Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XbbkIgnDfmgdU-K7tmLHtQAE98I.roa
File:                     XbbkIgnDfmgdU-K7tmLHtQAE98I.roa (raw, json)
Hash identifier:          rOF2TZwKe04+9MkYdakc49wt4guBPW219YbAIOlLcC4=
Subject key identifier:   5D:B6:E4:22:09:C3:7E:68:1D:53:E2:BB:B6:62:C7:B5:00:04:F7:C2
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       18B1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XbbkIgnDfmgdU-K7tmLHtQAE98I.roa
Signing time:             Sun 07 Feb 2021 12:52:45 +0000
ROA not before:           Sun 07 Feb 2021 12:52:45 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        118.232.192.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6321 (0x18b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:52:45 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5DB6E42209C37E681D53E2BBB662C7B50004F7C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:80:ee:b1:67:a1:3f:a0:f0:87:40:cc:16:d3:
                    5d:43:b3:a4:f5:e4:4a:f2:60:3c:5c:32:07:aa:25:
                    a5:82:e6:f7:f7:a9:ef:f4:73:3b:68:9f:12:b8:f6:
                    ef:1b:20:52:e1:bf:aa:8f:11:d8:00:a3:c8:8c:c0:
                    35:72:a2:c0:6c:27:38:30:29:a5:a2:ac:db:be:85:
                    7a:c1:58:cc:b7:57:c8:85:ce:b7:53:b9:6b:1f:d7:
                    23:6b:6b:15:ba:a1:b5:e3:0c:14:7f:e3:e5:f7:4f:
                    e8:f9:0e:89:3a:ec:ed:6c:6d:ac:0d:94:c1:ef:e9:
                    8a:be:ca:06:9c:ed:7b:61:5e:00:44:cb:29:7a:e1:
                    c4:ee:2c:35:50:c0:1c:53:54:95:4d:87:b6:a8:00:
                    19:bf:74:04:ad:d7:e5:1c:bb:3c:ca:5d:47:fc:64:
                    1e:d9:90:c0:1e:f5:e6:f1:a1:0c:81:a9:b5:08:d7:
                    0a:3f:f4:b1:2a:50:16:43:69:98:1c:ae:88:bb:62:
                    47:0b:04:2e:2c:9f:05:da:3e:db:e1:dd:06:31:49:
                    89:a5:93:3a:d5:8f:0b:82:e5:bf:40:32:64:b7:ba:
                    2a:0e:1a:7d:e5:1c:f3:bc:66:9f:7a:ed:d8:4e:3b:
                    b2:4b:06:7d:ac:6f:64:ba:db:b3:2a:53:2e:4a:e9:
                    9b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B6:E4:22:09:C3:7E:68:1D:53:E2:BB:B6:62:C7:B5:00:04:F7:C2
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XbbkIgnDfmgdU-K7tmLHtQAE98I.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4f:14:95:2b:c6:a3:e4:0d:68:98:0c:ae:91:4d:b3:ff:ac:6b:
         20:ff:59:cd:3f:7f:05:3a:a5:54:69:46:9f:fb:35:23:de:c7:
         4c:1d:4a:0a:b7:c6:32:f3:6d:4d:e2:28:31:ed:73:ee:d9:46:
         20:9b:02:77:2b:b9:5d:d3:db:61:68:49:49:be:63:94:00:87:
         ae:63:56:a2:92:2d:86:e1:67:3f:46:44:62:b0:8f:b0:de:4e:
         78:1e:15:89:2c:0d:8a:37:95:3e:51:21:fe:22:1c:07:8d:03:
         2f:6d:3f:28:a4:a2:2a:ee:b3:78:1b:49:a5:1a:04:af:2e:1c:
         5d:e6:85:79:d6:a7:42:e7:f3:c6:51:8b:eb:62:4f:cb:50:72:
         09:36:97:f4:25:57:ab:1b:a7:02:5c:63:b4:d6:89:af:b6:fe:
         a9:b3:e0:8d:48:d9:9c:ba:6d:c4:3b:a6:1c:2a:24:27:f6:9c:
         99:25:1c:73:5c:2b:b0:18:28:e1:f2:be:03:a4:25:58:d4:1e:
         b2:5b:60:c2:40:16:2c:5f:c9:20:b9:ff:6d:36:92:44:ca:9e:
         41:65:5e:6b:84:a4:31:a7:1c:de:55:04:1e:86:fc:1c:0e:76:
         0a:fb:f6:7b:74:1a:63:e7:9e:54:9b:cd:86:2f:ef:fd:2a:4a:
         7d:ea:e0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----