Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VSF7q837K8_xtWV86DNxP8armB0.roa
File:                     VSF7q837K8_xtWV86DNxP8armB0.roa (raw, json)
Hash identifier:          oBeV+qBnM1icB7IVOFbJnUsgij9MQ9Q65KtvqJ1oa+U=
Subject key identifier:   55:21:7B:AB:CD:FB:2B:CF:F1:B5:65:7C:E8:33:71:3F:C6:AB:98:1D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1BA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VSF7q837K8_xtWV86DNxP8armB0.roa
Signing time:             Wed 29 Sep 2021 02:46:49 +0000
ROA not before:           Wed 29 Sep 2021 02:46:49 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        106.1.244.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7074 (0x1ba2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:49 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=55217BABCDFB2BCFF1B5657CE833713FC6AB981D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e2:44:06:46:36:ff:db:4f:73:b0:99:1f:38:
                    7a:6e:2b:17:3d:c8:72:42:fd:1f:e0:ac:52:b7:6a:
                    26:19:53:42:70:c8:cd:2c:99:44:e1:1f:2b:90:93:
                    8d:46:21:66:4e:ab:6d:d9:fc:8f:47:90:bd:95:fe:
                    ef:21:b8:cb:bd:3b:68:3d:2b:f0:45:9a:bd:34:88:
                    4d:3b:cd:60:f9:94:59:ea:c3:fa:67:54:8a:9f:4c:
                    df:9b:b0:0c:48:1b:c3:25:0b:a2:a9:ab:50:8f:84:
                    7b:0b:e6:40:d2:00:78:45:92:49:34:95:ba:06:f7:
                    d6:7a:85:8c:da:6a:ca:4a:6d:6d:21:98:0f:85:89:
                    ad:3f:1c:97:58:13:14:d9:bf:f0:6b:5a:64:7f:0e:
                    77:31:8a:27:77:4b:91:c5:c3:c4:8d:8b:89:a8:81:
                    fb:61:b8:df:bb:c0:07:17:28:cc:b3:55:65:57:ab:
                    13:81:c4:67:f4:ec:1d:94:dd:74:ae:85:e1:4d:cd:
                    94:aa:a3:0e:b6:21:35:93:0d:6d:72:fa:f2:27:01:
                    e4:4f:05:6c:9d:99:9a:54:85:49:89:89:d5:40:c5:
                    2e:f0:df:2b:53:36:09:ab:54:b6:bd:e3:d2:19:21:
                    95:6c:81:f6:21:0c:df:f1:98:8b:4a:f4:3c:75:1e:
                    94:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:21:7B:AB:CD:FB:2B:CF:F1:B5:65:7C:E8:33:71:3F:C6:AB:98:1D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VSF7q837K8_xtWV86DNxP8armB0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:98:5d:ba:eb:12:3c:08:69:78:85:41:ab:f2:ea:2a:62:b5:
         11:a3:cb:2a:2b:66:42:86:68:c4:41:a9:42:9c:c9:c9:b0:a2:
         a5:45:d3:53:93:f3:d9:49:15:f4:0e:3a:03:51:49:29:36:fb:
         c6:2d:cb:d5:5c:1f:88:54:f1:13:0f:1c:8e:95:e8:18:9b:5c:
         02:42:5a:91:67:80:87:1d:08:c5:d6:98:6f:46:31:9b:19:66:
         db:dc:db:bf:1c:56:50:dd:97:78:a3:72:be:a6:f3:5d:f4:c0:
         d4:25:22:70:90:8b:af:80:8e:64:25:90:d5:ae:02:5e:f3:03:
         5a:d0:6a:2c:19:f7:40:68:4c:3e:f5:87:04:4b:f9:70:60:f9:
         8b:4f:03:27:23:42:6c:fc:34:0a:d1:6b:b0:c7:44:30:99:2e:
         f5:40:9a:17:69:ce:a6:b4:4e:ff:48:8f:d3:a7:b5:0a:16:7e:
         78:21:51:58:32:58:59:40:e6:b3:87:8e:dd:dc:c4:67:bb:26:
         bd:42:b8:ce:73:17:11:ed:c8:ba:32:61:a5:bf:c8:59:9c:1d:
         e4:4d:2b:f8:e7:ba:f6:6b:6c:7c:1c:86:80:63:6b:8e:53:e8:
         78:28:cf:e1:4e:6e:bc:a7:01:3c:e2:b2:6c:00:95:1e:2d:2a:
         98:01:32:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----