Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qxO9WreJuSsufhtBrAMyrvbX2Ck.roa
File:                     qxO9WreJuSsufhtBrAMyrvbX2Ck.roa (raw, json)
Hash identifier:          VMr31bvOF1iEZpdR/yGHxZp60AZ5KjHANBj3Rulf2tA=
Subject key identifier:   AB:13:BD:5A:B7:89:B9:2B:2E:7E:1B:41:AC:03:32:AE:F6:D7:D8:29
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0DE5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qxO9WreJuSsufhtBrAMyrvbX2Ck.roa
Signing time:             Tue 29 Sep 2020 09:55:06 +0000
ROA not before:           Tue 29 Sep 2020 09:55:06 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.233.252.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3557 (0xde5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:06 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=AB13BD5AB789B92B2E7E1B41AC0332AEF6D7D829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:de:c0:df:cb:ad:13:01:da:9d:eb:3b:5c:cf:
                    fe:5d:af:d8:3f:90:62:75:7d:80:78:35:85:b6:b7:
                    63:3a:98:7a:d6:64:bd:2a:5d:6b:49:3e:3c:b4:df:
                    21:72:e3:7d:a4:b3:a0:36:b6:0c:ea:28:85:b3:3f:
                    14:ac:17:8e:cd:8c:fb:5f:30:23:dd:a8:4b:4c:f3:
                    6c:c4:d1:82:cc:ba:6e:a8:06:a5:c5:1d:17:a6:a4:
                    d6:52:98:0a:7c:08:75:8c:f6:2f:69:c0:66:71:6d:
                    c8:10:53:d2:64:a4:25:88:85:08:0b:73:6d:a8:bf:
                    63:5b:36:3f:37:1f:5e:50:34:21:d9:67:d2:e6:7b:
                    a7:d2:eb:c7:c7:cb:07:03:54:12:4c:3e:67:8a:2e:
                    75:de:a3:85:1b:b9:4d:f7:7d:88:69:e7:e3:95:59:
                    45:c5:84:06:98:57:a2:44:62:6c:a2:2b:fb:23:7e:
                    56:b1:2a:f7:77:f2:ee:a1:7e:a7:a9:d4:ae:10:8f:
                    d5:6e:bd:f2:52:1d:a6:0e:b4:35:c0:45:ed:61:ba:
                    84:87:12:3b:1f:04:9e:69:0d:17:96:32:e0:e0:b5:
                    36:e6:9b:b4:94:a9:81:1a:4d:56:e1:cc:fb:bf:76:
                    d6:1c:04:40:f7:32:ba:06:6e:8a:48:b4:ad:a1:21:
                    de:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:13:BD:5A:B7:89:B9:2B:2E:7E:1B:41:AC:03:32:AE:F6:D7:D8:29
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qxO9WreJuSsufhtBrAMyrvbX2Ck.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:a5:d5:9f:c7:2a:cb:4b:25:c0:5f:af:c5:e0:b2:44:64:59:
         21:5d:46:a9:61:87:3f:5a:d2:40:73:8e:e9:4d:2d:ad:e5:01:
         ed:a3:38:6f:b9:d5:88:93:6f:73:09:33:86:2b:e8:6c:62:af:
         70:6f:58:fe:07:73:4b:b1:fe:00:96:2a:60:d5:e7:f1:9d:57:
         ec:fa:ea:63:a0:e3:43:a3:6b:d1:7a:21:96:69:e9:4d:f2:99:
         74:45:10:da:05:e8:1a:07:0f:f3:d0:1c:73:49:4b:e7:b7:65:
         d8:10:7c:d3:fe:d0:f7:a7:ad:a7:7a:d8:82:d9:8f:a6:03:58:
         7f:09:9e:b4:77:46:b2:d0:df:c2:a7:aa:30:dd:23:2e:28:2b:
         2d:ff:a5:26:db:db:56:0e:d1:ba:ce:89:1d:88:0e:9b:d3:1b:
         7f:4c:a7:a7:e1:08:d3:fc:8c:78:35:94:6f:22:01:98:f8:73:
         c0:75:32:0c:62:75:ef:a9:05:7c:33:8e:7a:5c:f7:e5:c4:70:
         84:e8:ed:a5:8e:ee:b0:42:74:32:82:d9:94:3c:66:dd:9f:0f:
         c1:de:b8:5a:97:45:36:c1:9d:28:2c:2a:c8:a0:92:d9:7f:5f:
         db:70:70:69:21:75:51:15:46:66:10:89:f3:e3:29:d3:07:7d:
         a0:5c:26:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----