Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VYfuZomCBGoMtS4qKLuJLBI3gOI.roa
File:                     VYfuZomCBGoMtS4qKLuJLBI3gOI.roa (raw, json)
Hash identifier:          ZqpTKkkbOyoapbzh58uuQZIWP+qJMV4KJHPDNjdMv4U=
Subject key identifier:   55:87:EE:66:89:82:04:6A:0C:B5:2E:2A:28:BB:89:2C:12:37:80:E2
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B98
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VYfuZomCBGoMtS4qKLuJLBI3gOI.roa
Signing time:             Wed 29 Sep 2021 02:46:47 +0000
ROA not before:           Wed 29 Sep 2021 02:46:47 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.176.156.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7064 (0x1b98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:47 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=5587EE668982046A0CB52E2A28BB892C123780E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:38:be:76:da:f9:9b:f8:88:fd:8f:b3:9d:1c:
                    24:99:ca:84:8c:b6:46:63:5d:30:35:30:7a:fa:cd:
                    a4:de:9f:9f:5e:72:d0:38:39:16:7c:2e:36:74:75:
                    51:5f:fb:4f:58:ef:24:24:50:08:ea:ce:3f:c8:c1:
                    0f:3f:fa:ce:6d:d8:31:74:b3:dd:37:9e:fb:0d:78:
                    55:55:9f:c6:98:17:29:13:56:7e:8d:69:50:fd:90:
                    49:54:c5:64:ae:45:e2:91:11:49:bd:a1:00:d2:e5:
                    7c:76:da:d8:ee:a4:0a:10:f0:b2:1b:82:11:fd:6d:
                    1e:ea:ad:fd:eb:9f:e5:de:83:25:a8:6d:41:3b:7b:
                    4f:e4:d1:1d:a1:f7:63:c0:8d:f7:66:2d:18:fb:97:
                    1f:7d:70:b3:28:07:04:1b:4d:a8:b3:37:54:61:d4:
                    2c:a4:e5:f3:28:3a:e5:99:c1:4a:97:39:31:64:dd:
                    fd:62:25:04:f8:7b:ab:94:3c:37:6a:0e:eb:30:16:
                    64:73:34:15:7f:99:5a:a4:e0:2b:a1:4b:fb:33:fd:
                    3e:b5:74:7c:ff:51:e6:b6:08:f8:a7:ee:0f:7e:d8:
                    07:e2:58:52:cf:33:9e:74:af:50:09:71:32:b5:bd:
                    db:61:30:8a:2e:97:42:f6:d2:31:d1:b9:a8:6f:fb:
                    8e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:87:EE:66:89:82:04:6A:0C:B5:2E:2A:28:BB:89:2C:12:37:80:E2
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VYfuZomCBGoMtS4qKLuJLBI3gOI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:da:c9:14:e7:d9:9d:ab:93:58:27:44:6b:da:ce:d9:6d:be:
         4c:5e:f6:9d:fb:7c:ff:8e:4c:68:20:2d:fa:fd:74:cf:b3:b2:
         e5:a9:f1:a6:94:a6:d7:0e:c1:39:bd:e3:1f:07:50:d7:36:43:
         b2:e7:7b:23:68:b0:85:01:d1:ad:cd:a2:65:f0:91:97:dd:97:
         8e:b3:ae:0d:7a:14:3d:ec:48:d3:36:34:a2:16:67:f7:7c:51:
         a7:f1:2d:48:13:88:a5:e6:98:05:0a:26:b8:b6:9f:05:51:a1:
         eb:4c:07:a8:30:11:10:cf:b8:30:f3:44:31:44:83:31:d6:eb:
         c9:62:85:bf:64:03:5d:fc:37:0a:a2:79:4a:61:c1:b4:6e:07:
         88:f0:04:f7:42:c0:3b:8f:e2:ee:e5:c6:9b:c2:f4:82:5f:a5:
         fa:1d:1b:11:47:00:fe:55:43:e7:e6:e3:16:06:4c:52:fe:7f:
         74:89:7f:66:cf:03:45:53:76:f2:f8:96:35:64:85:ff:e6:af:
         9f:a2:47:87:2f:9a:2a:d1:9d:0e:19:0d:57:76:d1:75:6b:26:
         49:8f:be:31:d1:c6:88:47:fb:73:48:48:35:a4:e5:24:a8:bf:
         0c:a3:90:7a:c8:d5:ff:87:72:48:e2:89:b9:f6:b0:cd:0d:fe:
         31:f0:ad:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----