Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rHI21t3ErgUgkEyOYAyRyagmukA.roa
File:                     rHI21t3ErgUgkEyOYAyRyagmukA.roa (raw, json)
Hash identifier:          Hfh0NeT3jUz8/5xByoTUvxxP+nJRakTn1ANpUenQKFc=
Subject key identifier:   AC:72:36:D6:DD:C4:AE:05:20:90:4C:8E:60:0C:91:C9:A8:26:BA:40
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       18AF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rHI21t3ErgUgkEyOYAyRyagmukA.roa
Signing time:             Sun 07 Feb 2021 12:52:10 +0000
ROA not before:           Sun 07 Feb 2021 12:52:10 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        118.232.160.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6319 (0x18af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:52:10 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=AC7236D6DDC4AE0520904C8E600C91C9A826BA40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:ff:75:cd:2c:75:7a:4f:f9:e5:55:c0:f3:ca:
                    d3:dd:cd:95:e9:a2:d2:4b:b4:57:be:2a:0b:8b:01:
                    06:06:c5:53:52:a1:7f:cf:5e:fb:2e:3c:fa:76:15:
                    0b:0e:46:69:99:87:a5:55:ac:a5:d5:de:4a:8e:3f:
                    75:b7:a8:da:5b:b4:ba:bc:d2:37:fb:6e:f0:fb:aa:
                    5b:90:89:72:bc:e9:aa:39:16:86:03:22:0a:8b:8c:
                    cf:c4:ee:76:15:90:c0:ef:ab:45:a0:1d:06:b4:cc:
                    4b:8c:0e:b2:84:77:9c:9b:3d:73:be:d8:e6:e3:f7:
                    2d:a7:69:b1:e6:58:2c:74:ce:7f:12:21:3b:74:e4:
                    28:70:e1:35:8a:0a:62:f9:2d:34:05:5a:be:65:2d:
                    1c:68:bf:4d:43:29:25:33:54:50:33:c6:58:7c:b7:
                    16:e5:a3:b1:a4:4f:df:fa:d3:35:70:7c:cb:88:6d:
                    5f:d2:67:1b:c3:aa:9e:67:16:f5:b9:9f:e9:b0:a2:
                    4b:d2:96:ab:c7:fa:a2:28:8c:3b:9f:f5:2f:91:a3:
                    f1:56:68:36:aa:cf:cb:a1:b4:54:fc:44:62:27:df:
                    8e:1f:4b:a8:fb:85:be:0b:54:4f:5c:49:4c:e8:24:
                    e8:af:10:86:b1:8f:7d:1c:aa:d0:b6:bd:0e:fb:46:
                    26:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:72:36:D6:DD:C4:AE:05:20:90:4C:8E:60:0C:91:C9:A8:26:BA:40
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rHI21t3ErgUgkEyOYAyRyagmukA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4c:f4:63:ad:50:c7:87:0d:a8:3d:e2:73:9f:af:48:97:f3:8f:
         5a:5c:7c:05:d3:40:56:62:90:9b:ea:88:67:b3:9f:aa:50:9e:
         d7:09:e5:24:b3:54:11:1f:36:a6:b1:bb:f0:52:a2:94:b5:d9:
         f2:a6:a5:b8:63:89:63:d7:65:dd:44:01:c0:18:20:59:2d:a7:
         15:81:3e:b7:95:4f:a5:b2:5d:4b:5f:d7:03:56:2b:fb:23:4b:
         d7:fd:8d:e0:0f:0c:74:88:1c:d3:e4:91:bf:8c:df:e4:6b:39:
         10:2a:7d:c6:99:0e:0e:76:ed:9d:f5:ee:b7:1f:49:7a:82:02:
         27:6f:c5:a1:89:17:2f:d4:7e:83:aa:23:11:a1:2d:de:6e:7b:
         f3:32:b5:45:8e:f0:3d:1c:c9:6f:53:ac:e3:65:af:4c:ae:15:
         49:4d:dc:e3:a7:1c:d2:bf:36:e0:f0:68:8b:2e:f4:a3:57:d2:
         4c:09:d6:b5:3d:6a:5d:6a:ff:c9:a3:c6:0f:12:c2:04:5e:c7:
         d2:4d:03:2d:77:5b:91:5f:b8:ed:27:de:c6:43:7f:20:cf:7d:
         72:3d:59:f5:ea:3f:c2:ca:8c:6f:ac:c2:bc:89:26:80:3a:66:
         65:a0:3b:f6:9c:96:51:d4:b2:fa:89:34:25:c3:a0:9a:7e:2b:
         3b:18:65:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----