Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TBkQ1_OvPzNogduXxSMvPhPMo8g.roa
File:                     TBkQ1_OvPzNogduXxSMvPhPMo8g.roa (raw, json)
Hash identifier:          hGMxgzNCiuQkIyjJ76sz+eI9A2QXQBpEfVdxxsFLfVo=
Subject key identifier:   4C:19:10:D7:F3:AF:3F:33:68:81:DB:97:C5:23:2F:3E:13:CC:A3:C8
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F4A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TBkQ1_OvPzNogduXxSMvPhPMo8g.roa
Signing time:             Tue 29 Sep 2020 09:56:45 +0000
ROA not before:           Tue 29 Sep 2020 09:56:45 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.69.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3914 (0xf4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:45 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4C1910D7F3AF3F336881DB97C5232F3E13CCA3C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c1:13:1f:27:0f:eb:2b:a6:bd:11:8d:ca:f1:
                    aa:51:1a:f9:59:24:ec:22:16:0e:a7:57:86:99:f6:
                    0c:db:dc:5d:a8:0a:5c:ef:53:c8:16:be:a0:da:9b:
                    67:5c:cf:7a:4e:50:93:53:be:83:f0:6c:75:e9:f3:
                    b5:04:ca:80:70:5f:a4:19:42:aa:50:cb:9c:a6:5a:
                    db:07:bf:62:48:cd:ea:9e:eb:ac:e4:ab:a4:8b:bf:
                    24:fd:33:2b:0c:de:73:0a:1a:e5:6e:80:75:6b:14:
                    48:a7:8c:68:fa:ea:aa:8b:ee:d4:51:ee:a6:cf:bb:
                    76:2c:ee:ee:11:e2:00:b5:f9:1f:96:fb:e8:de:0e:
                    01:95:2d:a0:f4:ac:7a:07:76:9a:28:26:44:c4:de:
                    38:0a:b1:d4:5c:34:91:c6:4b:ce:17:c1:94:b7:f8:
                    cd:2b:f2:5d:4c:7c:fd:fd:64:d5:14:c7:aa:56:ec:
                    ca:b6:15:b1:8a:73:7c:28:cf:f3:db:cf:ec:a0:19:
                    04:bd:b9:53:d6:03:fd:c2:13:eb:0b:e0:18:5a:85:
                    85:3f:77:ed:3d:ca:04:21:30:b2:4c:15:44:e2:11:
                    f4:7a:e3:55:e4:a7:09:c8:95:14:df:68:2f:48:f9:
                    98:c0:bc:b7:81:64:3a:c9:bc:e3:63:68:c9:19:fc:
                    cb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:19:10:D7:F3:AF:3F:33:68:81:DB:97:C5:23:2F:3E:13:CC:A3:C8
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TBkQ1_OvPzNogduXxSMvPhPMo8g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:bd:d8:a4:6b:46:4c:94:f4:62:88:c6:06:d9:fd:3c:d5:69:
         16:91:60:81:d6:99:78:c0:34:35:29:2a:27:90:74:c6:61:73:
         b7:48:b1:dc:50:14:ca:3c:3a:22:2f:37:1f:ad:b9:86:05:07:
         25:f3:cc:72:39:70:44:22:32:e4:6f:b6:9a:be:da:5f:cf:b8:
         ca:3b:db:3c:c6:df:08:4f:3d:70:ac:cb:fe:36:65:cd:ad:8b:
         3c:03:f9:0c:d2:d7:db:f4:e3:20:d9:e7:5d:c9:49:5b:e8:61:
         ad:50:9b:60:db:76:d0:8e:96:db:e5:31:87:d8:34:e0:f9:15:
         e8:ae:6b:f5:39:a7:98:88:e3:ee:2c:a7:3a:c0:fd:59:38:78:
         3a:b6:2d:3a:d3:fe:7e:f6:8f:4b:b7:55:08:48:15:dc:eb:f7:
         fd:c4:1b:f1:50:b6:f7:1b:3f:bf:51:0b:4d:b2:e1:90:30:af:
         64:93:a2:d3:48:1e:56:9f:33:c3:32:66:4c:3e:f5:2e:e5:a6:
         bd:ba:b4:fb:74:37:85:4e:61:59:88:b4:97:dd:b7:3f:55:28:
         3c:b2:2a:70:35:48:7a:fe:79:03:fe:9d:cd:79:b6:f6:09:39:
         1e:0f:a3:98:38:0f:c0:82:0b:52:67:33:4e:ea:64:6f:67:20:
         fa:a6:79:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----