Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dlXdDvN0xtQBAX4Tno4PjRpXTCo.roa
File:                     dlXdDvN0xtQBAX4Tno4PjRpXTCo.roa (raw, json)
Hash identifier:          xCC7uXnAV2viQJhbVX3UehvBfBVxR/sGbjB58emP0ik=
Subject key identifier:   76:55:DD:0E:F3:74:C6:D4:01:01:7E:13:9E:8E:0F:8D:1A:57:4C:2A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       174B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dlXdDvN0xtQBAX4Tno4PjRpXTCo.roa
Signing time:             Sun 07 Feb 2021 12:18:08 +0000
ROA not before:           Sun 07 Feb 2021 12:18:08 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.16.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5963 (0x174b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:18:08 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=7655DD0EF374C6D401017E139E8E0F8D1A574C2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f0:68:e7:e8:7b:ec:06:fe:6b:d0:72:63:f3:
                    08:4b:c1:0f:84:e9:f0:44:62:7c:bb:6e:b3:4e:18:
                    13:d8:dd:c6:26:cc:e7:38:43:85:c3:4c:f4:9a:83:
                    9f:a7:3e:e6:fc:5f:d2:8b:89:03:26:f3:c5:93:34:
                    af:5b:dd:3f:bd:ac:9d:2f:b6:de:5d:70:a9:fc:82:
                    63:c2:7f:ba:8f:b3:f3:ee:ac:08:d9:07:42:3d:4f:
                    b4:6a:b7:7b:ef:b1:61:7a:86:d4:42:a3:4b:1c:0c:
                    12:59:84:0d:f7:bf:65:48:c2:30:7c:c1:59:b9:49:
                    7c:26:bd:31:bd:0a:dc:3b:34:ff:3c:24:f4:39:61:
                    59:b0:a0:2a:65:bf:04:94:86:40:2c:2d:77:d6:77:
                    b9:98:cf:2c:79:7e:bd:28:b6:fb:18:af:5a:df:a7:
                    fe:3c:99:d8:53:1f:3b:f6:59:62:2d:61:74:0d:75:
                    fc:16:42:f9:5f:5d:bf:44:ed:28:90:5c:6c:21:4c:
                    f2:de:43:01:f4:cc:dc:91:39:de:99:44:b3:cd:26:
                    06:fd:4a:ca:69:b9:6a:71:94:33:5c:bd:17:5b:eb:
                    ef:98:a1:d8:65:99:c6:80:72:e5:d4:a0:f8:ca:06:
                    97:ac:d2:a6:28:b8:3a:49:f8:99:08:62:63:4e:13:
                    6d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:55:DD:0E:F3:74:C6:D4:01:01:7E:13:9E:8E:0F:8D:1A:57:4C:2A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dlXdDvN0xtQBAX4Tno4PjRpXTCo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:6f:90:ca:b9:4f:da:50:01:fc:07:16:dd:b4:ff:e9:54:b1:
         73:32:29:46:06:d7:e7:b2:94:07:2c:d3:92:66:6a:ef:c1:ba:
         28:9d:03:a2:d8:05:95:34:92:97:d7:48:c3:69:1f:81:42:c8:
         dc:d1:16:2c:12:a4:21:a7:5f:4a:97:0f:1a:b2:8b:0f:d2:f0:
         81:6e:e5:5b:4b:ff:3b:f3:7d:0a:c7:22:0f:cc:d9:17:8e:78:
         00:59:e6:66:d8:67:8e:7d:9c:e0:cd:a2:69:36:ae:6c:4e:22:
         21:7c:71:db:8f:3b:f4:1b:0d:1e:8b:e6:15:33:7b:59:e5:ec:
         ff:22:3c:5b:41:43:36:eb:4f:4b:24:56:7c:25:e4:4a:36:e0:
         e9:39:37:77:ae:30:2e:b1:cb:3d:f1:0f:49:01:f3:c8:75:94:
         6c:dd:24:67:f2:2c:3e:32:fe:96:1b:53:dd:16:95:e6:3c:4c:
         06:66:df:f4:cf:7a:89:35:b1:11:f4:2c:af:5f:9b:1a:96:88:
         61:79:5a:f8:6f:dd:39:95:ce:f4:cb:6a:a2:d4:98:ca:e4:b4:
         45:8c:9c:42:c2:3f:4a:9f:94:4f:8e:8d:05:a7:75:11:a1:19:
         6b:1d:e9:1d:c2:d9:3a:57:91:09:e1:9c:6b:a0:52:22:ee:85:
         ba:1b:cf:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----