Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_KH1942C5PIErBB9BRYfSpoUqCA.roa
File:                     _KH1942C5PIErBB9BRYfSpoUqCA.roa (raw, json)
Hash identifier:          r+/nygh4FU35mhfzRkKK95K9H66MSgk/T34YvECwlOk=
Subject key identifier:   FC:A1:F5:F7:8D:82:E4:F2:04:AC:10:7D:05:16:1F:4A:9A:14:A8:20
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C4C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_KH1942C5PIErBB9BRYfSpoUqCA.roa
Signing time:             Wed 29 Sep 2021 02:47:34 +0000
ROA not before:           Wed 29 Sep 2021 02:47:34 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        106.1.16.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7244 (0x1c4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:34 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=FCA1F5F78D82E4F204AC107D05161F4A9A14A820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:05:3e:27:07:90:1f:6b:b1:1b:66:94:18:d5:
                    21:28:97:18:9f:9c:77:0c:ff:51:e3:e9:6a:b1:5c:
                    3d:9c:93:ca:91:79:4c:6a:b6:5a:36:2e:67:98:f4:
                    90:5c:be:da:1a:73:64:c3:40:13:3d:a9:6c:96:17:
                    fa:c1:c7:36:ac:f0:2c:5a:f9:a6:f2:df:68:bf:db:
                    74:97:26:ed:4b:e3:1a:b9:28:24:f6:21:20:17:87:
                    54:db:17:6d:6f:06:18:c7:41:84:3a:3d:6e:fb:68:
                    1c:06:41:27:fc:94:a3:6d:6b:cd:5f:c0:19:d7:e8:
                    4b:9a:60:ad:22:13:6b:1a:05:89:c9:7b:c8:70:bd:
                    e6:77:77:ed:b4:1a:77:2d:6c:61:a8:40:27:f5:41:
                    19:81:36:cf:3d:96:a8:a9:10:7b:74:35:d5:a8:34:
                    5e:89:fc:c4:d9:da:b9:85:14:90:53:a7:5b:21:a1:
                    8e:65:03:b5:51:93:5c:9e:02:c9:cf:32:f7:75:4a:
                    24:cd:78:31:66:bc:4d:c3:6c:56:79:2c:fa:48:52:
                    82:f2:89:64:62:0d:82:bc:9f:0a:57:e5:2f:3f:26:
                    99:0f:a6:20:95:27:a7:0c:61:63:a3:ae:12:82:6f:
                    4e:2b:a7:9c:f4:0d:e9:76:4f:63:51:fc:36:12:a0:
                    10:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A1:F5:F7:8D:82:E4:F2:04:AC:10:7D:05:16:1F:4A:9A:14:A8:20
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_KH1942C5PIErBB9BRYfSpoUqCA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:7e:4b:d6:42:d3:4f:28:2e:9b:75:6f:80:1f:aa:ed:7d:94:
         1a:80:8e:79:a2:49:87:4a:af:4a:b5:5d:9b:30:35:aa:b5:1e:
         49:5b:d3:d8:7e:dd:f3:f8:8a:02:49:b2:58:5b:77:f8:5a:bf:
         17:04:99:08:72:9a:5c:bc:19:1c:55:a4:d4:8b:b8:f8:82:88:
         32:c0:4e:b0:38:68:ea:da:0c:64:ac:34:2a:24:35:0b:6d:85:
         e2:a4:e6:f8:e1:49:3e:75:3f:cd:d2:6d:22:5f:e7:ea:88:a8:
         1a:78:19:cb:e1:25:d9:9c:be:64:18:29:6a:99:5b:40:18:e4:
         ff:bb:16:6a:a1:58:67:a0:cc:c1:71:36:ad:07:53:b0:41:77:
         fc:06:a5:37:a7:2f:a1:77:7e:25:23:8b:63:4b:5a:84:c4:8c:
         54:d4:1b:69:b7:b5:70:7a:54:91:93:d9:d6:44:b9:95:23:3d:
         14:5e:48:bb:32:f0:15:0c:5c:a7:1f:f3:9c:fa:22:5b:47:7b:
         39:eb:3a:af:04:64:61:88:1d:85:b3:e1:65:05:d8:13:06:0b:
         1e:4f:fd:a2:2c:21:dc:b7:3a:97:99:a0:bd:fb:7c:10:3e:3c:
         30:d8:57:e3:89:c7:b4:07:5c:a0:80:e1:15:05:bf:1f:5c:21:
         a7:cf:e0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----