Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XIDRe-lySAFRO-pjloQQVRWUUe8.roa
File:                     XIDRe-lySAFRO-pjloQQVRWUUe8.roa (raw, json)
Hash identifier:          aLTib6HZTMRyCeO9TFN2kzZNeEYApLWbR933r9X1RAA=
Subject key identifier:   5C:80:D1:7B:E9:72:48:01:51:3B:EA:63:96:84:10:55:15:94:51:EF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0CF6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XIDRe-lySAFRO-pjloQQVRWUUe8.roa
Signing time:             Tue 29 Sep 2020 09:54:00 +0000
ROA not before:           Tue 29 Sep 2020 09:54:00 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.232.80.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3318 (0xcf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:00 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5C80D17BE9724801513BEA6396841055159451EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2c:1d:f5:6d:ac:cc:36:e4:db:cc:69:47:2f:
                    9c:6d:84:62:27:e5:22:ef:9c:00:45:b3:c5:8e:1e:
                    f1:4b:84:2e:3c:b7:59:2a:6d:57:d7:a9:78:b5:d4:
                    05:16:a8:ef:b4:07:22:3d:47:44:6f:9d:73:d3:29:
                    f7:26:dd:36:b3:55:48:4f:e4:cb:3f:ce:e0:17:2a:
                    9f:0b:4c:ac:c4:3d:7c:80:08:05:d7:58:40:68:4b:
                    18:b8:95:07:b0:45:f0:91:ef:4a:7c:27:66:27:67:
                    19:00:8d:1e:05:f7:df:9d:90:b6:54:f3:7c:7b:5e:
                    e5:d7:80:b5:c1:54:d8:9b:0e:a2:c1:d3:3a:e0:3d:
                    71:50:8b:ec:fb:91:da:88:31:72:5e:f5:d3:0b:5b:
                    1e:1d:0c:96:04:c0:65:46:9d:39:e2:b2:93:a1:1b:
                    3d:a2:10:9c:ef:af:fb:f6:59:e0:12:14:8f:a1:00:
                    ac:49:ab:19:30:92:94:8e:69:9f:15:5d:7a:c0:8f:
                    70:ed:ce:da:7f:b5:85:d1:66:cc:04:b0:0a:5e:b4:
                    9a:af:24:31:c6:da:8f:75:ab:3e:f3:1a:ea:38:c1:
                    ac:07:2c:aa:92:1f:15:45:67:8c:0b:48:19:b4:0e:
                    b9:68:63:b7:a2:51:1d:d1:8a:a2:b3:fe:73:e8:6a:
                    ff:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:80:D1:7B:E9:72:48:01:51:3B:EA:63:96:84:10:55:15:94:51:EF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XIDRe-lySAFRO-pjloQQVRWUUe8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0d:f7:6e:49:6e:d7:89:71:93:16:27:b7:50:ca:46:da:0a:cd:
         70:bc:c2:ba:6f:69:6a:43:86:a4:ac:80:40:4c:94:54:e7:83:
         10:43:c5:7f:4b:af:3d:ea:26:e9:f1:0f:9f:b5:e6:4e:78:4f:
         1f:84:54:05:72:f1:fc:bf:70:46:4a:6d:8e:4f:2b:ae:73:7f:
         4f:ef:66:c4:0a:bc:eb:91:32:f1:5b:17:bb:9c:73:4a:e9:f2:
         29:7f:15:d9:01:6a:0c:6a:96:d8:63:53:4c:c9:56:63:5f:8b:
         79:c5:ea:e2:4a:59:7a:69:19:24:16:d5:04:6b:a2:f7:88:75:
         44:99:4c:1c:30:af:75:30:b8:f6:b1:ae:e7:b4:19:69:1b:bc:
         6f:b1:c5:7b:02:e1:26:34:c0:bc:e8:ca:ff:e8:df:14:12:e6:
         9b:90:b3:70:1c:37:a1:29:c1:3a:cc:14:42:5a:b0:ea:74:ed:
         76:50:bb:f9:8c:69:02:3e:4c:3b:5e:67:22:28:24:12:cf:4a:
         00:d5:ca:79:81:f6:84:33:17:07:92:03:44:f3:db:61:d5:ba:
         be:4e:8b:52:c4:fd:9e:9c:7f:26:62:34:63:70:a3:81:40:e5:
         74:8d:51:e4:b1:8e:05:71:8c:43:bb:72:e5:bd:53:6a:79:ac:
         27:27:95:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----