Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OKHQQsAm32Joban0X0drZA0E3zs.roa
File:                     OKHQQsAm32Joban0X0drZA0E3zs.roa (raw, json)
Hash identifier:          gBykHwciNhnSIfFhYQzQsfc+tKIRg6vYPkU899FiZBQ=
Subject key identifier:   38:A1:D0:42:C0:26:DF:62:68:6D:A9:F4:5F:47:6B:64:0D:04:DF:3B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D4F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OKHQQsAm32Joban0X0drZA0E3zs.roa
Signing time:             Tue 29 Sep 2020 09:54:26 +0000
ROA not before:           Tue 29 Sep 2020 09:54:26 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.46.128/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3407 (0xd4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:26 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=38A1D042C026DF62686DA9F45F476B640D04DF3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2f:be:f6:a7:d9:1a:d5:1a:69:86:44:8a:ff:
                    09:8d:64:ba:47:b8:11:4a:87:c6:e9:51:90:59:77:
                    f2:a5:57:3c:57:29:1a:6d:33:37:30:d9:38:61:d4:
                    4d:85:7f:f3:31:32:16:11:dc:bb:36:06:69:bb:8b:
                    a7:15:a7:16:7c:53:e0:e6:02:76:25:08:cc:24:b0:
                    27:62:1c:cd:9c:36:13:94:3d:70:a0:35:18:97:23:
                    a7:b8:88:a3:35:38:55:e6:8f:38:74:84:b9:1b:7d:
                    31:4e:83:a7:93:f8:51:39:71:e6:43:72:c0:95:06:
                    b6:29:09:fc:3e:5e:59:50:9d:08:ac:12:ad:b9:ae:
                    69:41:f6:58:d3:47:f0:45:1e:34:f8:d0:93:90:f2:
                    81:48:3a:9e:ba:67:eb:9b:3f:e0:d1:39:a4:85:d3:
                    3a:31:a1:8c:21:58:ee:23:85:42:70:35:85:97:23:
                    e0:3e:cd:62:05:e8:a3:cb:de:1d:3d:f5:c4:97:3b:
                    76:96:fc:86:c6:02:29:44:53:0e:ea:5e:fd:b9:ae:
                    28:d4:02:33:72:07:e1:13:1f:94:c0:35:7b:10:f2:
                    66:4a:2d:62:e8:84:0e:13:3b:c5:0e:aa:57:46:8e:
                    1e:00:77:9c:01:8a:a2:a6:d3:89:d8:5c:34:c1:e2:
                    d1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A1:D0:42:C0:26:DF:62:68:6D:A9:F4:5F:47:6B:64:0D:04:DF:3B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OKHQQsAm32Joban0X0drZA0E3zs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.46.128/26

    Signature Algorithm: sha256WithRSAEncryption
         a9:6e:14:87:5c:d6:c9:7b:14:e9:3c:08:82:d1:50:fc:59:68:
         bc:6c:87:1a:5c:d7:58:61:c0:40:4b:98:96:f6:f6:4d:30:ed:
         e9:b7:d9:ba:46:f2:49:99:9c:84:9f:49:5e:f0:7f:f6:a1:77:
         00:e3:f9:0d:99:0d:4f:b0:9a:3e:cd:47:e1:4e:6d:16:7b:2b:
         da:24:cf:e2:26:dd:f5:d6:68:dd:21:a1:60:d7:84:ef:9c:9e:
         4f:6e:9b:b4:b2:1f:90:3d:6c:f3:21:0e:c4:9d:eb:1c:9f:ef:
         e3:17:78:4a:a9:25:87:11:2a:10:65:2a:e6:01:47:4e:02:da:
         6d:53:9b:20:1e:92:88:bd:e3:e9:58:a1:49:e5:91:29:49:95:
         16:f2:5b:46:72:d5:42:d9:1f:ac:44:9a:71:18:67:9a:5c:82:
         ab:fd:ff:fb:f8:9d:7e:21:c4:0c:a9:a7:81:f3:76:9e:59:8e:
         84:f9:42:f5:68:ba:67:d2:05:c6:a7:68:e3:28:89:18:6a:a8:
         84:bf:10:d9:1f:20:ea:53:02:cf:a3:f6:91:c5:d9:b5:2d:dc:
         da:0d:27:f4:bd:ec:65:ce:1f:aa:5f:2d:e7:11:e4:79:8f:6b:
         fc:cb:3a:73:8e:f9:bb:ad:2b:4f:7a:0e:95:e7:ec:cf:ef:05:
         05:77:2c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----