Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_LbuoIH6vYyFrPizCkj4SfxM4j4.roa
File:                     _LbuoIH6vYyFrPizCkj4SfxM4j4.roa (raw, json)
Hash identifier:          oYYGyYjrEtiywV4Ibo8R3mJRTPplvCnACTw3TOVFLZE=
Subject key identifier:   FC:B6:EE:A0:81:FA:BD:8C:85:AC:F8:B3:0A:48:F8:49:FC:4C:E2:3E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C76
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_LbuoIH6vYyFrPizCkj4SfxM4j4.roa
Signing time:             Wed 29 Sep 2021 02:47:48 +0000
ROA not before:           Wed 29 Sep 2021 02:47:48 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        106.1.253.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7286 (0x1c76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:48 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=FCB6EEA081FABD8C85ACF8B30A48F849FC4CE23E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:41:2b:40:5c:a2:26:56:a9:dd:f0:d9:d5:5b:
                    fe:11:c9:59:50:60:7c:ee:fd:86:81:74:d4:82:ce:
                    70:b2:4e:1a:27:b2:e3:ad:03:38:d0:32:a9:4c:b5:
                    f2:67:3b:fc:03:93:e0:23:79:27:72:0f:5d:81:c5:
                    0d:62:19:3b:65:17:ab:87:09:40:1d:3d:f3:27:02:
                    de:2e:88:24:33:6c:e0:98:00:84:0d:bd:27:67:1d:
                    49:ef:8b:cd:c2:e3:17:61:60:a2:b4:b6:8f:af:71:
                    a7:8e:aa:3f:0a:c2:e4:a9:fc:f6:ed:36:2f:75:e6:
                    f9:2e:92:b7:f7:1f:0f:72:b0:43:2a:67:ac:16:8f:
                    e7:7a:de:b6:85:85:31:01:23:34:a1:85:35:43:46:
                    8e:f4:61:13:8c:b2:e3:e6:a6:f2:d5:5f:9b:92:66:
                    54:62:dd:d4:8c:f9:b4:64:e3:da:9b:6e:f3:33:95:
                    2e:d2:d5:e4:71:85:ab:87:63:3e:e5:d2:35:1b:9d:
                    88:3d:e8:48:82:4c:63:64:56:8a:13:29:55:9b:16:
                    91:ab:f1:72:f6:ca:9a:75:2b:28:03:b1:f4:b4:77:
                    1f:40:d4:21:ba:54:95:67:25:54:04:b5:cb:67:9c:
                    21:76:9c:e9:e8:45:42:23:22:50:1c:97:8b:75:4a:
                    b7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B6:EE:A0:81:FA:BD:8C:85:AC:F8:B3:0A:48:F8:49:FC:4C:E2:3E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_LbuoIH6vYyFrPizCkj4SfxM4j4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:7e:78:b3:83:15:c7:9e:ed:74:cf:57:58:f9:17:01:4f:77:
         e1:8c:59:4e:35:d5:51:9d:ba:15:69:16:23:5f:a7:81:d1:09:
         f7:85:6e:e3:b8:d6:2b:94:1e:72:e4:8f:b2:5e:87:e0:68:3b:
         85:36:66:66:21:8b:5b:8f:4e:d1:d4:a9:7d:d1:ec:35:d9:fb:
         58:a4:4a:fc:32:eb:6c:f6:cd:27:25:11:4d:9d:1d:0b:9c:54:
         1d:70:b7:ea:71:6a:2e:63:e2:59:fc:4b:64:aa:9f:8a:87:f6:
         38:4d:cb:99:cc:29:8b:e2:01:10:3d:71:66:c1:f3:d7:bc:6a:
         75:27:2e:e4:38:7c:6d:86:3e:03:a0:d6:43:3d:58:79:5c:4f:
         ed:30:19:c2:2c:35:bc:f3:a0:1b:28:c4:5f:96:a9:ad:e3:e1:
         bb:e0:72:3e:86:cb:b0:25:6f:76:fa:cf:de:b4:88:3d:6c:0f:
         b0:d1:11:14:82:f7:8c:ae:e2:c8:3b:de:01:7e:6c:5c:27:e1:
         91:10:87:2e:08:f0:57:4e:c1:6b:3d:51:0a:41:64:6f:a3:43:
         80:00:3f:54:a2:cf:be:0b:3e:91:f1:13:91:a2:f0:5d:b0:4f:
         bf:ca:93:b5:3f:10:6e:c3:88:85:5b:9b:d0:05:93:07:f9:e4:
         ff:c0:2c:71
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHHYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ3NDhaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEZDQjZFRUEwODFGQUJE
OEM4NUFDRjhCMzBBNDhGODQ5RkM0Q0UyM0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYQStAXKImVqnd8NnVW/4RyVlQYHzu/YaBdNSCznCyThonsuOt
AzjQMqlMtfJnO/wDk+AjeSdyD12BxQ1iGTtlF6uHCUAdPfMnAt4uiCQzbOCYAIQN
vSdnHUnvi83C4xdhYKK0to+vcaeOqj8KwuSp/PbtNi915vkukrf3Hw9ysEMqZ6wW
j+d63raFhTEBIzShhTVDRo70YROMsuPmpvLVX5uSZlRi3dSM+bRk49qbbvMzlS7S
1eRxhauHYz7l0jUbnYg96EiCTGNkVooTKVWbFpGr8XL2ypp1KygDsfS0dx9A1CG6
VJVnJVQEtctnnCF2nOnoRUIjIlAcl4t1SrchAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU/LbuoIH6vYyFrPizCkj4SfxM4j4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL19MYnVvSUg2dll5RnJQaXpD
a2o0U2Z4TTRqNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
Af0wDQYJKoZIhvcNAQELBQADggEBACx+eLODFcee7XTPV1j5FwFPd+GMWU411VGd
uhVpFiNfp4HRCfeFbuO41iuUHnLkj7Jeh+BoO4U2ZmYhi1uPTtHUqX3R7DXZ+1ik
Svwy62z2zSclEU2dHQucVB1wt+pxai5j4ln8S2Sqn4qH9jhNy5nMKYviARA9cWbB
89e8anUnLuQ4fG2GPgOg1kM9WHlcT+0wGcIsNbzzoBsoxF+Wqa3j4bvgcj6Gy7Al
b3b6z960iD1sD7DRERSC94yu4sg73gF+bFwn4ZEQhy4I8FdOwWs9UQpBZG+jQ4AA
P1Siz74LPpHxE5Gi8F2wT7/Kk7U/EG7DiIVbm9AFkwf55P/ALHE=
-----END CERTIFICATE-----