Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kjy6fp69pZSE83lDXPXN0V8gwDk.roa
File:                     kjy6fp69pZSE83lDXPXN0V8gwDk.roa (raw, json)
Hash identifier:          TeUcer0dgzGqw/D8ja7bhGkpOtPA9FqnVbJlRAB01Os=
Subject key identifier:   92:3C:BA:7E:9E:BD:A5:94:84:F3:79:43:5C:F5:CD:D1:5F:20:C0:39
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1A73
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kjy6fp69pZSE83lDXPXN0V8gwDk.roa
Signing time:             Wed 29 Sep 2021 02:45:21 +0000
ROA not before:           Wed 29 Sep 2021 02:45:21 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        118.233.48.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6771 (0x1a73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:45:21 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=923CBA7E9EBDA59484F379435CF5CDD15F20C039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ec:38:4f:a4:94:8f:62:86:13:3c:5c:f6:0e:
                    d9:34:28:37:38:20:ef:05:9b:37:de:84:e7:ad:0e:
                    43:de:7b:05:98:fd:ed:b1:42:87:b3:cb:98:e7:63:
                    e8:60:8d:61:72:ea:de:82:64:4c:6e:94:c9:d7:7b:
                    bb:4d:23:d9:a0:ec:be:9c:92:b0:5f:86:b4:19:9b:
                    68:d9:3f:40:9a:99:df:78:28:36:d5:c0:56:82:a3:
                    9e:04:6e:22:b8:c1:e2:4a:c2:45:59:d9:24:01:06:
                    31:37:16:88:cb:13:8b:9b:81:63:9f:bb:bb:e0:d8:
                    81:c1:3f:f6:d5:d7:74:36:ee:c0:c6:fe:5e:86:9e:
                    1c:e1:3b:c0:3f:a5:10:9f:f4:26:17:f6:0a:8e:b6:
                    9d:6e:50:98:00:79:39:46:05:b1:54:32:00:64:54:
                    bf:72:7c:a2:c4:92:9e:00:5d:cc:ff:b3:36:04:e9:
                    8d:9c:11:09:60:43:d7:b6:c1:b3:9b:77:a8:3b:81:
                    44:db:cc:68:96:d9:0d:01:fc:f2:16:a3:86:c3:b0:
                    6c:55:41:b5:97:82:da:c7:05:d4:77:22:2a:5f:20:
                    72:65:f6:6a:4b:7c:f2:75:ad:a8:c9:2b:3a:a1:4b:
                    28:a3:d1:63:60:18:34:40:c0:e2:c3:28:51:94:56:
                    bc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3C:BA:7E:9E:BD:A5:94:84:F3:79:43:5C:F5:CD:D1:5F:20:C0:39
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kjy6fp69pZSE83lDXPXN0V8gwDk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:df:84:71:5c:97:d0:4c:0b:d3:66:db:f2:8c:62:3b:ec:6e:
         0d:41:e1:e7:65:a7:a4:cc:50:8e:1a:0a:3c:d1:e3:a4:9b:39:
         35:23:fe:e7:44:d7:46:02:3d:c9:72:f3:76:06:28:b0:ac:33:
         5f:f5:ce:9d:3f:ea:f7:60:09:e2:01:21:3f:55:b1:b3:73:6f:
         36:cf:33:06:45:28:bb:25:43:28:cc:c7:06:30:00:bb:89:f8:
         fb:39:bb:29:1b:38:dc:92:42:28:88:16:99:8c:61:ee:61:93:
         04:83:92:c7:01:b3:bb:3f:ce:83:da:2b:89:81:8a:f8:a6:27:
         35:fb:4c:fa:ad:ae:79:aa:22:3a:23:9b:c0:03:49:65:d7:e6:
         04:31:ba:26:bf:d5:ad:11:07:83:2a:a1:93:48:c0:64:7d:8b:
         cb:bc:e9:fa:fd:52:df:55:ca:45:1d:d6:68:63:f7:09:d9:aa:
         c5:a0:82:8d:18:9b:00:55:60:42:af:20:28:91:04:cc:92:72:
         95:1b:c1:ec:24:8d:3f:ee:2e:e8:44:4e:eb:ef:9d:d2:ca:9b:
         99:4e:fc:81:49:77:11:4c:5e:04:c9:43:b1:8c:db:50:aa:3d:
         de:1c:10:f1:0f:f9:e3:a6:eb:bf:e4:b1:69:d6:fd:37:c4:a6:
         d7:32:ba:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----