Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nlH9b-OOazkel-6o2F9aby0060s.roa
File:                     nlH9b-OOazkel-6o2F9aby0060s.roa (raw, json)
Hash identifier:          z/J8l7ZiKpv3cMj9gksRoBiNxPI4TYquQHlWlZSf/k4=
Subject key identifier:   9E:51:FD:6F:E3:8E:6B:39:1E:97:EE:A8:D8:5F:5A:6F:2D:34:EB:4B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E01
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nlH9b-OOazkel-6o2F9aby0060s.roa
Signing time:             Tue 29 Sep 2020 09:55:14 +0000
ROA not before:           Tue 29 Sep 2020 09:55:14 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.101.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3585 (0xe01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:14 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=9E51FD6FE38E6B391E97EEA8D85F5A6F2D34EB4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9b:f5:d9:ef:87:19:d0:9f:ff:c7:23:30:3e:
                    d5:44:12:31:ab:c1:30:98:25:82:bb:37:05:fd:5a:
                    3a:a9:1a:8f:2a:b2:9d:c6:7d:a7:2a:61:b3:ce:44:
                    b9:c4:aa:99:06:d7:be:06:e2:ae:31:a4:b4:ed:84:
                    30:b5:33:d1:f4:c9:97:e4:26:d9:4f:32:48:f1:15:
                    c6:dc:a0:36:ef:9b:dc:af:94:b0:09:0a:16:7d:1a:
                    41:d5:fd:b9:49:d5:0a:e2:3e:f6:93:cf:d4:b5:0c:
                    23:e5:d0:40:f3:37:d0:82:39:e3:ec:8a:53:f1:0a:
                    23:fd:e6:3b:be:56:f5:86:5c:47:66:ef:f1:18:5a:
                    fd:85:5a:50:4e:84:e0:fe:3d:9e:5e:af:08:1b:74:
                    a1:88:a5:56:e7:de:53:a1:ba:19:41:8d:9a:54:fd:
                    90:28:e0:a7:1e:d5:0f:a9:1d:09:2c:23:8c:57:e8:
                    53:91:36:58:1d:4c:c0:37:82:22:1c:47:27:40:ae:
                    b3:33:c6:e6:75:2e:ea:b0:f9:d6:81:c9:e2:92:0c:
                    63:f6:ae:bd:23:19:fa:3e:05:00:ed:e6:44:57:e2:
                    b7:99:5d:b6:62:15:6e:6b:dd:f5:84:16:70:72:a5:
                    82:d4:0e:c1:f0:f6:bd:99:f2:6f:55:1a:a7:cd:0b:
                    12:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:51:FD:6F:E3:8E:6B:39:1E:97:EE:A8:D8:5F:5A:6F:2D:34:EB:4B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nlH9b-OOazkel-6o2F9aby0060s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:b4:ed:d8:01:84:31:b1:17:0b:c0:f4:f4:55:31:b8:bf:60:
         c5:c9:84:a8:1b:06:b4:69:26:47:d5:bb:73:9e:b2:16:0f:10:
         8e:1b:d5:cd:9f:47:9b:cc:b5:82:1e:e4:eb:b1:14:11:74:ac:
         3a:c5:a1:8d:9d:6a:a6:09:af:fa:c4:84:0b:d4:4a:77:73:82:
         37:aa:eb:cd:6b:85:e1:94:5f:7d:4b:2c:dd:e5:35:9a:e6:bd:
         6d:e4:88:ae:67:9c:62:4f:8c:12:a4:e1:30:c0:10:55:42:29:
         3e:e1:21:09:4f:d5:2c:1e:56:12:f1:d6:3f:ac:4b:c3:c2:59:
         4e:eb:f4:72:ba:57:54:c9:a3:8f:78:d6:63:9e:19:5a:1a:e6:
         ef:8f:67:85:9a:be:a8:97:eb:fe:1e:bd:f5:53:43:3f:0c:4e:
         92:70:89:8c:64:fa:91:95:fe:c7:1c:23:9e:f5:6c:23:20:b2:
         c9:cb:5f:72:a9:ad:1a:9c:2f:96:55:da:e6:e6:26:b4:e0:f2:
         52:39:32:1a:19:9c:17:86:8b:66:29:97:86:ad:cc:bb:7f:15:
         4c:46:f1:8f:c0:f4:cd:10:bf:2b:f0:70:2b:40:34:70:24:fd:
         b6:db:1e:c3:90:22:78:85:62:1f:2b:c4:6d:e8:70:c1:8c:44:
         ac:ae:00:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----