Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lteJiVFCYf2cEfPTazDgxwTQurM.roa
File:                     lteJiVFCYf2cEfPTazDgxwTQurM.roa (raw, json)
Hash identifier:          Xd8lPAkdUX79+xnADnhodL+dU73rhVDkc1oJ0cFQ8C8=
Subject key identifier:   96:D7:89:89:51:42:61:FD:9C:11:F3:D3:6B:30:E0:C7:04:D0:BA:B3
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1AB2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lteJiVFCYf2cEfPTazDgxwTQurM.roa
Signing time:             Wed 29 Sep 2021 02:45:38 +0000
ROA not before:           Wed 29 Sep 2021 02:45:38 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.176.196.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6834 (0x1ab2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:45:38 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=96D78989514261FD9C11F3D36B30E0C704D0BAB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bf:83:8f:ae:a1:25:fb:bd:24:71:a5:4a:77:
                    91:ea:e9:eb:03:22:59:29:22:52:61:cb:c5:d6:0f:
                    35:7c:6c:08:33:da:3b:64:74:89:0f:53:6e:27:71:
                    b0:75:30:c1:f1:57:1d:bc:a7:cc:95:84:4a:17:4c:
                    57:be:d1:e7:b2:db:43:04:e8:5f:ac:fb:1f:01:53:
                    13:e2:e3:ae:0a:86:13:1a:c4:ec:f8:f5:cc:3f:a5:
                    5c:d1:f7:a3:20:0d:83:2a:1f:ec:3e:5d:4f:5e:b9:
                    01:d3:66:18:20:7b:39:ad:67:02:8d:db:cf:91:3d:
                    57:07:ae:31:13:71:f5:19:72:2e:99:55:9f:26:73:
                    7a:56:50:f8:fe:1a:4c:75:c5:13:8f:e9:62:a5:b5:
                    e4:31:97:7f:45:2a:db:cf:03:e3:da:12:fc:bc:1b:
                    43:97:98:0b:39:d3:7a:b9:db:a0:75:81:30:7b:47:
                    6e:66:52:32:04:3b:2e:79:40:7b:f0:8f:9d:ac:59:
                    07:64:c3:dd:b0:51:b3:25:58:ff:d4:b8:04:40:f7:
                    7c:82:75:0e:69:66:f4:e8:c1:b9:dd:ab:ab:f9:e7:
                    fc:42:e3:33:f7:d1:72:77:c2:31:d3:1a:e5:fb:f7:
                    5c:42:d1:b9:8c:6e:ad:2f:de:ee:b1:3c:62:4b:21:
                    76:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D7:89:89:51:42:61:FD:9C:11:F3:D3:6B:30:E0:C7:04:D0:BA:B3
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lteJiVFCYf2cEfPTazDgxwTQurM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:41:2f:bd:32:48:74:08:34:cc:e3:5b:86:76:c3:6d:04:f2:
         4f:eb:fa:59:74:cc:7f:3b:4d:b2:06:7f:89:00:e1:47:e2:36:
         05:e3:cb:71:04:fb:9d:ab:21:a0:bb:08:99:dd:48:fc:7f:1b:
         e8:40:be:77:da:77:0a:70:cb:a0:af:47:1a:4e:1f:c6:7f:2b:
         fc:45:25:00:9e:a2:34:05:d7:da:3c:87:0a:00:96:33:dd:ca:
         62:81:85:57:ec:d0:b4:d6:1b:ad:7a:23:ed:4d:53:f2:c2:92:
         b2:83:8d:3a:de:ae:38:c0:10:4b:df:ad:8b:ad:c6:9f:3b:84:
         25:80:0c:cb:6a:c9:55:92:15:64:82:f0:a8:25:75:f3:b8:e8:
         5d:a1:64:fb:8e:e4:e6:f9:2f:13:62:58:b1:c2:3b:e7:55:6d:
         7f:3d:8e:17:69:c3:bc:55:dc:67:3d:ec:fd:0b:2f:39:e9:22:
         80:35:3d:77:db:8d:5f:35:3e:6a:0b:91:58:a3:6b:ca:d0:dd:
         64:a3:ad:49:49:fb:fd:6a:5b:99:75:ce:e5:1a:23:fd:79:c9:
         13:62:32:fe:c1:09:bd:b5:ce:fd:e9:05:c2:12:d0:c6:7b:e3:
         f4:69:81:20:7a:62:13:e7:3d:e1:8d:21:bb:3f:d2:5c:7e:e4:
         27:fc:b3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----