Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WbPJJjiWt_wwfR3St2nbOprGaos.roa
File:                     WbPJJjiWt_wwfR3St2nbOprGaos.roa (raw, json)
Hash identifier:          B/KL3QTbdKhCHj1kJ7X87qfvKqf8XkXceTc7PTYLv0w=
Subject key identifier:   59:B3:C9:26:38:96:B7:FC:30:7D:1D:D2:B7:69:DB:3A:9A:C6:6A:8B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1939
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WbPJJjiWt_wwfR3St2nbOprGaos.roa
Signing time:             Sun 07 Feb 2021 13:06:44 +0000
ROA not before:           Sun 07 Feb 2021 13:06:44 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.232.220.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6457 (0x1939)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 13:06:44 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=59B3C9263896B7FC307D1DD2B769DB3A9AC66A8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:34:12:b3:91:3e:ff:c5:5d:7f:83:96:0b:7d:
                    21:22:37:ed:f6:81:d0:41:91:94:77:77:51:1d:37:
                    34:20:37:00:4e:7c:20:0d:06:7f:9b:5b:c3:af:a9:
                    e9:9c:79:e3:b7:19:aa:9a:68:16:cc:bc:91:ba:57:
                    5f:96:63:d6:94:ae:5a:3e:17:96:ac:f9:2d:1e:b5:
                    dc:9a:47:18:bf:02:c8:2d:63:23:c7:19:c2:15:85:
                    b0:1c:3b:67:91:c8:d9:0f:2d:f5:c7:1b:66:d8:f1:
                    b9:90:95:4a:41:28:3c:d4:1d:0d:c6:7a:d0:84:67:
                    3e:1b:a6:4d:f5:1a:b6:4d:9a:f8:9e:8d:f7:65:7e:
                    2f:0a:b5:2f:01:93:f2:75:f0:70:2a:43:a0:54:55:
                    96:27:63:3f:b7:75:04:49:a2:8d:38:f3:ea:22:67:
                    31:3b:63:72:e8:01:7b:70:45:34:6c:3b:a2:98:87:
                    da:2d:16:89:43:71:98:f7:17:93:d9:27:84:06:04:
                    fc:cc:b1:92:c7:f2:d4:03:73:67:44:08:49:06:af:
                    48:bf:d1:17:36:d3:c5:2d:fd:5b:36:1c:6c:f4:54:
                    72:b3:3b:ce:72:57:2c:aa:e7:dd:ac:4b:66:53:3f:
                    3d:56:71:de:0e:7d:6e:3a:de:34:5a:38:dc:2c:38:
                    b0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B3:C9:26:38:96:B7:FC:30:7D:1D:D2:B7:69:DB:3A:9A:C6:6A:8B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WbPJJjiWt_wwfR3St2nbOprGaos.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:70:fa:db:79:2f:06:c9:57:33:69:eb:68:0f:e3:e0:74:9f:
         05:51:61:a0:a6:01:9e:0c:fd:c6:3c:52:cb:4f:fb:d9:e7:67:
         81:a6:29:d0:ed:b9:91:bd:f5:61:f5:7d:b3:1a:61:1a:b4:a0:
         99:b8:82:3a:e0:f1:b2:32:a3:52:cd:93:d6:fc:be:b9:ee:44:
         5a:7d:48:3e:c3:ac:e6:04:42:fc:19:fd:08:e3:4b:d7:fe:c7:
         a3:3b:9d:c3:d6:63:b6:81:8d:55:22:e6:6b:4b:c2:7f:4b:69:
         e3:58:78:47:59:aa:4a:89:9d:ce:7c:82:89:1b:81:b6:de:3c:
         3d:55:c9:2e:fe:34:59:17:83:84:df:74:5c:16:c5:3a:15:0e:
         85:eb:f9:a3:dd:bb:42:d8:40:8a:3c:1d:16:fc:86:6e:3a:41:
         d1:d4:bf:12:6f:d8:d3:4a:55:1a:f9:90:63:9f:3e:35:80:62:
         9c:9e:33:03:5c:1e:64:6a:3a:d4:dc:42:00:11:34:43:32:d3:
         4f:ca:9a:65:af:c3:a5:15:2e:2c:59:89:63:d9:65:ad:62:97:
         fc:57:59:90:9e:83:a6:44:f5:70:7e:6f:9f:13:bd:61:45:25:
         2c:89:4d:d2:e8:28:80:e1:0d:c5:07:bc:43:46:62:0c:c2:70:
         e5:29:cb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----