Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mg065L5tgm9MlKPiSGbZFw7KlwQ.roa
File:                     mg065L5tgm9MlKPiSGbZFw7KlwQ.roa (raw, json)
Hash identifier:          qhTQkBeJGKzVOMWestf3v6ANqezW7wjuarhUVPBH/60=
Subject key identifier:   9A:0D:3A:E4:BE:6D:82:6F:4C:94:A3:E2:48:66:D9:17:0E:CA:97:04
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D01
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mg065L5tgm9MlKPiSGbZFw7KlwQ.roa
Signing time:             Wed 29 Sep 2021 02:48:29 +0000
ROA not before:           Wed 29 Sep 2021 02:48:29 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        118.232.24.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7425 (0x1d01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:29 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=9A0D3AE4BE6D826F4C94A3E24866D9170ECA9704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f3:03:20:ea:ca:76:be:c7:82:46:32:33:4e:
                    99:c7:2a:bf:8f:ba:63:1c:3a:d5:d3:97:6d:0f:73:
                    73:77:b7:1c:ee:92:03:58:8f:92:f5:65:f4:19:3b:
                    b2:6c:a5:fb:76:48:48:42:60:70:e5:c7:f1:b0:3d:
                    d5:59:20:0c:df:9b:df:cb:34:b2:b4:10:c8:81:1e:
                    eb:a2:e5:df:5c:26:97:e8:83:22:03:fa:7d:97:3f:
                    f0:bf:ff:8c:53:73:d6:6f:4a:3f:29:d5:90:dc:a6:
                    94:fc:1a:14:9d:fc:87:29:fa:13:21:08:09:6c:38:
                    73:4b:e9:68:81:4b:cf:8c:49:fb:0c:6d:08:d5:a1:
                    67:18:a4:22:14:a1:14:7d:14:44:3e:75:84:e7:cb:
                    12:8e:fe:3a:c1:19:79:6b:78:28:be:7e:e8:c0:87:
                    9e:68:46:ed:b3:44:4f:5e:cf:58:39:33:c8:8e:21:
                    29:06:77:83:74:5b:5a:f4:dd:ea:84:36:39:3d:a8:
                    4a:1f:43:ba:7f:0f:ad:45:e8:0e:3e:41:4c:41:b7:
                    1f:19:71:49:93:71:aa:c5:8b:fc:65:7e:9a:73:94:
                    84:e4:e8:8c:7b:05:c9:4c:4e:ec:0a:90:01:da:28:
                    cc:c9:c2:b6:a6:13:c0:fb:f8:2d:20:3b:17:ca:e4:
                    b2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:0D:3A:E4:BE:6D:82:6F:4C:94:A3:E2:48:66:D9:17:0E:CA:97:04
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mg065L5tgm9MlKPiSGbZFw7KlwQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:a7:9c:81:97:83:4d:38:46:03:b5:8f:6c:c8:de:5a:1e:ba:
         26:80:cb:61:fa:c1:2e:f3:23:bf:ae:c9:e2:9c:68:88:d3:22:
         6a:87:7f:57:38:ed:6c:02:6a:71:42:23:3d:f1:69:e1:4f:4b:
         f7:65:cb:3b:c2:78:72:a9:82:8b:3d:c3:07:29:40:a0:97:9d:
         36:40:d2:37:96:fd:35:0e:5e:15:e3:42:10:ae:1f:65:90:8c:
         e6:ca:d2:24:b6:7b:00:5a:27:33:41:ca:07:72:21:d4:6c:8c:
         d6:51:c4:15:c5:10:75:0b:7a:5f:8c:ad:06:04:dc:2c:37:b0:
         c4:de:f9:4f:60:da:ce:89:af:1b:f0:31:c2:5b:74:59:fc:67:
         78:48:57:09:82:e5:84:1f:1a:24:33:df:f1:76:3f:42:04:f3:
         83:d3:28:77:b5:48:ce:74:ae:af:e0:8e:2c:37:78:62:cc:ab:
         5a:b0:29:d3:4e:51:1a:98:35:92:28:18:c8:c6:75:b4:54:36:
         86:b5:60:e4:70:96:46:4b:d5:4e:16:e6:f5:a0:ae:1e:c6:b0:
         ff:46:45:97:52:97:a3:6d:3b:94:1d:b0:bc:b9:7e:a4:52:5a:
         58:51:e6:e9:29:5f:50:c8:0d:24:76:3b:c3:9a:bb:b4:81:5d:
         92:16:3b:89
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHQEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ4MjlaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDlBMEQzQUU0QkU2RDgy
NkY0Qzk0QTNFMjQ4NjZEOTE3MEVDQTk3MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/8wMg6sp2vseCRjIzTpnHKr+PumMcOtXTl20Pc3N3txzukgNY
j5L1ZfQZO7Jspft2SEhCYHDlx/GwPdVZIAzfm9/LNLK0EMiBHuui5d9cJpfogyID
+n2XP/C//4xTc9ZvSj8p1ZDcppT8GhSd/Icp+hMhCAlsOHNL6WiBS8+MSfsMbQjV
oWcYpCIUoRR9FEQ+dYTnyxKO/jrBGXlreCi+fujAh55oRu2zRE9ez1g5M8iOISkG
d4N0W1r03eqENjk9qEofQ7p/D61F6A4+QUxBtx8ZcUmTcarFi/xlfppzlITk6Ix7
BclMTuwKkAHaKMzJwramE8D7+C0gOxfK5LI/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUmg065L5tgm9MlKPiSGbZFw7KlwQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL21nMDY1TDV0Z205TWxLUGlT
R2JaRnc3S2x3US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6BgwDQYJKoZIhvcNAQELBQADggEBAHKnnIGXg004RgO1j2zI3loeuiaAy2H6wS7z
I7+uyeKcaIjTImqHf1c47WwCanFCIz3xaeFPS/dlyzvCeHKpgos9wwcpQKCXnTZA
0jeW/TUOXhXjQhCuH2WQjObK0iS2ewBaJzNBygdyIdRsjNZRxBXFEHULel+MrQYE
3Cw3sMTe+U9g2s6JrxvwMcJbdFn8Z3hIVwmC5YQfGiQz3/F2P0IE84PTKHe1SM50
rq/gjiw3eGLMq1qwKdNOURqYNZIoGMjGdbRUNoa1YORwlkZL1U4W5vWgrh7GsP9G
RZdSl6NtO5QdsLy5fqRSWlhR5ukpX1DIDSR2O8Oau7SBXZIWO4k=
-----END CERTIFICATE-----