Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qtTLEtpoufEwUT7dbHPNmnKotdc.roa
File:                     qtTLEtpoufEwUT7dbHPNmnKotdc.roa (raw, json)
Hash identifier:          QDKGJc7+LsEjgVl39E2YSJLXD8EimsbTnnrXRpGpeKw=
Subject key identifier:   AA:D4:CB:12:DA:68:B9:F1:30:51:3E:DD:6C:73:CD:9A:72:A8:B5:D7
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C70
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qtTLEtpoufEwUT7dbHPNmnKotdc.roa
Signing time:             Wed 29 Sep 2021 02:47:46 +0000
ROA not before:           Wed 29 Sep 2021 02:47:46 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.176.184.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7280 (0x1c70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:46 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=AAD4CB12DA68B9F130513EDD6C73CD9A72A8B5D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:97:fe:51:81:22:1f:05:35:83:96:db:61:0d:
                    20:a1:cd:37:7c:19:6b:3c:37:cc:48:d5:0b:76:af:
                    65:dd:b7:cd:6a:98:63:49:84:d0:f6:33:b2:9a:3f:
                    54:6e:08:80:3c:79:3b:b1:25:77:73:f4:6a:7a:df:
                    0d:dd:a7:30:9b:2e:91:3a:e6:a5:c3:70:9e:05:0c:
                    87:cf:59:eb:7c:c9:25:20:df:bd:c9:ab:d6:fa:cd:
                    7f:5d:78:ea:64:2d:1d:72:80:43:20:40:8d:9e:8a:
                    aa:89:73:7a:53:68:ac:64:ed:7c:69:ff:8e:ba:80:
                    d0:e8:3f:b7:2d:18:a7:6f:88:4a:4a:6f:7f:92:94:
                    0b:30:53:48:8f:20:22:44:f2:47:9e:0f:38:98:9f:
                    cc:b8:65:79:56:42:90:be:60:43:bf:32:1d:a9:fa:
                    97:45:07:f1:97:94:0c:61:a0:64:7e:f4:22:f7:ef:
                    cd:fc:ac:3d:09:7b:4f:86:e3:77:76:a9:a5:72:0e:
                    8f:66:39:37:54:bb:93:eb:d4:5e:17:6f:2b:10:64:
                    53:de:97:22:2c:74:70:aa:0a:a2:21:33:7d:4a:b7:
                    70:c4:66:f2:09:31:63:64:7e:58:3c:da:3d:23:a9:
                    c2:63:e0:a7:49:78:71:da:72:13:b5:48:17:03:5b:
                    51:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D4:CB:12:DA:68:B9:F1:30:51:3E:DD:6C:73:CD:9A:72:A8:B5:D7
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qtTLEtpoufEwUT7dbHPNmnKotdc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         35:b5:11:ce:a0:11:13:97:8d:1f:c3:bc:be:1d:a6:db:a9:9a:
         e3:22:76:43:a0:b8:cf:ca:cf:c1:5e:3d:02:22:0f:a8:15:b7:
         5f:d7:2f:74:7c:7d:63:b1:18:3e:f2:e6:da:3a:38:c4:f5:99:
         72:96:ae:81:18:f6:1e:76:0f:bc:3f:f5:27:69:66:30:9f:0e:
         69:12:b3:9a:5f:b5:39:ad:95:3a:3b:97:11:99:5a:88:d1:52:
         a0:f3:b2:d7:61:a8:e5:2d:2a:0a:fc:16:95:67:a5:21:4f:bb:
         f5:87:d8:1d:c5:02:f8:7d:1d:7d:bc:80:e1:5c:99:85:d7:ef:
         6f:72:13:e8:d8:f2:02:a0:e9:f6:69:1b:44:0d:8d:3e:6f:16:
         b8:ce:cd:d2:d0:cb:0a:e8:45:5f:3f:8c:16:2d:51:ff:b7:42:
         46:3b:84:54:e8:d6:79:0f:a4:46:5b:a6:35:86:11:74:8b:73:
         4c:a8:ab:60:0b:f6:18:00:62:e1:53:5e:66:81:ad:a0:7f:85:
         42:d8:da:6b:93:45:01:fa:0f:f1:ff:00:53:25:41:19:e5:29:
         42:27:d5:72:9b:81:34:05:f9:bf:ea:6e:0f:2f:32:47:c4:52:
         08:13:88:34:34:8a:3f:dd:ef:1a:8d:f1:4a:9e:b6:ff:da:e1:
         e1:be:d0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----