Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gETxiu1w4nWM-tPSflSKQcNYuhA.roa
File:                     gETxiu1w4nWM-tPSflSKQcNYuhA.roa (raw, json)
Hash identifier:          OfuhffAhzdeQolSRl8OJUNGlUBeX0sgLAPOtN08EtmA=
Subject key identifier:   80:44:F1:8A:ED:70:E2:75:8C:FA:D3:D2:7E:54:8A:41:C3:58:BA:10
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D79
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gETxiu1w4nWM-tPSflSKQcNYuhA.roa
Signing time:             Mon 04 Oct 2021 01:43:50 +0000
ROA not before:           Mon 04 Oct 2021 01:43:50 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        2407:4d00:ff02::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7545 (0x1d79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Oct  4 01:43:50 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=8044F18AED70E2758CFAD3D27E548A41C358BA10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4a:a7:1f:63:e0:23:b9:c8:bd:48:d1:39:66:
                    16:b3:e4:d8:c1:44:f4:fd:0e:22:81:0f:d6:02:61:
                    20:dc:b2:7e:cf:2d:cf:fa:53:5b:c2:e1:d9:5f:b0:
                    49:bb:2b:18:50:0f:4b:27:af:e5:aa:18:51:9b:6d:
                    e1:ab:b5:8a:9c:9a:fd:3c:b7:d8:f6:a9:49:a3:fb:
                    de:80:af:57:cf:c6:6e:3d:6e:4b:d8:81:58:76:3f:
                    27:0a:aa:9f:6d:93:11:46:0c:21:c3:10:8f:38:02:
                    ec:67:de:0b:b2:61:c3:fb:85:0e:41:4c:1f:04:34:
                    f5:de:1e:1f:97:d7:b7:ca:62:f7:f3:0b:3c:c7:27:
                    12:0c:7b:c5:06:a0:35:7f:5e:fd:43:a2:71:93:e5:
                    fb:c8:92:00:ee:2b:01:67:2a:70:05:2b:31:03:71:
                    3e:aa:7d:31:00:41:b0:48:dc:83:5f:4b:39:99:74:
                    20:30:e2:75:23:c0:b1:b0:08:dc:19:db:87:70:83:
                    d2:69:e6:e6:6c:c0:a4:26:94:0a:5f:8e:49:28:25:
                    d3:24:0b:96:08:46:83:c7:a5:c7:15:33:96:ee:27:
                    1d:fa:3e:eb:1d:27:05:45:dd:30:4d:50:47:81:ec:
                    aa:77:1a:39:f5:70:d9:6d:ee:78:f9:3d:a1:9f:ff:
                    df:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:44:F1:8A:ED:70:E2:75:8C:FA:D3:D2:7E:54:8A:41:C3:58:BA:10
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gETxiu1w4nWM-tPSflSKQcNYuhA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4d00:ff02::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:2f:23:c5:72:ed:86:62:af:ed:f2:44:84:79:44:d2:73:1c:
         f9:03:33:c2:9c:bf:19:73:6a:46:d6:1f:f0:7a:a9:2e:dd:82:
         4d:5b:07:c9:85:e1:47:e1:2f:28:47:0f:18:33:74:8d:fa:81:
         86:6b:7a:dc:56:48:d6:5d:25:35:9f:78:a0:e7:97:b0:68:8e:
         fd:cb:ca:81:bb:49:e0:ad:e5:a2:77:d1:76:81:eb:19:6f:64:
         26:7c:90:e2:bd:f8:ce:a2:94:ba:b9:dd:00:c5:c6:5b:4f:54:
         b1:41:46:4c:9c:d0:e2:d5:24:e8:ee:26:f3:fa:3e:d6:7f:25:
         de:10:68:af:68:fd:e6:c0:ee:f4:e8:70:cd:81:b0:15:d3:b7:
         9b:a7:a1:0d:8c:e5:ce:61:c5:bc:29:24:96:60:05:70:0f:a7:
         c0:29:ab:a0:2d:99:54:20:51:4d:73:ed:cc:b0:66:76:46:45:
         83:71:57:ab:be:7a:73:5b:22:fc:61:e4:6f:cb:d8:ec:b8:10:
         00:d0:95:8d:42:9b:b7:9a:75:dd:6b:32:11:cd:18:1b:e5:a4:
         02:bf:02:8a:ea:02:05:81:85:33:d4:fe:9b:56:63:21:e5:55:
         21:17:35:d2:08:3e:4a:53:e0:02:03:f6:25:27:d1:3a:aa:ee:
         3c:91:bf:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----