Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZzGvoARhFuxeMJtLTYMXsdjFsYA.roa
File:                     ZzGvoARhFuxeMJtLTYMXsdjFsYA.roa (raw, json)
Hash identifier:          XUuO4Ls3VU7LWyEaKbtIA23c3MkOL9OPP3for2WfBQ8=
Subject key identifier:   67:31:AF:A0:04:61:16:EC:5E:30:9B:4B:4D:83:17:B1:D8:C5:B1:80
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1CD9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZzGvoARhFuxeMJtLTYMXsdjFsYA.roa
Signing time:             Wed 29 Sep 2021 02:48:18 +0000
ROA not before:           Wed 29 Sep 2021 02:48:18 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.193.132.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7385 (0x1cd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:18 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=6731AFA0046116EC5E309B4B4D8317B1D8C5B180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0b:fc:3c:7c:81:7b:d5:96:2c:9f:f6:f4:98:
                    a4:39:c8:74:a8:21:9c:ac:61:e4:39:0d:f6:c9:dd:
                    6d:2c:e4:9f:30:72:07:19:92:3a:61:16:c4:dc:9c:
                    2e:87:ff:ec:5e:65:a5:cf:ef:4e:47:f2:15:65:43:
                    36:9c:6c:29:ea:63:62:63:d4:85:eb:16:82:df:2d:
                    9d:58:45:ce:e8:da:26:1b:06:de:45:68:18:0d:f0:
                    da:2d:11:9c:43:c6:42:f1:f2:00:89:2b:61:41:ce:
                    43:85:f1:88:88:8f:69:84:ae:75:6f:98:1b:20:9c:
                    ae:35:0d:18:7e:50:c5:50:08:be:80:7e:be:9c:e8:
                    60:85:de:4a:ea:dc:58:40:82:a8:b0:f7:5a:84:1c:
                    08:bf:3f:14:ad:99:2b:f8:df:41:06:3c:b8:91:77:
                    99:e9:0d:e5:69:23:b3:8f:ad:8f:ab:54:de:21:9f:
                    4d:e9:05:ab:e3:1d:f8:66:65:d9:03:79:1f:2f:44:
                    e7:cb:66:76:ca:3e:49:d4:e5:c4:f3:b6:80:dc:6a:
                    54:f1:7b:33:83:61:9e:5a:0b:c4:a5:bf:0c:24:48:
                    e9:12:13:66:a3:67:28:83:e2:0f:ef:f4:04:ed:17:
                    67:60:d0:63:d5:a8:1b:9f:86:34:91:bd:b3:55:2e:
                    29:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:31:AF:A0:04:61:16:EC:5E:30:9B:4B:4D:83:17:B1:D8:C5:B1:80
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZzGvoARhFuxeMJtLTYMXsdjFsYA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:96:38:bb:f6:95:a8:5b:be:2b:dc:06:78:55:00:bc:46:59:
         cc:9e:81:df:a4:b9:f2:b4:bd:30:07:ba:a8:69:97:61:27:81:
         a2:ff:63:93:6a:d0:33:df:3f:d0:2e:41:26:eb:20:1e:1f:80:
         db:e8:f4:0b:ef:3a:40:4c:af:28:e0:7c:93:27:a4:71:ac:35:
         95:d9:17:3c:0a:e0:59:29:e9:26:e3:35:d5:ac:f2:2d:9c:c3:
         ea:24:17:da:2a:34:01:b4:d0:4c:dd:33:91:2f:b5:c2:6a:a9:
         e3:dd:6e:65:f8:56:aa:8d:08:39:ae:d0:f4:b5:22:a2:34:37:
         cb:80:0d:94:27:5a:b1:74:e4:b2:7b:57:7b:e7:f1:a0:aa:35:
         cb:13:55:e1:33:13:0d:7a:fe:a3:d3:64:6c:71:36:df:b7:5f:
         05:20:e4:4d:ab:2c:d0:11:7c:3e:39:43:a9:a2:48:b1:46:ba:
         ba:e7:8b:60:4b:e4:7c:4c:6a:a6:47:56:cf:15:99:30:3e:f8:
         16:b9:b7:c3:2b:ba:87:d7:dd:a6:83:9e:71:d2:8a:26:a9:e9:
         76:31:9c:62:14:2e:83:ba:34:c1:52:59:5a:3e:5a:07:28:3d:
         28:e6:a2:f5:95:30:40:b7:aa:21:8b:29:8e:ce:85:77:8a:fa:
         e5:5d:df:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----