Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_DGKs0y-hLgxAOD0oFNCgadPtSc.roa
File:                     _DGKs0y-hLgxAOD0oFNCgadPtSc.roa (raw, json)
Hash identifier:          n74wC0KVUlMFgY196g5+czZmM1FZSRYMh/iW1W7lWEY=
Subject key identifier:   FC:31:8A:B3:4C:BE:84:B8:31:00:E0:F4:A0:53:42:81:A7:4F:B5:27
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1CE7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_DGKs0y-hLgxAOD0oFNCgadPtSc.roa
Signing time:             Wed 29 Sep 2021 02:48:22 +0000
ROA not before:           Wed 29 Sep 2021 02:48:22 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.176.88.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7399 (0x1ce7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:22 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=FC318AB34CBE84B83100E0F4A0534281A74FB527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bf:b6:28:84:a0:4d:ae:7b:1f:79:fa:44:30:
                    b7:88:20:d3:67:bd:f6:4f:4e:c4:3d:94:e1:27:7e:
                    64:6c:05:4d:9d:90:69:6c:23:e4:9f:da:fe:9b:00:
                    4a:b6:aa:ca:56:98:e0:d3:98:38:3e:8f:72:9d:8a:
                    ba:b4:eb:85:7c:64:8e:50:c3:b5:ad:c9:c8:82:6b:
                    d6:8d:92:70:20:0d:59:9c:8c:1e:b3:e7:a2:65:4e:
                    32:dd:8f:53:a5:3d:3c:45:18:f4:cf:d4:27:28:98:
                    ec:41:5c:c0:88:5d:77:00:b1:ae:82:28:36:78:1f:
                    e3:83:34:fa:61:e1:07:18:c3:ac:51:26:50:20:cc:
                    32:c1:33:ec:15:0c:7b:31:17:a3:f8:8d:ee:ac:44:
                    ca:f7:37:0e:7e:df:3a:40:5a:02:d0:ae:d1:2c:0e:
                    4e:06:ea:71:2d:c0:d6:1e:49:82:2a:8d:44:b3:8c:
                    99:2e:51:c9:87:1a:e3:a9:ab:8d:6e:5c:58:93:91:
                    2c:1a:4c:7b:5b:1d:3e:b6:5c:b9:c1:05:9f:33:46:
                    4e:31:14:63:99:17:b6:32:28:83:59:e4:91:2f:c9:
                    0b:1f:67:fe:92:ff:d9:b5:61:40:49:05:57:6f:70:
                    48:78:38:c0:66:b4:9b:0d:91:e9:0c:62:97:05:22:
                    a1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:31:8A:B3:4C:BE:84:B8:31:00:E0:F4:A0:53:42:81:A7:4F:B5:27
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_DGKs0y-hLgxAOD0oFNCgadPtSc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:bd:23:4b:1f:09:16:fa:4b:aa:a5:c2:d3:48:81:c6:e5:49:
         eb:63:7b:5f:c4:c3:60:27:70:b1:0e:00:8f:3c:0c:6e:c3:6e:
         a6:a1:28:2a:ea:52:c7:ac:41:b8:26:ad:b2:96:97:70:a5:c4:
         56:00:d8:54:68:d3:83:d3:f8:35:22:8f:24:76:eb:74:85:18:
         d5:da:ba:3a:6d:b4:99:cf:8e:e6:3c:61:26:a5:16:a9:49:2f:
         ae:46:4a:01:c9:2e:a2:d9:79:01:17:a6:81:94:ba:54:3c:92:
         28:29:e2:32:c9:b6:96:fe:1b:98:96:72:34:5e:2e:53:f6:ac:
         1e:f9:68:2f:d7:db:9a:77:17:89:78:66:3f:a0:48:a7:c9:99:
         19:72:9a:ca:0c:b4:ae:56:d2:43:fd:a7:00:63:e4:54:90:63:
         f5:bc:36:12:a1:e6:65:d6:7b:68:94:37:6b:99:ab:1f:3d:0e:
         df:90:05:86:94:7a:e1:bb:87:36:11:bd:a2:bf:fb:76:62:fa:
         ec:30:7f:7c:f0:bc:fd:e5:ee:ee:02:07:53:4b:2c:11:d2:7c:
         d8:b3:6e:99:b0:9d:9d:5a:7b:c4:64:cd:12:c1:70:51:71:0d:
         c8:77:e1:bc:11:06:ad:8e:bf:6e:e3:7f:f9:87:16:48:a8:59:
         dd:eb:07:3a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHOcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ4MjJaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEZDMzE4QUIzNENCRTg0
QjgzMTAwRTBGNEEwNTM0MjgxQTc0RkI1MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzv7YohKBNrnsfefpEMLeIINNnvfZPTsQ9lOEnfmRsBU2dkGls
I+Sf2v6bAEq2qspWmODTmDg+j3Kdirq064V8ZI5Qw7WtyciCa9aNknAgDVmcjB6z
56JlTjLdj1OlPTxFGPTP1CcomOxBXMCIXXcAsa6CKDZ4H+ODNPph4QcYw6xRJlAg
zDLBM+wVDHsxF6P4je6sRMr3Nw5+3zpAWgLQrtEsDk4G6nEtwNYeSYIqjUSzjJku
UcmHGuOpq41uXFiTkSwaTHtbHT62XLnBBZ8zRk4xFGOZF7YyKINZ5JEvyQsfZ/6S
/9m1YUBJBVdvcEh4OMBmtJsNkekMYpcFIqHpAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU/DGKs0y+hLgxAOD0oFNCgadPtScwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL19ER0tzMHktaExneEFPRDBv
Rk5DZ2FkUHRTYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sFgwDQYJKoZIhvcNAQELBQADggEBALO9I0sfCRb6S6qlwtNIgcblSetje1/Ew2An
cLEOAI88DG7DbqahKCrqUsesQbgmrbKWl3ClxFYA2FRo04PT+DUijyR263SFGNXa
ujpttJnPjuY8YSalFqlJL65GSgHJLqLZeQEXpoGUulQ8kigp4jLJtpb+G5iWcjRe
LlP2rB75aC/X25p3F4l4Zj+gSKfJmRlymsoMtK5W0kP9pwBj5FSQY/W8NhKh5mXW
e2iUN2uZqx89Dt+QBYaUeuG7hzYRvaK/+3Zi+uwwf3zwvP3l7u4CB1NLLBHSfNiz
bpmwnZ1ae8RkzRLBcFFxDch34bwRBq2Ov27jf/mHFkioWd3rBzo=
-----END CERTIFICATE-----