Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XMk4n6YNOBMORTiRCRf6JzQM1UQ.roa
File:                     XMk4n6YNOBMORTiRCRf6JzQM1UQ.roa (raw, json)
Hash identifier:          JftsyuNvBCsZBiwqlG5X+vJ817b6RC8HGPnWaVLVQv0=
Subject key identifier:   5C:C9:38:9F:A6:0D:38:13:0E:45:38:91:09:17:FA:27:34:0C:D5:44
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       16E5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XMk4n6YNOBMORTiRCRf6JzQM1UQ.roa
Signing time:             Sun 07 Feb 2021 12:15:09 +0000
ROA not before:           Sun 07 Feb 2021 12:15:09 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.232.16.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5861 (0x16e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:15:09 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5CC9389FA60D38130E4538910917FA27340CD544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4b:f7:0b:05:2a:1d:1e:25:c8:bc:79:09:0e:
                    cb:66:08:65:b0:0b:c1:99:81:e8:74:b2:7b:eb:b8:
                    de:c0:e3:06:af:f9:83:ae:c4:4a:b2:74:ed:78:96:
                    11:9e:ed:ca:ed:4d:32:df:bf:ab:67:9e:8f:9a:ef:
                    d4:05:c6:dc:b2:5f:47:a4:b8:ee:26:36:48:2d:08:
                    fa:2b:3b:7f:50:cc:03:95:7d:96:29:b3:a2:28:cc:
                    84:04:7d:93:be:8e:18:f9:f4:c6:df:04:50:e5:40:
                    aa:96:19:b3:f6:f0:3d:59:73:78:72:1e:17:08:40:
                    e3:32:5a:a7:8d:bc:48:85:50:e8:ec:a9:aa:00:fd:
                    b5:6d:77:6b:15:0a:10:fc:f2:54:b3:df:85:5b:b7:
                    17:dd:63:c2:0d:fc:b3:a9:3f:19:b4:ed:1f:dd:cd:
                    55:5e:78:6b:cd:8e:2f:9f:99:ca:22:c3:71:a6:fd:
                    a2:5d:51:98:7c:3f:2d:62:af:9d:8d:2f:af:a1:38:
                    52:6e:86:20:cd:16:40:c7:02:e8:f7:af:16:27:60:
                    d1:55:07:fe:8b:66:f5:53:c4:4d:12:0d:7e:49:15:
                    ee:7c:49:21:ad:a8:b3:02:f1:63:64:9f:12:fe:6c:
                    81:23:6d:1a:73:51:fb:c2:ec:09:e6:fe:25:14:28:
                    7a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C9:38:9F:A6:0D:38:13:0E:45:38:91:09:17:FA:27:34:0C:D5:44
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XMk4n6YNOBMORTiRCRf6JzQM1UQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         68:e9:a3:b4:59:20:28:5c:f2:f1:e3:26:ad:b1:33:5a:f2:fa:
         6e:1d:70:ba:e9:87:43:85:37:a9:31:22:d3:e7:d4:ff:a1:42:
         3b:66:d1:9e:c1:ae:fe:00:59:7f:0a:92:92:08:26:5f:df:8c:
         5a:f0:f4:6f:b5:3f:95:d1:80:76:f0:b3:70:d6:c1:fa:90:5d:
         74:d5:54:20:05:9a:77:cb:bf:d5:b6:72:53:83:a2:cf:87:7b:
         6f:30:13:7a:56:9c:06:f3:26:02:2b:fd:8b:d5:4a:2d:8c:a5:
         e9:ff:3d:3b:34:bd:af:0f:3a:0c:47:56:35:83:44:be:6e:60:
         e5:94:19:2a:89:94:17:0b:6d:97:f3:f3:1a:4b:36:6b:59:06:
         ee:c2:51:f3:e3:7a:88:f7:a1:fc:96:61:94:cf:d2:89:2d:59:
         30:34:2c:0b:6b:a5:52:79:ea:c1:f2:67:a6:7f:6b:ad:32:26:
         a1:ef:0a:5c:5a:04:f3:46:44:fd:d5:c6:f8:7a:7a:38:5f:b5:
         84:a7:df:be:86:4e:e6:2b:b7:6b:4a:49:e3:85:25:f8:49:25:
         a6:99:42:b2:d3:4e:6f:59:e4:1f:b4:c3:b4:6f:9d:73:08:41:
         27:96:19:3e:0d:b7:c8:f0:74:27:1d:73:35:82:ff:91:b0:5b:
         7a:e6:3b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----