Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/glN2fAo4ryx7ikGnLe_wqOBaU6g.roa
File:                     glN2fAo4ryx7ikGnLe_wqOBaU6g.roa (raw, json)
Hash identifier:          KKzQBVzxZwbhWNlQekoWoD68t4O5umFQLHNr/mWmnhw=
Subject key identifier:   82:53:76:7C:0A:38:AF:2C:7B:8A:41:A7:2D:EF:F0:A8:E0:5A:53:A8
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0EFE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/glN2fAo4ryx7ikGnLe_wqOBaU6g.roa
Signing time:             Tue 29 Sep 2020 09:56:23 +0000
ROA not before:           Tue 29 Sep 2020 09:56:23 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.232.0.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3838 (0xefe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:23 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=8253767C0A38AF2C7B8A41A72DEFF0A8E05A53A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:75:cc:0e:97:95:14:40:9a:68:3d:1d:01:d5:
                    75:68:e6:eb:0a:60:13:9b:4f:76:a3:94:53:80:48:
                    11:63:ed:56:ac:90:c4:6d:75:ce:92:24:86:ca:29:
                    ad:1d:90:2c:26:5e:cf:3a:d0:f8:51:df:f9:ec:cd:
                    91:01:4f:62:6b:95:df:7e:bc:ef:3f:ae:c5:0b:84:
                    b9:eb:ad:81:c2:08:c5:c0:dd:b9:25:4f:10:77:c3:
                    d3:4c:70:63:fb:8d:b7:43:fd:7d:dd:4f:74:d5:b9:
                    30:6f:79:0c:86:f5:10:c4:cb:74:55:25:9b:08:d8:
                    e7:57:10:9e:4d:18:2c:2a:dc:dc:5d:53:a1:be:84:
                    ea:d0:86:6b:01:86:40:3d:e6:02:ad:ed:47:d1:ab:
                    19:1a:41:a3:83:70:90:88:e9:b5:45:3c:9f:95:74:
                    11:5a:f8:84:f9:36:0f:a6:b2:ed:f3:bc:c9:cc:86:
                    47:1a:c8:c4:fb:c7:e1:51:17:5b:6e:ab:11:60:2c:
                    57:7a:f3:d8:aa:61:94:ef:9d:b1:e6:f3:ba:73:84:
                    00:08:d7:6d:cd:15:a4:ec:73:a6:86:8a:e4:98:76:
                    b9:6e:34:54:f9:6a:c8:a6:84:3e:dc:6e:fb:48:24:
                    8a:c8:1c:0e:55:03:7d:3e:0e:a5:7f:69:0f:36:27:
                    eb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:53:76:7C:0A:38:AF:2C:7B:8A:41:A7:2D:EF:F0:A8:E0:5A:53:A8
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/glN2fAo4ryx7ikGnLe_wqOBaU6g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6e:29:64:a8:e9:ae:b6:39:e5:1c:b9:48:30:7a:3e:c8:79:96:
         8c:42:4b:20:75:2f:50:f6:22:5a:e6:a6:09:39:91:03:5c:ee:
         50:d7:f7:e9:29:38:c6:3c:7e:f2:f3:e3:db:dc:7f:7f:85:11:
         68:f4:cf:8e:05:e7:ac:5e:7a:b7:2c:5d:a6:01:1d:a9:7a:db:
         c3:9c:f0:bc:a4:0d:af:90:86:4d:63:fb:21:cf:51:3b:5b:16:
         b4:c1:eb:7f:a4:97:08:84:83:3f:96:15:d5:5f:cf:a0:d8:46:
         bc:68:b3:03:ab:28:fa:f4:7d:d0:a2:36:85:98:91:c8:48:cb:
         c6:14:18:d0:bb:f0:57:de:fe:03:f4:33:18:4c:fc:05:7e:f1:
         42:a4:9c:bb:bf:28:9a:f2:fe:17:fd:2c:4a:24:7e:ff:aa:50:
         7e:2c:74:cc:03:82:a3:6c:37:77:09:e2:e3:3f:15:9b:b4:95:
         4f:2c:88:c5:28:7f:39:f9:9c:33:68:d4:61:00:94:a1:2c:40:
         9a:bb:c2:92:8c:61:61:ce:c0:c5:57:e4:d9:93:33:5b:c4:b2:
         c2:d9:40:9b:f8:9b:b0:0c:33:b7:6e:ba:f0:48:c0:20:6a:34:
         66:cb:a8:08:5f:d4:61:ab:7d:51:c7:53:59:fb:8b:47:6a:48:
         7a:20:f1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----