Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/m83_yDWSsv-YyYyynUHROnKwS6Y.roa
File:                     m83_yDWSsv-YyYyynUHROnKwS6Y.roa (raw, json)
Hash identifier:          lLRLDrkTYkP+JeUj30c8e54wjWpxLCNsUX76iS3hvb8=
Subject key identifier:   9B:CD:FF:C8:35:92:B2:FF:98:C9:8C:B2:9D:41:D1:3A:72:B0:4B:A6
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D50
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/m83_yDWSsv-YyYyynUHROnKwS6Y.roa
Signing time:             Tue 29 Sep 2020 09:54:26 +0000
ROA not before:           Tue 29 Sep 2020 09:54:26 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.240.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3408 (0xd50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:26 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=9BCDFFC83592B2FF98C98CB29D41D13A72B04BA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a7:dd:50:3c:1d:ed:a5:af:88:a3:e3:80:d3:
                    0e:ad:90:17:6c:f9:ec:db:6e:62:87:59:82:4e:8d:
                    37:67:a5:b4:22:ff:e3:80:f8:b3:64:5e:4c:d1:31:
                    55:50:f3:82:88:85:8e:8d:2e:6e:30:18:20:52:6f:
                    f5:a1:e0:a2:84:10:61:40:80:d1:58:28:d9:99:78:
                    35:33:d5:a7:f0:b2:63:7e:85:68:9a:9b:f5:1a:25:
                    7a:82:5e:49:65:7b:0a:bd:19:8e:24:ec:ca:a3:e1:
                    49:8d:81:05:b7:42:fe:c3:7f:37:f4:52:f4:6f:ec:
                    78:ac:32:b4:70:f1:e8:54:31:4c:d0:b9:1f:1c:eb:
                    7a:61:22:32:0d:dc:99:d3:a3:ae:34:bd:4b:7a:d7:
                    39:ee:19:39:fe:16:d4:f0:15:ec:5f:c2:ee:e2:86:
                    08:93:b1:8a:49:5a:c0:02:ed:e4:72:4c:a4:bf:84:
                    3b:1a:b3:88:39:3c:c4:c9:75:4b:f6:50:8a:50:56:
                    f2:9d:b2:5b:54:6c:4f:77:da:2a:eb:0d:06:5a:d7:
                    37:d1:73:af:30:ea:46:bd:0e:e9:e1:e5:1a:18:92:
                    8f:aa:b0:70:d1:81:c7:2e:06:e0:96:1c:79:e1:d7:
                    a7:f0:73:5c:47:85:39:4c:6e:c3:eb:b2:ca:db:68:
                    e3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CD:FF:C8:35:92:B2:FF:98:C9:8C:B2:9D:41:D1:3A:72:B0:4B:A6
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/m83_yDWSsv-YyYyynUHROnKwS6Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:16:77:41:b0:10:f4:ca:0c:a8:79:de:a5:23:9b:8c:ec:2e:
         c4:47:1c:f0:17:02:e9:51:b9:24:e2:e9:2d:a8:68:aa:09:54:
         26:ce:10:82:01:32:80:74:2f:81:64:39:0a:8a:3d:f1:18:24:
         51:99:ac:b7:31:17:37:e9:99:59:16:84:e0:18:9b:01:b8:63:
         94:d4:9f:bf:4c:92:84:48:b4:cf:04:c6:0f:b1:75:11:a8:bc:
         03:4e:2f:38:67:3e:80:8b:58:46:c4:e0:67:ea:4a:cf:d2:77:
         53:31:ac:44:04:ec:2f:59:d5:f2:8f:7a:92:76:36:02:df:d6:
         54:c2:26:9b:23:3a:3e:ef:a9:72:be:bc:86:26:98:6d:75:a8:
         4a:36:8a:66:40:64:90:e9:cf:a7:24:a1:12:4a:a0:82:54:0e:
         89:70:3b:3a:44:6e:e6:dd:f8:a5:d1:af:60:16:8d:1d:f8:6e:
         02:f6:dd:b1:a5:0e:7e:82:0a:6a:a3:dd:89:a7:7a:94:01:94:
         34:f0:ee:f3:05:3e:79:9e:c4:9f:c0:0e:7e:bd:bf:f6:8d:2a:
         74:80:78:ce:df:2f:a5:1a:b9:7f:46:8b:e0:6d:f7:e3:66:cb:
         1a:44:fa:f5:19:25:18:31:02:38:ec:7d:e0:be:7c:8f:ab:c1:
         fd:8a:48:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----