Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eJMAZdvrOhYpzMdpsWanZGOekBI.roa
File:                     eJMAZdvrOhYpzMdpsWanZGOekBI.roa (raw, json)
Hash identifier:          c48E3U3vPeYY7XE8p7nicwlbzQuMyDp9uVxrZgQWMB4=
Subject key identifier:   78:93:00:65:DB:EB:3A:16:29:CC:C7:69:B1:66:A7:64:63:9E:90:12
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1BF2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eJMAZdvrOhYpzMdpsWanZGOekBI.roa
Signing time:             Wed 29 Sep 2021 02:47:11 +0000
ROA not before:           Wed 29 Sep 2021 02:47:11 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.176.85.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7154 (0x1bf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:11 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=78930065DBEB3A1629CCC769B166A764639E9012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:17:f5:75:e6:3a:1f:79:24:64:b2:6d:a3:b1:
                    8d:57:dd:2e:3d:bc:a8:50:d8:4f:8d:71:d4:54:0a:
                    b0:e7:b5:11:fa:3f:9e:b7:7f:53:28:22:f7:93:dd:
                    77:37:8d:03:2d:2c:35:71:a8:4f:17:f3:44:c4:60:
                    dc:94:1c:57:d9:e1:31:20:74:ba:47:33:e6:92:75:
                    e5:6d:6a:61:9f:a4:92:84:d5:21:8b:60:6a:18:e1:
                    7b:a2:e9:86:76:d9:b5:ba:81:41:4b:3f:f9:3f:a4:
                    0e:b0:4f:56:2b:6a:f4:ac:e7:fd:99:49:21:c3:cc:
                    45:21:f8:c6:89:9d:68:fd:70:f3:b5:c1:67:b4:93:
                    93:d7:56:9c:43:fd:56:29:de:85:b9:52:9b:0a:e0:
                    e0:fc:31:b1:2c:1f:cf:79:6c:ec:8d:85:bd:8e:0d:
                    bf:13:87:f6:bd:95:d1:8e:ef:77:47:f5:56:05:88:
                    99:30:2c:93:85:26:cb:10:37:40:c8:48:57:08:fa:
                    81:8a:3d:8f:0b:32:0f:60:36:c7:18:4f:c7:92:6e:
                    bb:0f:0c:38:44:b4:3d:f1:4e:2c:0b:9f:5d:b4:90:
                    24:02:44:eb:d6:67:20:95:39:98:73:35:86:e3:7f:
                    1c:45:d9:c7:14:29:75:51:8e:eb:6a:01:0b:bd:c1:
                    5e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:93:00:65:DB:EB:3A:16:29:CC:C7:69:B1:66:A7:64:63:9E:90:12
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eJMAZdvrOhYpzMdpsWanZGOekBI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:ff:43:de:3a:ec:1d:f1:99:60:26:e8:f4:45:3e:90:25:17:
         34:c0:80:21:03:4d:11:d5:1a:b6:3a:20:97:32:b8:08:83:86:
         71:27:38:0f:86:0a:fe:65:51:08:19:ff:d6:9f:79:e5:a4:b9:
         14:ca:98:05:e1:19:c9:ca:cf:99:e0:29:b8:fe:46:6e:c2:38:
         c4:5c:be:ff:e6:27:dd:42:8d:4e:38:a2:39:b9:46:44:13:d7:
         b6:97:34:1f:0a:9c:b0:c9:3d:72:6f:23:b7:19:4c:df:f2:d5:
         44:a2:56:fc:11:e5:47:89:a4:bf:2c:c0:ec:7f:60:1c:ff:fa:
         d2:56:01:e7:40:43:39:44:80:0b:14:8a:06:a9:8c:31:24:03:
         f0:48:ec:b5:8f:46:27:f3:63:0e:48:fb:f6:8e:57:b9:2a:ac:
         3b:23:ad:43:2f:7f:0d:74:00:41:e2:f5:d2:69:10:78:f2:7c:
         83:b0:f0:b0:31:61:54:29:39:ff:c1:29:5c:24:17:48:67:44:
         5c:ba:ec:03:7d:23:01:16:ca:88:a9:b8:28:1f:38:b9:40:06:
         cd:1a:5b:88:4b:6f:3d:00:34:a9:15:cd:e4:3f:03:69:86:23:
         c5:e1:3e:e3:bb:2e:4d:3d:01:0b:84:b5:10:c8:d3:07:22:59:
         f2:71:ac:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----