Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/avtUH0Via2ZUhJG8d7A1aJzfLis.roa
File:                     avtUH0Via2ZUhJG8d7A1aJzfLis.roa (raw, json)
Hash identifier:          brmwNnuwPlIf7Bvm3DdK2Wqb3s1rbV0fHaHcX9lMzcg=
Subject key identifier:   6A:FB:54:1F:45:62:6B:66:54:84:91:BC:77:B0:35:68:9C:DF:2E:2B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B14
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/avtUH0Via2ZUhJG8d7A1aJzfLis.roa
Signing time:             Wed 29 Sep 2021 02:46:07 +0000
ROA not before:           Wed 29 Sep 2021 02:46:07 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.176.96.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6932 (0x1b14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:07 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=6AFB541F45626B66548491BC77B035689CDF2E2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cb:62:f6:cc:ec:1f:ad:30:bd:bc:b1:10:0d:
                    02:e9:0e:ac:89:eb:cc:4d:06:8b:4f:d9:aa:1d:f5:
                    88:cd:a8:52:aa:e6:77:c9:b3:2a:ef:7d:a6:0e:ba:
                    1c:69:37:94:51:84:ce:39:30:fe:90:b2:1b:55:c8:
                    d3:8c:60:15:ec:e9:cf:7e:8f:41:f1:5e:f9:d3:56:
                    c4:f2:86:ec:5e:5d:72:3e:57:49:b8:81:0f:82:16:
                    5e:e1:71:22:cf:5a:4a:87:e3:d9:3b:e4:f2:02:97:
                    ed:cd:58:ee:81:88:27:07:73:82:e2:1c:76:de:ee:
                    09:b4:9d:94:6b:ac:b5:c2:eb:8f:ff:8b:e5:1e:9b:
                    30:6c:e4:8b:d7:f0:9d:63:c1:70:ff:7f:58:2a:70:
                    09:9b:00:dd:b3:39:88:3a:97:eb:3b:bf:ce:34:67:
                    11:1c:37:0b:17:9e:1a:c1:5c:88:b5:82:8b:4b:6b:
                    16:da:54:1d:41:1c:c9:27:40:09:96:5c:a6:bf:bb:
                    7e:a7:80:39:ae:6f:0c:4f:70:65:32:3c:53:fc:9f:
                    9e:17:fc:e0:63:c0:1e:f1:6a:2f:1a:3d:aa:6c:69:
                    dc:31:80:b7:03:54:ca:a7:67:2e:8b:5b:5c:36:ac:
                    ab:79:60:13:a2:d1:9f:08:a5:53:1f:02:38:e4:01:
                    cb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:FB:54:1F:45:62:6B:66:54:84:91:BC:77:B0:35:68:9C:DF:2E:2B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/avtUH0Via2ZUhJG8d7A1aJzfLis.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         75:e5:39:29:82:eb:60:10:49:c5:db:40:01:64:1d:f9:fa:a5:
         a1:52:a8:7e:e8:41:d4:04:93:2d:26:9c:60:22:eb:0b:49:0a:
         28:a3:68:12:f4:4d:67:bd:dd:5d:c8:f6:fc:a7:c6:01:03:63:
         26:f6:94:f7:2b:de:17:0c:22:fd:3a:37:73:34:0f:a5:74:5b:
         75:c2:c4:28:84:ca:c9:bd:ca:a9:98:6e:9f:38:67:b3:e6:44:
         d7:7d:0c:19:5c:98:3c:77:13:a8:4c:b6:eb:e0:8d:48:9f:ae:
         d1:b4:09:b4:f2:9f:12:99:71:fc:b5:93:d8:82:8f:33:57:18:
         da:f1:2b:05:b4:91:ae:a2:e9:e7:41:bf:d8:04:ad:78:84:59:
         ca:15:f1:7f:7c:af:4f:60:fa:f6:8c:99:15:b4:c9:94:a7:92:
         99:d1:6e:23:f7:48:13:da:83:8d:06:60:08:4e:d9:8a:6e:a8:
         0a:8c:84:3f:17:d0:d7:1e:ca:e3:aa:ce:15:98:46:9b:6f:bc:
         16:de:15:9a:a9:d7:b3:05:0c:c9:dd:3c:5b:d9:b3:6d:86:4a:
         89:31:93:fe:ea:7b:34:1a:63:e2:4d:bc:95:d9:8b:f8:a6:40:
         c1:34:e1:2e:7c:91:f8:5a:de:07:29:18:4d:dc:d5:c0:32:66:
         6f:41:1b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----