Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/miQjI8JArueLDgJHTmRSJ7LpizQ.roa
File:                     miQjI8JArueLDgJHTmRSJ7LpizQ.roa (raw, json)
Hash identifier:          T8vdd3WcA5F9Av5Uv48TgoG0YNGXhP3aW8dI7czSmsg=
Subject key identifier:   9A:24:23:23:C2:40:AE:E7:8B:0E:02:47:4E:64:52:27:B2:E9:8B:34
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D56
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/miQjI8JArueLDgJHTmRSJ7LpizQ.roa
Signing time:             Wed 29 Sep 2021 02:48:52 +0000
ROA not before:           Wed 29 Sep 2021 02:48:52 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        180.177.46.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7510 (0x1d56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:52 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=9A242323C240AEE78B0E02474E645227B2E98B34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fe:b0:9e:09:43:c1:e8:c8:a7:23:a9:38:9c:
                    f1:42:67:ae:92:9d:23:6b:da:d1:9e:74:bf:43:8c:
                    e6:a9:0c:f6:96:b7:91:5d:36:d6:de:bf:2b:d7:34:
                    2b:7f:53:e5:f7:60:da:a5:cb:37:62:6f:2b:11:3a:
                    d8:ab:56:d8:48:2e:8b:fe:83:02:18:26:df:64:24:
                    4e:b7:43:93:e8:5b:75:a5:97:ae:c5:54:41:d8:e4:
                    70:d6:31:ed:2a:2a:c0:58:51:f5:2c:d1:f4:09:49:
                    5c:a8:51:0e:81:d1:0e:0c:70:d4:b8:9a:4a:c7:c8:
                    ca:07:f2:55:f4:07:a6:d8:21:c3:84:bd:ef:cb:b8:
                    a8:82:9e:40:86:e8:b0:7b:6d:dc:76:c9:4a:75:73:
                    5c:7a:b7:11:09:92:29:3b:78:1c:d6:fa:46:f0:be:
                    1e:90:57:02:a2:6b:07:df:c1:b7:e3:2e:e3:4e:1d:
                    24:ca:63:34:21:82:4f:1b:2f:c2:4f:0a:77:46:9a:
                    24:63:dd:02:f4:03:37:19:6d:b8:35:3c:c6:5c:8f:
                    1c:a0:35:19:f4:ff:2f:ec:f8:ca:d7:d0:68:3a:b5:
                    5c:aa:8a:15:4d:5d:5a:ed:99:bd:5b:bf:8a:5d:d4:
                    54:14:31:ff:60:d6:6a:16:55:27:d5:91:b5:98:bd:
                    8a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:24:23:23:C2:40:AE:E7:8B:0E:02:47:4E:64:52:27:B2:E9:8B:34
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/miQjI8JArueLDgJHTmRSJ7LpizQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:1a:39:a2:bf:1c:cb:2e:90:f5:7d:a8:96:06:cf:bd:3d:c7:
         d9:11:8a:c8:bf:98:2d:3c:1f:fa:ab:84:62:a1:b7:cd:02:08:
         83:7a:f6:fc:62:80:93:cd:d2:81:e5:83:a0:74:c6:86:9a:c9:
         8f:a7:72:56:a9:e9:fa:ce:c6:d6:7e:97:d9:08:f0:b2:4b:43:
         bf:72:37:ee:bb:19:96:07:e7:b6:75:34:4d:03:d3:27:58:32:
         72:42:60:8d:6f:c6:47:82:f1:47:02:30:67:6d:79:19:6d:cc:
         26:17:7f:db:e8:de:eb:5f:f7:d5:d3:b5:20:14:a7:4f:4e:ef:
         94:a1:0e:7b:23:03:90:e4:dc:f1:55:c0:14:af:60:5d:17:5e:
         74:af:aa:68:10:f6:cd:39:41:2d:77:3b:09:14:23:d5:0c:7d:
         a9:bb:34:ae:6c:ae:5e:f4:65:0b:26:18:59:47:aa:b7:b9:d4:
         1f:3d:f9:a6:80:be:95:64:2e:22:fd:6f:23:83:48:01:2c:c2:
         8d:b5:77:d5:ba:f3:f0:f4:8b:80:2d:99:29:a2:01:96:20:38:
         8f:89:ed:ce:94:4c:64:59:9a:2b:e3:03:f8:0b:23:98:f0:41:
         e8:aa:88:78:29:ca:6e:1e:a1:13:55:db:c9:09:b0:82:04:00:
         98:a5:65:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----