Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Vq2oRVwmKhkryLx6FNfWbnvBeGE.roa
File:                     Vq2oRVwmKhkryLx6FNfWbnvBeGE.roa (raw, json)
Hash identifier:          GVqSfLq1hdEnsEc4l3o5gzJFAvtnN77xfueh7oOanqc=
Subject key identifier:   56:AD:A8:45:5C:26:2A:19:2B:C8:BC:7A:14:D7:D6:6E:7B:C1:78:61
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       16C9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Vq2oRVwmKhkryLx6FNfWbnvBeGE.roa
Signing time:             Sun 07 Feb 2021 12:14:20 +0000
ROA not before:           Sun 07 Feb 2021 12:14:20 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.108.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5833 (0x16c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:14:20 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=56ADA8455C262A192BC8BC7A14D7D66E7BC17861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1e:36:71:83:54:94:70:26:77:1c:00:09:fa:
                    b0:41:08:0d:1a:eb:c6:68:37:f1:e4:41:88:fd:ef:
                    53:b0:ac:72:12:10:20:f6:88:b3:64:53:53:27:9b:
                    d6:26:30:c5:24:bf:72:26:71:cc:79:95:fe:fb:3a:
                    89:3b:fa:03:f6:88:98:28:48:79:df:ed:e2:b8:ff:
                    77:4a:6f:73:31:2a:c0:a8:13:c2:4c:cb:1f:47:9a:
                    af:b6:b9:04:f2:fd:67:f7:cb:74:a8:38:0a:a5:b6:
                    21:b4:40:f5:0a:47:a7:7e:01:64:27:6d:c5:62:54:
                    61:25:ca:0d:a9:17:6d:9e:9a:0a:bc:39:cf:ce:6d:
                    92:0a:33:14:be:d7:c5:c0:19:bf:e8:f6:e2:78:20:
                    5f:22:23:7b:ad:18:d5:4f:b2:fc:72:07:98:06:ce:
                    cf:d1:a6:dc:d4:9a:c8:cb:37:0b:2d:f2:48:cc:46:
                    47:a3:76:b1:bc:14:bc:22:a5:f1:cd:2d:0e:5b:e4:
                    e9:3c:f6:63:35:12:3b:cc:5b:3b:64:c4:58:d0:05:
                    da:d8:69:d0:3e:62:92:3e:72:c0:6d:81:40:c7:1f:
                    15:36:8d:68:d8:3e:22:a2:85:93:31:58:47:0d:6e:
                    bc:09:21:c4:98:2e:ca:c0:37:af:2f:da:ef:c7:45:
                    5a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AD:A8:45:5C:26:2A:19:2B:C8:BC:7A:14:D7:D6:6E:7B:C1:78:61
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Vq2oRVwmKhkryLx6FNfWbnvBeGE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:4a:58:77:d7:ad:76:1a:fe:62:69:46:89:64:11:69:f7:0e:
         ad:6f:30:d1:8d:5b:45:0b:59:98:57:1c:03:f9:3e:64:c3:fa:
         ed:fd:07:b3:de:d9:8e:31:8c:e2:34:a4:03:2d:e0:d8:34:0e:
         f7:24:d1:5a:b9:46:99:18:09:a9:40:10:91:9b:2c:ab:66:47:
         3c:45:4f:b3:cd:d9:81:4b:4a:4f:2c:84:75:f3:76:2c:f8:a1:
         c2:a4:3c:a1:fc:c2:7f:b5:28:c3:4d:1b:e3:a8:3b:57:0c:fe:
         91:f2:1c:48:33:08:3c:48:4f:0e:b7:c7:33:ea:21:78:63:c9:
         ff:b2:db:66:2b:20:0b:82:8a:68:bb:f8:a2:af:38:d9:c0:6e:
         35:d7:a8:69:a5:04:e5:66:25:37:4e:61:cc:3d:5f:f4:20:e0:
         0e:ae:15:9f:06:45:26:99:a3:2a:a1:32:00:9a:b4:6f:02:43:
         a4:a0:da:58:5c:f8:9f:7c:88:47:3a:5d:d6:0a:c4:2f:ae:5e:
         bb:a9:2c:2d:17:eb:8c:26:14:73:b6:86:df:c7:9c:b7:bb:ee:
         eb:f4:a6:32:b2:62:ef:75:62:f3:df:36:95:44:7b:bf:39:d0:
         58:8e:d2:d6:28:56:45:dd:38:3b:c6:05:8c:17:1d:ed:f4:52:
         9c:21:07:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----