Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k1eChx1Z1rJ175uVZK87vmrKaoQ.roa
File:                     k1eChx1Z1rJ175uVZK87vmrKaoQ.roa (raw, json)
Hash identifier:          6++t+wPZEx/0YsPCkuK05/rlLyUQMkMH7mwQQSXyIFs=
Subject key identifier:   93:57:82:87:1D:59:D6:B2:75:EF:9B:95:64:AF:3B:BE:6A:CA:6A:84
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D39
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k1eChx1Z1rJ175uVZK87vmrKaoQ.roa
Signing time:             Tue 29 Sep 2020 09:54:20 +0000
ROA not before:           Tue 29 Sep 2020 09:54:20 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.108.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3385 (0xd39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:20 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=935782871D59D6B275EF9B9564AF3BBE6ACA6A84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e7:82:b5:71:ad:7b:25:ed:b9:00:b2:29:8e:
                    f3:7a:ee:b3:15:d2:f3:0b:d1:b5:91:09:c6:92:d0:
                    19:01:3c:e0:fa:2d:b5:b0:b4:4e:41:5e:ba:73:b2:
                    f5:6f:5f:eb:64:09:f0:be:31:67:ef:90:28:8f:30:
                    b7:62:2d:ee:bb:89:8e:ad:ca:f2:7d:16:9c:82:b0:
                    23:40:04:dc:76:93:69:01:aa:fc:91:5f:2a:46:3e:
                    0e:b0:96:5e:6a:2b:0e:12:74:fd:18:91:58:2a:f5:
                    8d:b4:58:ea:8f:9b:ad:fb:11:8c:2a:c3:14:c0:d4:
                    c8:d5:b1:35:5f:e2:ff:d7:a6:03:81:ba:11:fd:d1:
                    0c:bf:39:b8:06:1d:68:29:cb:9e:e8:db:a2:82:5b:
                    0b:92:fa:f1:7e:85:bd:f6:35:00:7c:e0:b9:32:96:
                    d9:62:82:f5:70:87:a8:85:4d:1a:72:ca:21:ff:ca:
                    60:ee:cf:53:da:f7:88:ed:f9:01:0b:26:1b:dc:fa:
                    94:b3:b1:a9:f2:08:ac:66:be:bb:eb:24:78:40:17:
                    e7:7b:6e:f4:91:59:a9:b9:80:0d:9a:2c:5e:ae:49:
                    89:3c:e0:b5:71:87:0d:59:1c:e9:8b:81:9e:44:d6:
                    9f:ce:01:b1:56:10:40:a5:bb:16:fa:7f:0b:d0:08:
                    dc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:57:82:87:1D:59:D6:B2:75:EF:9B:95:64:AF:3B:BE:6A:CA:6A:84
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k1eChx1Z1rJ175uVZK87vmrKaoQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:f5:98:22:c5:07:dc:55:50:31:47:aa:f5:27:2e:81:bd:89:
         5b:15:22:e6:6e:f0:cc:05:60:28:1e:fe:dd:9c:d0:c4:45:cd:
         64:9d:83:8a:48:74:41:b4:14:a1:bd:06:41:0b:03:a7:87:59:
         b7:2b:ef:f7:fd:a9:35:3b:35:08:27:d2:eb:62:87:f4:13:48:
         4a:62:d6:81:dd:ca:5f:4a:d2:d4:54:9b:16:70:2b:f9:3a:57:
         e2:1c:c2:a0:90:e5:b8:c0:7c:1e:c7:78:69:6e:be:e6:2f:5f:
         26:a5:e1:38:d4:73:ca:b8:44:4c:8e:22:75:11:59:9b:80:f6:
         7b:3a:e2:f5:e2:c4:b1:c0:ec:86:90:c2:b0:1d:0f:4e:95:a6:
         1c:ac:ff:2f:65:b3:90:a4:2b:79:97:b6:f5:a7:8b:ef:b5:9a:
         19:cf:56:2a:45:20:b0:cb:fd:f2:d5:3d:69:e7:b6:13:b3:20:
         50:90:94:66:2a:2e:4b:d0:3a:59:01:34:39:b3:af:b8:62:cf:
         5f:db:63:ad:95:70:18:e0:72:b7:05:c2:d2:c7:73:ca:86:36:
         a1:aa:ca:55:70:56:af:97:c7:ef:f9:6f:5a:95:79:94:38:cd:
         e2:a0:37:bc:e3:ac:74:ef:22:7a:f5:f8:0e:f2:f9:2a:e7:af:
         5b:b5:df:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----