Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qoQ58iVnEPQfBIvHj5jekNy531s.roa
File:                     qoQ58iVnEPQfBIvHj5jekNy531s.roa (raw, json)
Hash identifier:          NHfsfcpJ+4pgOofDb8/4554DIQODgNpobSTfftYA0Os=
Subject key identifier:   AA:84:39:F2:25:67:10:F4:1F:04:8B:C7:8F:98:DE:90:DC:B9:DF:5B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       15F7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qoQ58iVnEPQfBIvHj5jekNy531s.roa
Signing time:             Sun 07 Feb 2021 12:07:32 +0000
ROA not before:           Sun 07 Feb 2021 12:07:32 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.92.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5623 (0x15f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:07:32 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=AA8439F2256710F41F048BC78F98DE90DCB9DF5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6e:8e:8c:d9:96:e9:6d:16:7e:0b:63:dc:ee:
                    11:16:b1:93:6f:9d:a8:53:ec:72:a2:61:7c:44:14:
                    b9:30:8d:d7:26:c1:78:fc:2f:e6:70:06:cf:f1:d7:
                    a3:e2:0e:6e:0d:5b:3c:c3:ff:cd:19:51:af:86:69:
                    78:b1:65:ac:f1:72:97:7a:65:82:51:58:23:68:6a:
                    d1:ad:fc:f4:62:30:b9:8e:0b:f2:8c:cd:e9:d0:6d:
                    eb:06:cd:d0:18:61:81:7a:93:8d:43:4a:83:dd:e3:
                    a9:3a:d2:6b:ca:bf:71:7d:8f:46:2c:29:d0:40:b7:
                    31:a1:65:48:a5:a9:89:8a:11:09:3d:9e:b4:cb:7f:
                    fe:55:55:c5:4e:31:27:df:19:1d:fe:a1:9e:90:ac:
                    5e:68:80:d4:bb:21:cd:22:cc:0f:c4:12:15:b9:ed:
                    d2:23:4c:30:17:25:cc:52:73:e3:b3:7b:d0:39:e1:
                    a0:3b:84:c7:4e:df:40:a6:59:72:77:f8:b3:88:62:
                    c2:36:f5:5d:68:a5:d0:de:99:95:33:e4:86:7e:92:
                    4a:e9:8e:0a:6c:94:d0:1f:c3:ff:eb:b5:c7:18:3f:
                    17:ef:28:cd:0f:3f:a9:a9:79:6f:25:02:91:e5:75:
                    aa:20:0b:72:be:c0:e6:5f:8d:b0:c2:6a:90:81:f1:
                    39:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:84:39:F2:25:67:10:F4:1F:04:8B:C7:8F:98:DE:90:DC:B9:DF:5B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qoQ58iVnEPQfBIvHj5jekNy531s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:2e:d6:d3:bb:5b:03:47:90:ce:0e:e9:37:19:31:b9:82:3b:
         62:11:af:eb:2f:f4:59:d3:c8:ff:f5:e4:80:fa:56:2c:81:ba:
         5f:b4:85:74:d2:30:87:f0:09:c6:4c:3d:ad:a5:74:2c:ae:93:
         5c:0a:dc:f9:ab:02:9d:10:7b:4a:51:03:18:00:ae:2c:62:57:
         e1:55:b2:38:fa:4e:a0:de:1f:14:d6:44:90:ba:4b:84:c8:bf:
         58:e3:f2:9c:2a:8b:d9:77:d8:c3:15:10:ad:a7:30:d1:66:18:
         2a:b9:0c:34:49:62:11:32:42:b2:56:8c:1f:66:c4:87:f5:a3:
         fa:15:ce:89:c2:a0:c2:d0:9c:f0:5e:9f:e7:4b:9b:2d:65:06:
         a9:bc:18:dd:0d:c5:f5:17:7b:ee:4e:fc:92:e0:90:c1:92:55:
         ef:14:38:df:cd:51:b2:e8:41:23:b7:b0:28:0c:7f:78:45:dc:
         09:fb:e2:d0:ba:76:61:93:f0:74:c7:dc:20:33:2b:be:f8:da:
         75:1d:05:a7:b6:7a:e8:f9:1b:1e:c7:c9:ee:17:48:03:1e:4a:
         40:38:97:2b:6a:46:f7:5c:a5:33:36:9d:45:40:e6:23:51:9e:
         14:b9:d1:ed:13:42:a2:98:4e:4e:62:74:43:62:96:6d:65:3e:
         5a:30:72:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----