Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lUPXiEgkwyoF6R93lM7JBPWl_s0.roa
File:                     lUPXiEgkwyoF6R93lM7JBPWl_s0.roa (raw, json)
Hash identifier:          qfByKSbI1Y913zJeuMbNP7xJecipOMDcnS/9ng5sXPw=
Subject key identifier:   95:43:D7:88:48:24:C3:2A:05:E9:1F:77:94:CE:C9:04:F5:A5:FE:CD
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0EC3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lUPXiEgkwyoF6R93lM7JBPWl_s0.roa
Signing time:             Tue 29 Sep 2020 09:56:06 +0000
ROA not before:           Tue 29 Sep 2020 09:56:06 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.233.180.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3779 (0xec3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:06 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=9543D7884824C32A05E91F7794CEC904F5A5FECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ee:4c:25:eb:47:98:af:84:6e:75:1e:97:99:
                    7d:03:3c:f2:3d:2e:14:b0:26:83:0b:63:cf:01:8a:
                    a9:78:79:33:c6:31:82:c4:f0:45:c3:1e:e9:1d:6d:
                    9a:3e:d0:74:d9:5c:36:e6:c5:2d:51:db:b2:e8:19:
                    a1:db:f4:74:8c:5c:50:4f:27:77:ba:1f:ba:9c:70:
                    fe:c0:7a:d1:c0:5a:76:8c:bb:60:74:46:df:9c:89:
                    49:ac:f2:03:3e:c4:cd:19:ce:7b:49:35:e6:b5:11:
                    22:d4:28:8c:f4:86:c3:53:4d:be:f2:26:36:2f:e6:
                    11:fc:c1:33:83:06:c6:27:f8:d5:82:4a:61:41:ed:
                    80:a6:8b:b6:98:3c:2e:c7:90:01:11:13:51:b6:9f:
                    a2:7a:33:15:b7:3c:98:56:10:4e:c4:9c:a9:ba:02:
                    d2:f7:f1:1e:40:4c:d5:48:ac:6d:d6:cb:87:4b:27:
                    16:7f:cc:c1:5a:d1:c7:a8:d9:dc:53:22:bc:a1:3e:
                    44:9b:32:a8:0c:32:8d:5e:ab:23:9b:2a:8a:59:68:
                    30:a8:31:43:20:1f:13:2b:10:63:ce:75:d2:bb:2a:
                    b0:a2:de:f8:ba:55:1b:c2:a1:9f:69:67:f7:cf:b6:
                    0d:71:00:f5:4b:d9:83:e5:d1:40:36:1f:d1:a1:8c:
                    18:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:43:D7:88:48:24:C3:2A:05:E9:1F:77:94:CE:C9:04:F5:A5:FE:CD
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lUPXiEgkwyoF6R93lM7JBPWl_s0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:1e:df:33:9d:67:42:01:3e:ba:ea:1a:c5:0f:c8:fd:3c:fc:
         40:93:1b:1b:b6:9e:f7:ec:73:5b:3b:15:26:a0:d1:a2:00:71:
         b6:3a:ec:4b:1d:e6:fe:30:62:bb:d0:60:ad:60:33:02:ca:a5:
         e8:7a:2c:8a:76:1a:e2:ae:17:94:c5:4d:75:c5:2f:68:20:10:
         3f:cd:08:9d:b9:ef:68:45:07:c2:06:a6:28:d7:4f:b2:7f:57:
         6b:8e:d4:d4:18:25:4c:d2:a8:a5:e3:b8:87:ff:23:10:c9:5c:
         09:32:df:e5:40:d6:35:2f:54:a3:92:3a:dd:e2:19:ae:26:d4:
         0f:2c:e3:5e:f3:2a:ec:79:97:60:ae:a3:b3:0d:fd:86:3c:7e:
         88:86:24:35:55:aa:07:38:e7:56:4d:c1:e6:9c:53:b3:64:b6:
         fd:8b:5f:ff:42:47:4f:fd:a7:40:44:d2:d7:63:c6:64:18:a9:
         36:d5:9c:7c:73:e2:f0:f0:b8:c2:63:13:67:68:e4:6b:16:d2:
         98:2d:27:16:0b:6f:78:17:0a:ea:9c:e9:56:7e:01:c1:76:f5:
         a6:1b:a1:07:ea:ce:bf:85:d7:c4:e6:fa:f8:91:66:e5:9d:71:
         55:13:69:48:6f:6e:52:b7:6e:31:75:0d:2f:b7:58:7e:13:87:
         81:fb:86:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----