Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jWO7AxIWFzv6pLS2t1gkTp05Ta8.roa
File:                     jWO7AxIWFzv6pLS2t1gkTp05Ta8.roa (raw, json)
Hash identifier:          dMjojShmg9Cu3gRC6aDET9fYkbaVKbqSZ3VYZpgbE/c=
Subject key identifier:   8D:63:BB:03:12:16:17:3B:FA:A4:B4:B6:B7:58:24:4E:9D:39:4D:AF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1643
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jWO7AxIWFzv6pLS2t1gkTp05Ta8.roa
Signing time:             Sun 07 Feb 2021 12:09:19 +0000
ROA not before:           Sun 07 Feb 2021 12:09:19 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.221.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5699 (0x1643)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:09:19 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=8D63BB031216173BFAA4B4B6B758244E9D394DAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f9:65:fc:8a:df:26:4e:9f:48:36:19:ba:44:
                    d4:4c:ec:0e:3d:98:c0:36:87:ed:2c:16:83:b7:a3:
                    99:30:8d:a2:a0:1a:cf:db:30:70:b7:18:26:af:97:
                    53:94:54:5e:cd:aa:63:79:b4:65:16:5e:da:4e:36:
                    f3:7c:d6:57:cb:76:d3:21:3f:4b:43:63:07:13:50:
                    bd:a6:19:d4:3b:7d:5e:f3:65:db:17:5e:5b:2f:28:
                    09:6f:42:07:7b:e2:b8:77:f4:51:59:e8:d0:23:84:
                    ba:b3:7c:35:64:b1:e0:2b:39:a0:81:8b:51:87:e0:
                    f4:f5:bd:54:1b:91:65:e2:1f:3f:b3:ac:7c:64:05:
                    0f:8c:43:dd:d7:06:f8:b5:01:a3:66:8a:4b:f8:90:
                    a4:bc:a5:50:01:56:25:5b:6f:c6:3e:64:7b:56:8d:
                    d8:b7:ba:98:9d:e0:a3:4e:e4:a3:f8:98:49:e7:36:
                    3d:46:52:f5:ec:15:a7:cf:34:bd:2a:f2:a9:10:99:
                    f5:27:5a:7f:4a:de:92:d5:4e:e9:fb:93:7b:02:d9:
                    f5:db:70:61:4a:54:9e:0e:fc:e6:2e:00:95:53:35:
                    ed:61:1a:7e:d3:cc:28:97:c3:48:4f:da:6f:38:a4:
                    e7:93:46:40:59:82:14:7b:e7:39:12:57:86:45:97:
                    52:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:63:BB:03:12:16:17:3B:FA:A4:B4:B6:B7:58:24:4E:9D:39:4D:AF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jWO7AxIWFzv6pLS2t1gkTp05Ta8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:15:41:89:85:68:31:ee:35:a1:f4:c9:dc:e2:bd:12:f9:e6:
         c6:41:80:64:3e:e0:26:81:7c:8d:3a:9a:94:39:ab:68:76:d6:
         9c:08:66:1d:2c:1f:1c:0e:53:77:a4:1f:b8:e1:91:71:28:ad:
         de:00:c7:13:78:53:ed:8b:53:9c:77:49:3b:51:85:43:21:e1:
         67:22:60:d8:3c:09:a6:7c:d5:6a:a8:9e:60:af:c8:e0:03:55:
         2b:05:bd:d5:53:1c:70:36:3c:ce:e7:d0:56:2f:59:df:2f:41:
         d3:ab:47:64:a6:98:8e:9c:4a:7f:4d:09:ed:8c:19:80:d3:f4:
         dd:3d:52:f4:cb:75:01:53:69:68:c9:ef:11:91:4f:8f:52:c7:
         5b:a7:d1:ba:e4:71:88:28:b1:a1:62:72:db:e1:ef:49:9b:89:
         c7:a5:14:9b:7c:6c:80:f8:5b:b8:60:bd:87:d3:dc:2c:93:67:
         2d:c8:6c:8d:c0:ee:05:75:3c:ee:66:f3:f2:1d:1f:5d:59:dd:
         78:47:24:11:31:30:d1:c9:f0:ea:81:aa:da:4c:1b:d5:c7:a3:
         cd:2d:93:9c:31:f4:b9:f9:d7:9a:c6:84:1e:82:c0:6b:91:f7:
         e5:4c:a0:ab:ae:7c:5a:49:3c:bf:d9:af:10:4d:71:3e:4a:6e:
         7b:ae:75:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----