Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dNwrq7uuYjgaVLJ2Cj1bAtryDnU.roa
File:                     dNwrq7uuYjgaVLJ2Cj1bAtryDnU.roa (raw, json)
Hash identifier:          FgmMcnYnkJhaW2s8UU6HxSlLuzrQb9RPCSrvTFapmo8=
Subject key identifier:   74:DC:2B:AB:BB:AE:62:38:1A:54:B2:76:0A:3D:5B:02:DA:F2:0E:75
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F15
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dNwrq7uuYjgaVLJ2Cj1bAtryDnU.roa
Signing time:             Tue 29 Sep 2020 09:56:28 +0000
ROA not before:           Tue 29 Sep 2020 09:56:28 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.232.40.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3861 (0xf15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:28 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=74DC2BABBBAE62381A54B2760A3D5B02DAF20E75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d1:c1:6e:b3:f3:58:00:f8:7b:a9:95:4a:9b:
                    ee:65:64:d7:2a:85:64:da:91:25:27:a0:15:4d:4a:
                    fa:68:50:12:26:fa:01:4a:2c:18:68:12:a1:d6:a3:
                    c1:92:88:26:ea:f2:39:2d:d6:de:7b:73:ff:e5:bd:
                    2b:26:3e:b5:39:0a:85:bd:56:51:65:c5:48:91:c1:
                    88:6b:13:18:73:3b:ed:ff:f5:23:c9:26:be:d8:50:
                    7b:37:82:ec:55:23:48:c0:c3:68:13:54:9f:10:42:
                    c9:4d:ed:95:99:9a:12:0f:b1:c3:fd:74:eb:40:4e:
                    5c:d2:af:bf:4a:05:cc:71:d3:91:16:ba:18:73:5e:
                    71:c1:2e:1b:59:d5:19:7b:cc:9d:b7:ef:26:26:fd:
                    d8:50:b6:de:eb:93:34:d5:2e:bb:5a:26:0c:42:b9:
                    41:f6:22:3c:b7:ab:22:be:31:fa:52:70:85:79:62:
                    46:db:96:40:a1:30:ed:37:17:99:f1:9c:dd:0f:20:
                    24:c8:6b:c9:b1:ed:0f:8f:ab:95:85:a3:ce:28:73:
                    3d:43:ea:5d:ec:bb:ca:d5:3a:ec:13:dc:b1:d7:12:
                    fc:57:92:57:c5:ab:24:65:dc:6e:2a:db:ac:21:99:
                    91:80:ff:f1:ad:89:da:29:e9:9b:bf:e2:de:ac:d3:
                    88:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DC:2B:AB:BB:AE:62:38:1A:54:B2:76:0A:3D:5B:02:DA:F2:0E:75
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dNwrq7uuYjgaVLJ2Cj1bAtryDnU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:ec:9a:89:96:55:b4:f0:11:13:9f:63:b0:72:82:c1:6d:3d:
         3d:70:b9:af:eb:07:bf:68:6d:c6:59:14:cd:da:ef:93:05:83:
         2b:d7:fd:ca:1d:50:fb:78:02:67:70:4d:60:d1:e7:9c:b0:56:
         15:1a:03:47:a6:ff:ee:f5:b3:8e:51:67:6c:01:04:35:1b:89:
         73:e7:43:a4:8b:1c:6b:aa:cd:17:37:dc:33:ce:cc:56:63:7f:
         41:f5:db:f3:7d:3f:21:b6:1b:88:21:1a:bd:ba:57:0f:2e:3d:
         04:52:4b:c9:93:86:ac:57:68:b4:49:18:11:94:29:f6:0c:5a:
         d4:36:b2:c3:7a:b4:d3:04:68:22:d2:cc:53:c5:44:b7:92:3e:
         0d:d6:c0:77:cd:ad:9b:c7:bb:7c:89:23:7b:d9:3e:b0:3f:5c:
         5a:98:c1:d8:22:43:e8:03:73:fd:17:10:4f:be:2e:e0:56:dc:
         a5:81:53:b9:8d:99:22:38:53:d0:98:0e:5d:c0:24:de:a1:a8:
         1d:b4:b7:59:1a:84:86:3f:45:a0:62:78:83:8c:91:08:43:a4:
         9d:86:26:a9:80:ce:27:56:3a:f7:a8:4b:79:11:aa:32:32:5c:
         41:b4:90:4d:0e:8a:94:83:2b:6d:f5:81:60:1b:2c:f5:b0:20:
         af:13:be:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----