Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bw-bxSqsJHP0zxnI1lKJvj87-Dw.roa
File:                     bw-bxSqsJHP0zxnI1lKJvj87-Dw.roa (raw, json)
Hash identifier:          ctoyxAE4wExUD1/CDdNR6x6YcKXJfSTlW2Tu1Z1R+Q0=
Subject key identifier:   6F:0F:9B:C5:2A:AC:24:73:F4:CF:19:C8:D6:52:89:BE:3F:3B:F8:3C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1CEE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bw-bxSqsJHP0zxnI1lKJvj87-Dw.roa
Signing time:             Wed 29 Sep 2021 02:48:24 +0000
ROA not before:           Wed 29 Sep 2021 02:48:24 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        211.76.124.0/25 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7406 (0x1cee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:24 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=6F0F9BC52AAC2473F4CF19C8D65289BE3F3BF83C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b7:3f:b9:f8:ee:45:d6:cd:3f:59:67:40:bb:
                    2b:81:9e:6d:12:1e:bd:3c:98:67:e0:11:56:8d:b2:
                    3b:90:49:36:c3:6f:46:e8:1a:71:6b:89:0f:07:85:
                    36:6a:1e:41:b0:e7:6a:80:80:c9:d4:67:95:bf:4d:
                    c4:d1:bd:ba:46:ac:be:6e:c7:df:ae:6e:85:31:42:
                    44:c9:e8:01:2b:d3:a2:8e:de:56:44:41:fc:dd:9a:
                    57:9f:84:38:94:45:0c:29:22:c9:79:47:65:72:40:
                    ea:6c:77:26:cf:d4:4a:96:ef:c8:ab:a3:51:ec:45:
                    ff:44:85:c3:05:cd:3b:3b:04:22:4b:16:a2:5a:06:
                    25:d4:f3:34:d0:14:9b:4e:54:58:3c:0c:68:f3:1e:
                    b3:ed:ef:49:dd:c5:b7:f5:a0:30:5b:52:8b:34:1d:
                    04:ec:90:81:31:ab:18:31:43:3d:e1:c5:bd:cb:45:
                    7f:39:45:37:2e:35:cc:44:14:76:35:83:69:75:fd:
                    18:13:21:bd:82:41:41:f4:58:c0:c6:9f:14:f6:e3:
                    c8:fb:91:b7:29:87:9c:e3:5d:64:73:43:02:a4:82:
                    b6:10:23:4d:67:f3:7b:50:38:ea:b8:9f:36:cf:84:
                    f9:ad:a3:ed:bc:83:62:6c:1a:ae:f8:18:cd:b9:ba:
                    bc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0F:9B:C5:2A:AC:24:73:F4:CF:19:C8:D6:52:89:BE:3F:3B:F8:3C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bw-bxSqsJHP0zxnI1lKJvj87-Dw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.124.0/25

    Signature Algorithm: sha256WithRSAEncryption
         ba:dc:e7:ca:1a:64:c5:4b:b3:51:d1:2a:2e:a2:0a:fd:a0:fb:
         93:30:ee:eb:6a:b3:bf:81:2f:01:20:ec:6c:6e:11:b7:0f:7b:
         6f:04:a7:18:9d:ee:74:6e:69:c0:08:09:e4:0d:8c:bf:0b:5c:
         59:f9:e8:57:70:11:87:85:de:5f:93:a3:70:11:74:35:78:27:
         f4:c4:87:21:42:a0:e8:1e:84:9a:0a:0a:cf:b9:9a:af:ae:5f:
         fd:a4:dc:c5:8c:f9:66:ad:cc:5a:55:6e:81:cf:88:2e:1e:ab:
         5b:b9:a4:49:b0:88:4c:55:0f:30:c8:0c:2b:18:83:57:9a:53:
         1b:0f:0e:b9:bc:17:45:01:93:a4:ef:7c:00:3c:0a:c1:55:b8:
         4a:21:58:77:24:00:72:12:32:40:59:d5:cb:2e:b2:b5:3e:24:
         39:d7:29:61:24:39:07:9b:fe:ec:fa:12:06:6d:96:e4:a0:96:
         d6:10:40:54:e8:de:7e:00:8b:8c:31:ce:01:f1:a5:05:39:27:
         f1:e4:d3:f2:40:35:5b:6d:b8:d8:0b:02:8a:5e:0c:b3:83:7b:
         ae:53:cb:e5:af:da:a7:8b:8a:5e:0c:6b:e1:47:52:73:7f:f6:
         8d:11:3c:bb:c9:3c:cd:61:36:90:b9:fe:24:ae:4d:9b:3f:f0:
         79:b2:3d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----