Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cBzANyL9EK1-McIYYXluB7auSJc.roa
File:                     cBzANyL9EK1-McIYYXluB7auSJc.roa (raw, json)
Hash identifier:          D9LVdDB55QErr1eW7yeWqy6kgeDY76sWxolIydeA+uU=
Subject key identifier:   70:1C:C0:37:22:FD:10:AD:7E:31:C2:18:61:79:6E:07:B6:AE:48:97
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D9E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cBzANyL9EK1-McIYYXluB7auSJc.roa
Signing time:             Tue 29 Sep 2020 09:54:46 +0000
ROA not before:           Tue 29 Sep 2020 09:54:46 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        211.76.119.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3486 (0xd9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:46 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=701CC03722FD10AD7E31C21861796E07B6AE4897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cc:b4:8d:62:b6:4f:29:9a:ee:af:ad:c1:a9:
                    59:23:42:4c:80:10:78:d2:14:ae:aa:11:f6:e7:36:
                    55:59:bc:d2:17:e8:c1:41:fb:39:74:2d:2a:3c:d9:
                    a9:a4:07:2b:38:48:e1:69:0c:3e:b4:e4:dd:e3:2e:
                    65:68:18:75:14:69:c4:f0:ed:73:27:f5:ac:76:a8:
                    7c:17:0e:54:b7:ea:68:ee:47:42:2e:65:8f:22:bb:
                    bd:27:2a:e9:5b:06:df:85:63:84:48:9d:b6:95:69:
                    58:21:90:f8:bb:60:41:d5:da:47:02:30:97:a3:1c:
                    2f:46:24:20:8e:fb:bf:f6:80:44:5a:57:3f:ed:e4:
                    f9:20:8b:80:ef:c8:6d:a3:d0:7f:7f:14:40:19:ca:
                    f0:6a:e8:ca:b7:41:82:d5:9d:4d:04:57:ed:7a:0a:
                    75:ca:af:35:6e:be:3a:18:6c:d5:d5:b4:a2:cf:d1:
                    33:4d:96:2a:04:38:7f:3b:d1:7b:e4:10:94:ec:02:
                    d1:9c:3e:f2:18:60:96:4e:c9:9c:82:4f:cf:91:32:
                    4f:fd:b2:80:cd:35:fe:1e:83:bc:60:8b:b8:47:45:
                    ba:0f:61:b5:68:eb:da:3e:93:78:d2:b4:0d:bd:29:
                    da:fd:c4:13:f4:a8:d8:b6:60:0b:17:d5:4a:a1:27:
                    a0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:1C:C0:37:22:FD:10:AD:7E:31:C2:18:61:79:6E:07:B6:AE:48:97
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cBzANyL9EK1-McIYYXluB7auSJc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:d3:61:79:c9:02:69:7e:a2:33:8c:cd:7f:9c:8a:15:d4:59:
         ff:36:fc:81:68:cf:76:36:1a:cb:a8:61:d5:ce:fb:88:22:65:
         d6:77:db:3a:49:1f:c1:8a:42:45:74:e9:22:26:7b:e5:1e:65:
         71:88:03:08:49:88:13:d2:1c:83:d6:c4:b0:c0:cd:33:42:dc:
         95:05:4f:9b:95:73:de:90:fb:c7:2e:f8:2b:78:19:69:98:03:
         d1:02:95:f8:d3:09:6b:28:67:20:6f:c4:ca:a5:6e:c7:e4:bf:
         ed:e7:b5:73:7b:e7:4c:a0:40:d3:43:83:d7:7d:f0:13:5c:bf:
         26:55:3d:83:06:79:e9:bc:06:d4:42:dc:fe:eb:f0:56:ff:45:
         e0:86:88:99:5e:8d:4d:a0:c0:4e:6e:c4:d9:06:e4:4f:8b:36:
         19:f6:59:eb:91:9d:de:75:d5:5c:ce:b0:72:bd:ca:3d:a0:a7:
         68:a4:d1:19:c1:13:81:c5:9d:f4:3c:c7:ed:c9:3d:b5:22:bd:
         c3:a0:7e:2f:17:7b:bb:cd:0b:f6:8d:38:7e:50:93:f5:79:ce:
         9d:af:c6:30:82:22:7d:70:e2:34:c0:9e:65:64:6d:0b:1b:cc:
         bd:e7:f5:43:df:98:8d:63:33:77:dd:f1:4e:84:96:2f:87:3c:
         6d:56:06:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----