Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PRmo-mW7cONSojhjJBFb58bciMM.roa
File:                     PRmo-mW7cONSojhjJBFb58bciMM.roa (raw, json)
Hash identifier:          WSn1ptRyFzwrm9qt1wTVdxWqNMwYVtEZlxTkmZGB6sU=
Subject key identifier:   3D:19:A8:FA:65:BB:70:E3:52:A2:38:63:24:11:5B:E7:C6:DC:88:C3
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E5E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PRmo-mW7cONSojhjJBFb58bciMM.roa
Signing time:             Tue 29 Sep 2020 09:55:39 +0000
ROA not before:           Tue 29 Sep 2020 09:55:39 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.144.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3678 (0xe5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:39 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=3D19A8FA65BB70E352A2386324115BE7C6DC88C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:93:d0:20:d2:58:31:0f:e5:1a:7d:3d:14:2f:
                    54:f8:21:cc:64:5d:d3:e0:05:ea:17:ad:a3:3c:75:
                    b2:4f:ce:83:73:f4:13:5c:20:93:f4:24:b0:b6:6e:
                    e3:c4:6c:a6:61:15:93:e1:d4:24:8b:55:18:20:c0:
                    a6:ba:43:7c:9c:92:01:3a:3f:c6:9f:ee:3c:4c:b0:
                    d5:b5:49:d9:08:0b:98:5d:5e:36:71:63:b7:97:36:
                    99:cb:a6:d9:4d:41:e9:6f:e9:e5:b0:84:09:73:68:
                    98:26:ef:f5:c5:d5:bc:a1:93:2d:5c:b8:6f:aa:d4:
                    d3:45:bf:fe:7c:c2:03:0b:56:02:89:b9:bc:f1:f6:
                    41:a3:9e:f0:24:fa:26:58:88:ac:0d:92:41:8f:da:
                    4b:a6:79:dd:3c:5c:43:10:7c:9a:fa:53:54:0c:ee:
                    f0:92:5a:9f:b3:10:12:0d:16:65:6e:85:5a:c5:02:
                    63:a2:79:ad:c8:37:ea:3d:9e:30:82:11:e3:33:b2:
                    16:ad:c8:c1:e1:0a:be:13:ff:27:63:76:0b:f8:bd:
                    8b:78:39:7a:91:53:a4:80:ec:02:97:a2:75:f0:9c:
                    39:49:71:0d:54:d2:d3:db:1c:cc:a7:bf:84:09:42:
                    7c:e2:2f:68:91:06:36:89:30:4f:1b:23:b3:86:7c:
                    33:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:19:A8:FA:65:BB:70:E3:52:A2:38:63:24:11:5B:E7:C6:DC:88:C3
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PRmo-mW7cONSojhjJBFb58bciMM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4e:8b:a4:98:76:ff:8d:b3:a5:5a:d0:93:9e:e6:23:b0:6e:b3:
         26:4f:bb:cd:c7:ab:56:89:be:b9:4c:66:1d:33:7e:03:6e:d3:
         23:74:6b:29:72:b5:ac:40:e9:5e:84:22:e7:27:a1:35:35:59:
         8d:fe:94:db:53:23:46:9b:a7:80:b0:1a:9e:9e:6b:65:09:91:
         5e:ce:56:83:b8:19:ff:9d:08:01:16:34:7b:ea:6e:46:7c:75:
         94:f9:80:54:55:98:79:8e:eb:99:55:da:4f:62:e1:d7:0a:a5:
         77:df:8f:15:5b:9b:9f:11:44:c4:a3:5c:cb:5b:38:05:2b:e3:
         f6:4b:6b:0a:85:65:ed:b2:e6:21:1e:25:60:4b:85:7d:ff:54:
         80:99:15:23:49:4b:32:da:c5:d9:4c:68:1f:09:01:41:7a:4d:
         46:a5:ee:28:1f:b0:cd:99:b0:cb:9d:76:66:21:e5:a3:8a:0b:
         23:f3:6d:f2:7e:7a:21:f7:e7:95:e9:03:43:9b:31:6e:b5:e7:
         f8:ca:a9:a1:1b:2f:50:09:94:c9:00:db:21:49:b2:1a:44:13:
         a4:f2:5e:31:ab:d9:61:ee:28:81:f1:a6:1b:f4:be:26:01:42:
         26:b4:35:7c:b9:91:0c:f8:12:d9:06:46:a8:a5:4e:5a:40:d3:
         45:3d:b5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----