Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XdSG-kjhmTLlLSJ3r6nanBMT8kw.roa
File:                     XdSG-kjhmTLlLSJ3r6nanBMT8kw.roa (raw, json)
Hash identifier:          u4nn1MrBY+PAG+pN2ZMvk9ANvK63y7oeMDfUd84+U1w=
Subject key identifier:   5D:D4:86:FA:48:E1:99:32:E5:2D:22:77:AF:A9:DA:9C:13:13:F2:4C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E9A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XdSG-kjhmTLlLSJ3r6nanBMT8kw.roa
Signing time:             Tue 29 Sep 2020 09:55:56 +0000
ROA not before:           Tue 29 Sep 2020 09:55:56 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.176.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3738 (0xe9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:56 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5DD486FA48E19932E52D2277AFA9DA9C1313F24C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f7:4e:7c:98:cc:2e:7d:69:ff:49:13:12:da:
                    4b:c4:51:46:cb:13:10:3e:d4:f6:17:65:a3:f2:57:
                    8a:81:79:1e:5b:24:2e:ec:bc:a0:a7:06:bf:56:c4:
                    a6:f5:ea:40:c1:24:34:95:d8:a5:6e:93:03:08:7e:
                    14:4e:17:16:81:18:cf:e3:fe:8f:af:f9:9b:74:f4:
                    2e:0c:98:49:b6:63:fe:41:a3:80:a0:56:f4:7c:54:
                    f3:10:fd:0b:44:5a:3e:01:61:7f:18:8c:40:2c:ea:
                    d6:40:5b:aa:41:00:cf:c9:6d:09:ac:a2:5a:65:ae:
                    b2:80:fe:65:ed:c5:21:c4:3f:8b:7f:af:10:6e:64:
                    cf:ee:01:f6:fc:60:b3:15:d2:fd:36:43:6f:32:da:
                    2c:52:11:e7:21:d8:cf:d2:33:3e:44:9c:9e:03:56:
                    9b:4e:f1:c3:5d:5a:ff:8b:d6:59:46:96:b4:f7:45:
                    a8:61:3a:99:80:1b:ed:d1:da:2b:92:bc:f3:dd:ad:
                    54:74:68:a8:7d:41:43:27:97:f6:ec:7b:c4:1c:31:
                    5d:61:e6:5a:57:50:74:76:24:ab:7b:90:24:b4:94:
                    ec:55:19:d2:96:3d:57:9c:4e:f7:66:d1:33:be:ac:
                    91:c7:1a:47:8e:c0:87:62:e6:9a:35:2a:4d:53:a0:
                    19:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D4:86:FA:48:E1:99:32:E5:2D:22:77:AF:A9:DA:9C:13:13:F2:4C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XdSG-kjhmTLlLSJ3r6nanBMT8kw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1c:0e:dc:94:4a:f7:07:78:80:be:93:fa:04:d9:23:ad:b7:03:
         49:17:73:a5:8e:c3:dc:07:59:d1:2d:fa:36:8e:a4:b9:fa:78:
         1e:f0:a0:dd:cf:f6:8b:97:a6:aa:3c:a5:79:e1:bd:0b:19:2b:
         2d:c2:12:4c:42:d8:5c:b8:19:95:fd:46:a4:4d:5e:6a:08:10:
         49:56:fb:c1:f1:35:a0:c0:d5:52:fe:3f:7e:84:c6:08:cd:2e:
         5b:dd:53:8b:7e:5b:10:ce:cf:8d:5d:7a:03:77:3d:61:5f:a3:
         9a:c3:f4:96:cd:9e:54:40:ec:b5:a7:28:28:30:e6:03:f6:57:
         fc:b0:5e:a2:44:4b:49:fb:c6:1e:a0:85:3c:4f:02:e7:3f:79:
         d3:cf:64:34:10:e1:3f:ce:97:f4:0e:5d:57:e7:2d:a1:9d:3d:
         a9:72:e6:99:cf:d2:c3:81:f7:c5:96:fb:a8:8e:2d:5e:bc:de:
         ed:3f:b3:34:d8:4b:40:eb:05:c0:f5:2d:d4:90:d1:0c:04:24:
         3c:d1:00:40:0e:43:f3:c6:62:12:58:8b:c5:bd:19:e8:ae:b8:
         d4:12:5d:28:c7:12:21:27:98:c4:f3:3c:3b:a7:98:e3:c4:00:
         d2:71:0e:66:15:2c:e2:df:9d:ab:cf:7b:fa:60:e0:f4:04:e1:
         26:90:b8:e6
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDpowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU1NTZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDVERDQ4NkZBNDhFMTk5
MzJFNTJEMjI3N0FGQTlEQTlDMTMxM0YyNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJ9058mMwufWn/SRMS2kvEUUbLExA+1PYXZaPyV4qBeR5bJC7s
vKCnBr9WxKb16kDBJDSV2KVukwMIfhROFxaBGM/j/o+v+Zt09C4MmEm2Y/5Bo4Cg
VvR8VPMQ/QtEWj4BYX8YjEAs6tZAW6pBAM/JbQmsolplrrKA/mXtxSHEP4t/rxBu
ZM/uAfb8YLMV0v02Q28y2ixSEech2M/SMz5EnJ4DVptO8cNdWv+L1llGlrT3Rahh
OpmAG+3R2iuSvPPdrVR0aKh9QUMnl/bse8QcMV1h5lpXUHR2JKt7kCS0lOxVGdKW
PVecTvdm0TO+rJHHGkeOwIdi5po1Kk1ToBl/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUXdSG+kjhmTLlLSJ3r6nanBMT8kwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1hkU0cta2pobVRMbExTSjNy
Nm5hbkJNVDhrdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
sbAwDQYJKoZIhvcNAQELBQADggEBABwO3JRK9wd4gL6T+gTZI623A0kXc6WOw9wH
WdEt+jaOpLn6eB7woN3P9ouXpqo8pXnhvQsZKy3CEkxC2Fy4GZX9RqRNXmoIEElW
+8HxNaDA1VL+P36ExgjNLlvdU4t+WxDOz41degN3PWFfo5rD9JbNnlRA7LWnKCgw
5gP2V/ywXqJES0n7xh6ghTxPAuc/edPPZDQQ4T/Ol/QOXVfnLaGdPaly5pnP0sOB
98WW+6iOLV683u0/szTYS0DrBcD1LdSQ0QwEJDzRAEAOQ/PGYhJYi8W9GeiuuNQS
XSjHEiEnmMTzPDunmOPEANJxDmYVLOLfnavPe/pg4PQE4SaQuOY=
-----END CERTIFICATE-----