Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S2DBUj7K--Euma5slObCL2L_UDY.roa
File:                     S2DBUj7K--Euma5slObCL2L_UDY.roa (raw, json)
Hash identifier:          M6iwO81j2dbddlyTNqEvrkUfHMEIAkmkCwh+LoszPQU=
Subject key identifier:   4B:60:C1:52:3E:CA:FB:E1:2E:99:AE:6C:94:E6:C2:2F:62:FF:50:36
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E42
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S2DBUj7K--Euma5slObCL2L_UDY.roa
Signing time:             Tue 29 Sep 2020 09:55:32 +0000
ROA not before:           Tue 29 Sep 2020 09:55:32 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.248.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3650 (0xe42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:32 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4B60C1523ECAFBE12E99AE6C94E6C22F62FF5036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:01:c2:e5:31:ed:67:13:3e:f5:d3:2e:d3:a2:
                    5a:b3:d2:d2:53:d3:15:cc:d9:cc:0b:e1:8d:47:b0:
                    8f:c7:c2:b5:94:84:a4:3f:f9:97:08:5c:0d:2a:be:
                    ab:93:d9:3f:7d:01:10:0c:6a:d9:f9:3a:5d:ef:8a:
                    e5:cf:bc:33:28:6d:77:20:e7:db:f1:64:98:3d:4b:
                    ec:a8:98:f6:ed:21:ff:16:41:51:57:46:64:57:05:
                    d4:35:05:35:fe:f6:9c:33:d6:93:3a:b8:b9:46:17:
                    e9:68:d0:52:8e:66:c8:6c:2b:da:56:91:ec:24:bd:
                    a5:41:55:e5:cc:5e:f7:d7:a1:97:8e:b8:12:49:4e:
                    21:38:65:d6:63:47:d2:e5:a3:ec:dc:3b:82:e8:54:
                    a9:aa:06:c1:7b:7a:47:60:99:d1:6e:d5:c6:c6:3a:
                    b2:97:b1:11:88:95:10:90:74:b4:f3:f6:db:a5:55:
                    de:02:39:e4:a4:42:17:81:3e:2e:ab:18:1e:c9:59:
                    44:c2:f3:59:92:e5:5c:9a:3d:0d:eb:aa:c0:aa:2c:
                    48:d9:a3:00:6b:a2:67:dd:cf:ba:e2:b4:1b:e8:25:
                    3f:c5:04:0d:fc:0c:4a:d2:1b:6d:16:28:0a:b9:50:
                    68:3f:c5:88:13:7f:b1:dd:25:e4:69:18:5e:3f:57:
                    72:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:60:C1:52:3E:CA:FB:E1:2E:99:AE:6C:94:E6:C2:2F:62:FF:50:36
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S2DBUj7K--Euma5slObCL2L_UDY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:0f:7e:6e:20:9c:c2:02:1e:f0:7c:19:8d:42:56:24:47:be:
         96:da:0d:a5:22:28:16:46:53:03:6f:fd:b3:04:ac:f5:b2:93:
         77:ce:4a:73:c0:8c:fe:d9:4f:7f:0b:46:8c:38:50:88:87:06:
         ac:07:18:25:a9:8c:e9:11:5c:5b:04:09:01:fe:d6:46:de:db:
         8d:d5:0f:c5:4e:da:b9:ad:99:b6:82:29:f3:d6:d1:93:f4:c6:
         7d:bc:6a:66:66:33:04:ef:6b:bc:a0:0b:8c:ae:0f:db:37:a1:
         b9:9c:47:c1:78:ff:9c:0f:20:57:dc:15:34:35:37:3a:3a:a1:
         2f:11:9d:1c:b2:e2:9a:ed:a2:6b:9d:82:8c:79:c6:ac:fb:dd:
         3a:78:96:70:22:68:a8:01:21:de:3a:74:25:c1:31:19:b3:46:
         0d:fc:7b:5d:82:28:06:5c:17:d1:a3:f1:cb:e7:16:14:6b:1e:
         a5:7c:33:97:3a:00:38:40:6c:cd:1b:0c:1b:12:1f:9c:07:fa:
         c3:dc:a7:91:fd:98:3e:db:a4:fd:ed:a8:1d:7b:d7:38:f7:4b:
         45:f4:1b:0d:a4:ac:da:ec:86:e8:86:23:c6:9c:e4:51:aa:81:
         30:6f:5d:cb:29:ca:c4:38:89:bd:9c:ad:08:61:b5:4f:23:07:
         e9:3f:c9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----