e:
         c4:d5:57:58:e3:7d:3e:9c:a1:9f:56:f9:19:4e:37:2e:46:77:
         9a:27:62:95:d9:5e:c9:2b:0b:d2:b8:ca:3a:a6:90:43:cc:77:
         d1:f8:2f:7a:81:3f:b2:67:9f:c1:45:bd:7d:38:1f:e7:eb:78:
         65:ef:c1:07:39:1b:2f:ec:3c:52:a2:9f:27:35:5e:17:05:a5:
         e9:43:1a:f0:27:95:f6:6a:8c:5e:6f:33:39:66:d9:2a:f5:c2:
         a7:e9:56:1f:12:cb:a2:34:9f:5a:20:86:85:86:92:1f:6c:20:
         10:95:c4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----