Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Tg3IPYid6SjQPrvhNB8yUFv9TfY.roa
File:                     Tg3IPYid6SjQPrvhNB8yUFv9TfY.roa (raw, json)
Hash identifier:          LFYhfju4Hk5et7A8ylQPMhsHgkd1/O7zx2gZZDVaQVc=
Subject key identifier:   4E:0D:C8:3D:88:9D:E9:28:D0:3E:BB:E1:34:1F:32:50:5B:FD:4D:F6
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E73
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Tg3IPYid6SjQPrvhNB8yUFv9TfY.roa
Signing time:             Tue 29 Sep 2020 09:55:44 +0000
ROA not before:           Tue 29 Sep 2020 09:55:44 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.236.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3699 (0xe73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:44 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4E0DC83D889DE928D03EBBE1341F32505BFD4DF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:11:f6:00:8f:7c:42:bd:b0:9d:53:2b:41:91:
                    be:c1:61:83:f6:6b:13:7b:2a:d9:76:34:96:52:6c:
                    95:d6:9b:da:16:e3:19:40:4b:06:df:3d:ad:50:95:
                    b1:7b:f0:49:5b:d1:ef:d1:96:35:09:15:df:07:42:
                    a8:f3:05:df:73:c7:55:92:b9:4d:d3:e7:b7:16:0a:
                    85:c8:5c:61:26:88:c2:d8:56:37:5d:09:25:85:ef:
                    dc:04:28:a1:b3:23:a2:9a:61:28:b0:36:81:ad:1e:
                    aa:43:3c:f4:36:50:be:92:7b:ca:42:a2:b0:09:ea:
                    5e:50:96:d2:18:fc:15:b3:b1:c7:f4:e6:d8:e1:d9:
                    90:8b:67:d5:6f:0d:8e:82:1e:3d:6b:f1:58:b6:79:
                    52:38:c9:35:33:96:66:81:08:21:97:ff:8e:45:85:
                    e3:e6:19:61:7a:45:15:d5:8a:74:1e:11:e6:24:91:
                    e2:06:b9:c9:fb:57:05:81:a9:32:bd:30:c4:b3:31:
                    3b:b5:a7:26:df:4a:f2:fc:7a:a7:7e:61:b0:cb:59:
                    7b:18:c4:8c:5b:cb:1c:8d:76:18:18:d8:c7:9e:bb:
                    45:7f:b6:6a:1b:9f:b3:5c:6d:91:89:8b:3a:5b:3f:
                    ca:86:32:37:11:bd:41:67:96:27:2d:6e:de:9a:47:
                    95:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0D:C8:3D:88:9D:E9:28:D0:3E:BB:E1:34:1F:32:50:5B:FD:4D:F6
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Tg3IPYid6SjQPrvhNB8yUFv9TfY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:d4:88:14:c7:79:1f:7d:54:7a:4c:8f:23:ca:57:36:22:83:
         20:51:fb:1d:17:7d:ef:7c:e6:02:35:33:c5:82:bb:eb:f7:b8:
         67:9d:2b:32:34:85:1a:84:12:45:d5:56:e5:55:95:a2:6e:66:
         f1:4e:2c:b9:18:25:c4:02:9f:dc:4c:50:57:8a:63:a6:47:d2:
         0f:5f:38:17:5b:9e:4e:6b:ab:48:c8:5c:e5:61:17:74:7c:bc:
         e1:15:f8:c3:05:07:18:3f:b7:48:a5:0a:c7:0d:6d:9c:46:ab:
         df:cf:32:a4:9f:fa:92:7e:e7:3f:5a:5a:ec:dc:b2:ea:b2:36:
         86:5c:53:fa:1e:e1:ef:ae:4c:7f:60:6a:1d:28:71:e6:bf:3c:
         ae:96:2f:57:a5:f0:ca:0b:d9:85:23:84:f7:b7:bc:f7:92:f0:
         b3:06:58:4e:4d:e4:3f:f7:81:4b:6b:83:8c:ff:7d:2d:5e:0e:
         71:0e:87:b1:6d:05:bb:ad:04:3a:4c:5e:a4:67:69:79:e9:90:
         9c:21:96:44:4c:d6:1e:55:96:fb:0d:fe:b7:8c:92:ea:48:73:
         17:76:eb:ec:40:f3:23:bc:b8:63:a2:44:0e:52:51:36:7f:45:
         eb:0f:56:88:c0:d7:54:c8:6b:f6:fc:15:e1:99:56:8e:5b:30:
         33:9e:6b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----