Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Szdh5L3BqI8oGHsnMW3aQf7TehY.roa
File:                     Szdh5L3BqI8oGHsnMW3aQf7TehY.roa (raw, json)
Hash identifier:          V0vnp8LKW9k0QPMYU/SK9d51f/stYopQp8vUZgaXXmg=
Subject key identifier:   4B:37:61:E4:BD:C1:A8:8F:28:18:7B:27:31:6D:DA:41:FE:D3:7A:16
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D93
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Szdh5L3BqI8oGHsnMW3aQf7TehY.roa
Signing time:             Tue 29 Sep 2020 09:54:43 +0000
ROA not before:           Tue 29 Sep 2020 09:54:43 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.176.232.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3475 (0xd93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:43 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4B3761E4BDC1A88F28187B27316DDA41FED37A16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ab:df:9c:bf:8f:8e:4a:cb:b0:ed:e6:9a:19:
                    52:89:34:b9:d2:05:cc:1c:51:82:9d:c9:5c:b7:a9:
                    e1:7b:db:0e:55:c1:f2:e9:c9:d0:a5:92:96:96:77:
                    9a:e5:7e:70:ed:32:7f:15:f5:ec:ea:6f:42:e3:4d:
                    cc:f9:18:09:cf:67:65:22:fe:9f:6e:2b:ae:36:93:
                    bc:55:59:61:1b:f2:0f:e9:90:c8:86:4e:88:d7:41:
                    41:7e:a8:8f:18:c6:e7:b0:bd:b7:5a:70:a7:56:a4:
                    2c:12:27:7c:04:de:15:a3:ca:f0:89:38:5b:9f:3a:
                    0b:c9:25:b2:01:95:74:f1:6b:68:40:20:ae:c7:19:
                    1c:50:02:89:2d:0d:53:b3:ac:2c:50:bd:aa:d6:60:
                    3c:61:35:04:cc:28:8e:45:42:94:fa:3e:6d:86:ee:
                    8d:a4:96:38:a2:3e:73:a3:1e:b5:18:e4:05:b4:de:
                    97:16:2b:17:f8:65:09:09:e4:51:47:91:8b:d4:a5:
                    a9:c3:69:14:aa:16:db:6c:ed:5c:ae:af:b0:b1:a3:
                    50:3a:5f:f9:4e:b2:01:85:07:bf:18:b1:73:3f:89:
                    c9:57:38:c1:3c:23:81:77:8e:36:9d:d4:9e:65:f3:
                    c2:c9:2e:3f:d5:35:26:48:ea:9d:47:df:50:05:dd:
                    61:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:37:61:E4:BD:C1:A8:8F:28:18:7B:27:31:6D:DA:41:FE:D3:7A:16
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Szdh5L3BqI8oGHsnMW3aQf7TehY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:e1:67:52:b0:80:d9:7f:1f:2a:74:0d:93:76:3f:61:5b:6e:
         89:4c:ee:02:a2:b2:be:d7:71:b0:22:b6:61:5f:a5:38:aa:e8:
         d7:c1:dd:7c:3e:90:20:ec:23:bd:d3:96:63:61:66:49:fc:25:
         8f:26:69:df:bb:9d:48:31:12:56:18:39:9e:76:a3:9c:9b:17:
         6d:1a:a8:39:6f:47:37:8e:21:c4:eb:c8:b4:11:04:40:6e:49:
         4d:99:d9:8b:34:a1:37:c4:cf:5d:90:4b:8e:de:b0:7b:29:c3:
         e2:2b:ce:f4:19:35:45:cf:84:40:54:13:1c:6b:80:c1:e9:2a:
         ca:ca:c4:7d:95:63:35:e2:19:5e:d1:5e:c6:8a:58:4a:90:06:
         11:04:be:e7:65:a7:d4:22:e0:6c:2f:4c:f8:22:b3:22:0b:b7:
         c0:79:d3:51:27:db:6d:fd:60:9a:74:42:aa:3a:ed:76:44:35:
         af:2c:d8:bc:6c:51:1d:84:e5:4f:72:07:b2:1d:cb:0f:24:4c:
         9a:93:ff:95:71:56:a9:9d:77:ab:d2:87:70:dd:c6:60:2e:ea:
         41:82:2e:64:01:47:8d:b9:69:0e:78:bc:03:05:96:ce:11:f9:
         3c:70:29:01:65:9d:e0:ed:90:69:75:d8:b8:cd:92:e4:62:32:
         c7:b0:de:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----