Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_nvp6KarzFYoOLlOwvH4D5vbCFs.roa
File:                     _nvp6KarzFYoOLlOwvH4D5vbCFs.roa (raw, json)
Hash identifier:          liFVRAVLySzQuEelUBYNdlGxqFNo6qObnGzcqnFwYpQ=
Subject key identifier:   FE:7B:E9:E8:A6:AB:CC:56:28:38:B9:4E:C2:F1:F8:0F:9B:DB:08:5B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C5B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_nvp6KarzFYoOLlOwvH4D5vbCFs.roa
Signing time:             Wed 29 Sep 2021 02:47:39 +0000
ROA not before:           Wed 29 Sep 2021 02:47:39 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        118.233.244.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7259 (0x1c5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:39 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=FE7BE9E8A6ABCC562838B94EC2F1F80F9BDB085B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fb:f2:43:1a:64:39:51:98:73:79:30:a0:ed:
                    e6:a8:c0:e1:d8:9b:eb:20:3d:39:0b:91:ed:37:58:
                    61:29:62:3b:15:94:aa:b4:50:d2:0d:0f:d7:c3:9d:
                    11:ba:9f:32:f7:81:da:9d:6f:51:b4:40:d3:51:58:
                    b5:76:35:5f:ca:27:02:43:a0:aa:07:24:4b:b6:36:
                    06:0e:a9:f7:44:67:a9:24:37:e8:7b:2f:23:c0:9a:
                    40:a4:2d:c6:b0:36:1a:00:b0:07:ce:97:f2:37:a8:
                    b0:78:93:ab:91:33:f0:14:bb:15:e5:cf:9a:80:1d:
                    ea:e9:a7:c9:44:1f:68:fa:80:f1:bc:a7:bb:0c:12:
                    74:22:25:07:82:2f:e9:5f:fd:9c:23:07:6f:cd:1d:
                    61:33:bb:9f:a5:13:4f:d1:a1:61:fe:26:3a:4e:bc:
                    17:a7:85:33:18:af:ed:a2:f5:0b:db:23:01:38:35:
                    e5:1a:28:f0:bc:21:98:79:93:45:59:c9:48:41:0e:
                    89:bb:53:8d:34:cf:39:87:6e:32:d7:0c:c8:56:b0:
                    42:ee:99:26:b2:20:90:c3:fa:97:70:6a:93:74:8d:
                    53:b0:f9:9e:30:21:ca:80:fa:0c:95:27:e5:2e:04:
                    f5:27:0c:e3:5e:41:27:14:c9:c0:f0:2b:19:30:fd:
                    3d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7B:E9:E8:A6:AB:CC:56:28:38:B9:4E:C2:F1:F8:0F:9B:DB:08:5B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_nvp6KarzFYoOLlOwvH4D5vbCFs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:e4:b6:a0:9d:ce:40:81:ce:8e:b2:70:e4:b3:18:08:49:15:
         3d:73:02:50:82:94:97:38:74:ed:d6:92:dd:67:78:25:e9:47:
         62:b7:c3:3a:dc:b3:4f:3f:59:a9:03:c1:1b:0c:29:85:2e:3d:
         d5:bb:4c:2a:42:89:4f:75:41:77:e4:4d:2a:dd:d5:a9:74:d2:
         84:24:3f:a3:1b:2f:7c:7c:da:1e:8c:96:b9:33:ec:18:25:da:
         20:f3:e7:47:d1:cb:1f:6d:aa:8e:4f:e5:f7:0d:8d:ac:5f:2c:
         cb:d7:d5:75:31:ee:1f:07:c3:bc:4c:ff:2e:a0:d1:11:6f:6a:
         9e:85:bf:a3:87:e4:e5:42:0c:48:05:0a:09:4b:b5:b6:3a:c5:
         cc:46:c7:1f:07:a4:ae:b9:f1:d5:dd:e5:f2:84:6c:ca:04:0e:
         78:3f:63:77:04:06:86:c3:df:0d:81:0b:94:fe:04:d1:93:13:
         02:63:84:5c:f7:48:a6:f6:98:7e:d2:ac:de:26:b8:83:4d:0c:
         de:ca:09:ac:e3:a0:ec:2d:50:ff:37:09:0a:e4:bb:f6:f8:dd:
         ee:51:92:51:03:db:b6:ae:19:e1:67:26:26:bd:65:42:b6:10:
         99:d7:5a:29:07:e9:de:ed:52:c6:90:db:29:93:c7:91:d7:02:
         3a:ea:11:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----