Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hO3JsTEBIb5jvW1BLYsdJmJuqnk.roa
File:                     hO3JsTEBIb5jvW1BLYsdJmJuqnk.roa (raw, json)
Hash identifier:          RK3GCK8ZhENeknBaeTApSpyHebZKDwt7PzG5veD/9Yk=
Subject key identifier:   84:ED:C9:B1:31:01:21:BE:63:BD:6D:41:2D:8B:1D:26:62:6E:AA:79
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1BCF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hO3JsTEBIb5jvW1BLYsdJmJuqnk.roa
Signing time:             Wed 29 Sep 2021 02:47:01 +0000
ROA not before:           Wed 29 Sep 2021 02:47:01 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        118.233.224.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7119 (0x1bcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:01 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=84EDC9B1310121BE63BD6D412D8B1D26626EAA79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:22:af:c3:d5:c8:ea:f6:22:67:dc:79:c7:d7:
                    4f:46:3b:cd:aa:9d:af:82:c8:c5:ac:c6:5a:5e:ea:
                    b9:2a:04:e9:72:12:38:25:b2:0f:c4:49:01:8b:6e:
                    bc:87:2d:b4:1c:0b:cb:cb:41:80:39:d5:6e:2b:c1:
                    a2:63:28:55:1c:1c:a0:c6:05:7a:0f:f7:f8:5f:72:
                    f2:cd:20:fb:a2:10:9b:3c:b5:27:d1:c4:1c:67:02:
                    9d:1c:7f:fb:a0:36:1f:95:e9:4c:6f:c9:76:07:ba:
                    82:c4:a8:c8:3d:20:59:89:fb:07:bb:6a:4e:c0:e6:
                    72:65:92:6d:10:2b:a9:0c:c7:82:d3:41:77:77:85:
                    de:6c:8f:55:f7:21:39:3f:28:f8:07:ab:04:e3:a7:
                    e2:36:35:7b:82:7c:c7:b0:92:fd:af:69:47:6a:f4:
                    9c:fa:95:ba:c4:c6:3e:9e:20:1c:0b:df:b6:c4:2f:
                    aa:4a:33:44:91:76:bf:82:ad:b2:c3:cb:f1:09:38:
                    53:8d:bb:7c:f2:55:00:e0:c3:75:8a:13:fa:96:31:
                    92:c4:bc:df:ef:f0:41:31:b3:82:24:50:22:30:42:
                    e4:ce:25:e9:b7:e0:38:a1:82:cd:85:16:5e:c9:67:
                    19:5a:35:7a:df:fe:29:3f:65:55:ad:ba:4f:8a:26:
                    b4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:ED:C9:B1:31:01:21:BE:63:BD:6D:41:2D:8B:1D:26:62:6E:AA:79
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hO3JsTEBIb5jvW1BLYsdJmJuqnk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:ca:6f:37:e9:39:3b:55:7e:86:8d:d8:8d:dc:35:6b:df:ca:
         8d:c9:69:bd:f2:ec:f9:fe:cf:d6:4a:c6:92:cb:80:ce:f9:10:
         52:2d:41:2a:26:73:03:a6:9a:05:b0:b0:9b:fa:9d:2a:2b:30:
         ad:78:3f:42:88:4c:fd:94:dd:65:b6:83:b5:dd:e5:e8:e7:95:
         8b:41:a6:f7:08:99:d8:76:5b:55:d6:73:91:4f:d4:83:f2:aa:
         06:e1:f2:40:a9:2e:e7:12:24:81:c2:40:95:3d:8c:82:2a:e2:
         47:32:cf:ed:36:c7:32:c0:51:bc:e4:20:9f:96:06:a8:fe:76:
         2e:dd:ee:22:3b:88:8a:d6:fe:18:2c:68:18:fa:58:1b:96:70:
         f8:c9:41:ef:d0:77:82:68:92:dd:13:b2:fe:47:ea:5a:e0:6f:
         ef:60:c6:b0:7b:b7:23:07:f6:86:c0:5e:db:67:9d:ad:7a:e4:
         8c:68:ed:48:10:87:9b:7b:21:4f:f1:87:66:e3:77:28:3c:72:
         89:cf:59:3a:ab:49:54:b3:5a:76:77:e0:ba:6f:3a:96:7a:cd:
         a1:89:d0:99:a1:87:ad:7d:21:67:dd:a1:72:44:30:15:64:d7:
         7a:e0:df:d1:d1:0f:f4:df:59:48:64:88:f7:f4:74:a8:95:b6:
         cb:0a:7b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----