Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oh5jWBHYpdtWzl2BNhn8Bh-Latg.roa
File:                     oh5jWBHYpdtWzl2BNhn8Bh-Latg.roa (raw, json)
Hash identifier:          UaYqwZrNPIPs53OwixOjAXIi31OGAkC8EXqgUWyKraA=
Subject key identifier:   A2:1E:63:58:11:D8:A5:DB:56:CE:5D:81:36:19:FC:06:1F:8B:6A:D8
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0EDB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oh5jWBHYpdtWzl2BNhn8Bh-Latg.roa
Signing time:             Tue 29 Sep 2020 09:56:13 +0000
ROA not before:           Tue 29 Sep 2020 09:56:13 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.176.152.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3803 (0xedb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:13 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A21E635811D8A5DB56CE5D813619FC061F8B6AD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d4:df:db:82:2a:cb:2e:89:50:48:ae:12:38:
                    5f:f5:b1:b7:9d:58:94:a8:48:28:7f:36:cd:56:e0:
                    b8:0a:f3:5a:76:ad:a7:aa:ea:81:f0:b6:5a:8f:a0:
                    ff:5c:e5:71:20:a2:a0:9f:8b:55:21:5a:e7:b8:b0:
                    d1:82:2d:08:b8:b5:04:37:47:50:71:75:ce:d1:0e:
                    ea:95:0c:a3:c9:57:8e:ef:25:1e:07:6b:ce:49:b4:
                    5b:3b:96:e6:58:cb:91:b3:3b:c1:43:51:6c:e7:ab:
                    1c:2b:6c:9e:d6:91:47:00:7e:80:62:41:7c:9a:be:
                    c9:49:a4:9b:f3:b4:ae:23:bd:3d:bb:00:c2:0b:87:
                    03:e6:6b:a0:ce:9e:4f:ce:5e:a7:d4:38:fa:ff:6b:
                    2b:39:fe:63:b8:6f:fb:c0:f1:60:ca:0a:d5:0a:b0:
                    3f:5e:9f:fd:1a:04:fa:ac:6b:af:83:97:5c:0b:f1:
                    37:8c:51:46:48:c0:77:4a:6f:11:28:20:3a:ae:e9:
                    7f:db:ad:44:0d:e3:b1:c1:3b:bb:05:74:32:7a:cd:
                    09:f6:82:9d:bf:f6:ad:d0:67:db:65:a3:fd:97:a7:
                    ed:f8:d9:4f:14:2b:58:b4:59:08:44:da:96:5d:8b:
                    fc:8b:26:42:83:eb:b1:16:8e:fb:1e:85:e9:55:32:
                    b6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:1E:63:58:11:D8:A5:DB:56:CE:5D:81:36:19:FC:06:1F:8B:6A:D8
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oh5jWBHYpdtWzl2BNhn8Bh-Latg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:7f:da:b6:eb:75:8a:02:eb:dc:d8:0f:3c:2f:f6:74:c4:7e:
         26:d9:c7:c1:c2:75:ad:48:87:c0:0d:7d:07:14:3c:60:4a:ab:
         b0:86:31:0c:09:5c:82:ed:73:60:56:93:2b:86:f4:5a:55:bd:
         54:a8:29:ad:5f:ad:4f:5f:46:6b:45:ca:ce:9f:f0:f5:02:f0:
         02:37:65:e2:22:5c:a6:cc:95:0a:de:11:e6:53:cc:ac:82:05:
         34:b0:75:d2:4e:37:86:84:a9:10:f1:13:bb:b6:27:d5:6c:56:
         5b:84:e9:8f:dc:83:82:b9:57:86:8a:f0:70:68:ea:eb:63:91:
         61:73:c3:65:56:16:23:bc:ec:6a:64:96:32:f5:63:08:62:af:
         8a:8b:3d:19:62:6d:7e:96:b4:ce:aa:f0:f8:22:77:18:d3:72:
         d8:c8:b7:32:ea:59:db:8f:0b:90:f3:c7:76:36:43:d1:04:b1:
         00:a8:68:14:de:da:b5:1c:d3:5f:e9:ea:7f:93:11:9d:74:87:
         63:b7:e5:10:f0:dc:bf:10:01:c4:66:46:d2:1b:de:59:ae:05:
         b2:d8:03:17:a2:54:5b:13:e2:a1:d9:da:ff:d8:23:fb:09:52:
         28:5b:33:08:a4:6a:d5:46:86:46:26:d2:07:3a:2e:2b:6f:7f:
         e1:fa:d7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----