Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SYY9eZf84scANV2Ggpr0siXNEL0.roa
File:                     SYY9eZf84scANV2Ggpr0siXNEL0.roa (raw, json)
Hash identifier:          XrQSebucU/2RyK2wle7Nb7kvl9aYBTtnC8sYkCdY770=
Subject key identifier:   49:86:3D:79:97:FC:E2:C7:00:35:5D:86:82:9A:F4:B2:25:CD:10:BD
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1BC6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SYY9eZf84scANV2Ggpr0siXNEL0.roa
Signing time:             Wed 29 Sep 2021 02:46:58 +0000
ROA not before:           Wed 29 Sep 2021 02:46:58 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        106.1.214.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7110 (0x1bc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:58 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=49863D7997FCE2C700355D86829AF4B225CD10BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:93:82:16:89:f4:e1:35:a6:8f:f0:65:c1:66:
                    f4:2a:d3:07:09:3f:71:d2:03:ff:a5:92:f3:fd:6e:
                    76:7b:1c:a0:11:7d:76:e3:da:ce:b1:b5:2b:e9:08:
                    05:5b:21:69:6d:49:0c:23:60:f1:8f:9c:ee:5b:2e:
                    b0:8d:46:1a:fe:69:9b:50:0d:42:88:f8:1b:89:e8:
                    78:98:50:28:3b:26:8e:5d:e8:ae:78:fd:a8:cf:d7:
                    f9:49:77:b6:b3:ca:b0:31:1e:03:69:25:7a:12:e9:
                    40:41:b2:c4:e0:d9:5d:4d:27:01:a1:aa:06:dc:69:
                    8f:44:28:0d:95:ee:53:4f:2e:6a:2e:4c:08:2e:43:
                    ed:1e:a1:8c:46:dc:23:3f:4e:81:46:5c:e9:0d:d6:
                    3d:d5:ae:6f:c1:16:1e:04:db:91:09:3e:f5:27:97:
                    1d:44:3d:e5:0f:2e:55:0d:11:81:dc:f4:59:8c:e4:
                    38:81:02:4c:aa:63:86:cd:3c:b7:af:98:14:6f:13:
                    2a:4d:cf:34:99:df:d9:b8:8b:fd:fc:74:8e:61:01:
                    da:d9:c7:9a:9b:d0:fb:4c:eb:2f:12:db:66:c3:81:
                    7f:a2:d6:60:52:78:04:d8:4c:4f:07:35:17:d8:ec:
                    c5:f6:bd:d2:27:f6:9a:d4:cc:c4:dd:63:9b:12:02:
                    3b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:86:3D:79:97:FC:E2:C7:00:35:5D:86:82:9A:F4:B2:25:CD:10:BD
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SYY9eZf84scANV2Ggpr0siXNEL0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:70:bf:98:91:b4:7d:88:f5:93:b3:1b:5e:ba:16:b4:6b:08:
         3b:1e:18:ae:fb:3c:cd:20:32:55:99:02:33:1d:54:86:9d:04:
         d1:b3:4a:81:e5:ee:f3:66:1b:69:7b:97:a4:80:9a:00:28:82:
         8f:77:4e:b9:89:4e:3d:25:32:f3:0c:0f:d4:0f:20:a9:c0:34:
         66:39:43:e8:d6:fb:55:84:0c:cb:89:ca:88:ba:3c:fb:b1:00:
         c6:c6:c7:78:a5:66:3f:06:76:ae:b5:9a:5f:29:be:b0:aa:ec:
         df:98:01:e1:08:6d:1e:ed:a0:8f:82:23:bf:88:43:0b:c1:ac:
         62:fc:6a:83:9e:56:9b:9a:e5:45:7d:d2:d6:51:cf:e4:a5:1a:
         c6:28:b0:92:5a:27:04:15:9f:aa:c0:11:f2:53:3c:57:3e:62:
         11:76:25:50:c2:73:05:73:18:23:4a:6d:aa:18:c5:42:b6:b0:
         df:58:96:65:ce:b8:03:f4:da:33:92:df:1b:84:be:8a:00:f9:
         45:4c:50:a1:de:81:f1:f8:d5:5f:fd:c4:ae:e4:42:a1:a1:86:
         85:83:7f:5e:f1:27:7b:81:70:1a:4a:f3:81:84:52:b1:f1:f0:
         5a:b4:4e:78:5c:ab:bc:23:25:0f:18:dd:aa:d6:f5:4a:14:d1:
         59:5b:72:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----