Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TVd7a1FuEKXUFub8dbjNpQiftcM.roa
File:                     TVd7a1FuEKXUFub8dbjNpQiftcM.roa (raw, json)
Hash identifier:          X8SEnJIMYIjOuQKhhznPODYQSAASEMF3e932xLV2WsI=
Subject key identifier:   4D:57:7B:6B:51:6E:10:A5:D4:16:E6:FC:75:B8:CD:A5:08:9F:B5:C3
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1925
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TVd7a1FuEKXUFub8dbjNpQiftcM.roa
Signing time:             Sun 07 Feb 2021 12:57:36 +0000
ROA not before:           Sun 07 Feb 2021 12:57:36 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        211.76.121.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6437 (0x1925)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:57:36 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4D577B6B516E10A5D416E6FC75B8CDA5089FB5C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:48:49:9b:3c:d2:05:88:2d:8f:a4:54:27:69:
                    38:b4:c7:fb:59:e7:4b:5c:34:1c:45:c6:d5:38:4e:
                    c8:b0:bd:4e:51:b0:74:19:a5:bd:ff:fe:5f:72:b7:
                    b8:4b:d3:5c:f9:73:ce:6a:12:6e:c3:76:50:3c:28:
                    45:02:37:e3:60:79:67:76:76:cb:26:e8:bd:2e:2d:
                    a7:0f:18:b8:b5:a8:e8:a9:bc:d0:f7:86:be:5f:ad:
                    c3:c8:75:e5:8a:87:50:79:10:78:ed:fe:54:c7:be:
                    44:53:d8:b3:c6:17:c4:90:a4:f7:1b:6a:2b:ba:41:
                    00:d5:6d:82:f3:4c:a7:ec:d9:7a:d8:0a:5b:d9:8b:
                    bc:d9:65:0e:71:94:e4:53:eb:86:cf:50:ee:48:5d:
                    10:1c:5a:d3:a8:51:16:19:24:02:5b:b4:1a:1c:dc:
                    48:89:49:5d:f9:72:66:ef:ed:ce:3f:8d:bb:52:6e:
                    c8:dd:bd:f2:d8:a8:6e:22:3f:10:ab:19:3e:6f:9b:
                    54:58:4d:b4:44:b3:cb:8a:da:ba:e9:c3:c5:9c:5f:
                    6b:66:09:a1:b5:7c:d7:cc:ab:43:68:8f:28:8c:85:
                    fd:03:bb:77:eb:bc:3d:a1:27:96:1b:7c:e3:8b:77:
                    96:59:9e:34:0e:fc:30:a7:25:8b:ba:91:1f:de:7f:
                    d1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:57:7B:6B:51:6E:10:A5:D4:16:E6:FC:75:B8:CD:A5:08:9F:B5:C3
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TVd7a1FuEKXUFub8dbjNpQiftcM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:ad:73:61:4a:56:69:b2:8f:a8:0a:21:c7:f2:b4:ee:60:2b:
         63:6d:ef:ec:ce:09:82:7b:f3:36:42:28:a1:43:1f:fd:20:b2:
         4f:7a:9f:4b:75:b8:48:79:a8:df:a4:aa:3b:30:e9:03:ef:2f:
         fa:b8:d8:23:4d:74:16:eb:2c:5d:73:1a:ce:22:80:97:14:7a:
         2a:f5:78:86:e5:a4:fd:8f:7f:9b:47:80:b5:b1:4a:27:bd:a3:
         ed:87:05:60:31:4e:7e:5d:47:0b:12:e6:ad:44:67:2c:b1:14:
         02:86:9f:65:7d:ca:cd:0e:6e:31:f4:a8:d0:bf:e8:9a:ef:fe:
         f2:29:0d:3e:8a:f6:2d:2b:2f:94:6a:83:fc:cc:87:51:2d:8e:
         8e:a5:05:88:d1:ed:31:d4:4f:5d:68:08:aa:47:e8:b2:0c:7c:
         a3:46:09:9b:ab:17:c7:4a:67:79:29:ba:ff:d7:04:e0:4b:01:
         93:f8:f3:21:c0:24:99:6d:5d:09:f8:44:ca:de:a5:98:be:b5:
         ac:43:ee:85:3f:2c:85:06:9a:4d:c8:1f:1b:97:b3:f1:54:74:
         59:4d:46:01:5d:ca:c4:3e:cd:fe:39:dc:a6:4d:47:ec:64:62:
         d0:3a:2d:5f:8b:41:f2:13:76:2b:da:5c:4b:e1:a9:de:21:a8:
         a3:70:36:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----