Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sZhkbt2QQ7B_Hd9j6ugPkGzL6lY.roa
File:                     sZhkbt2QQ7B_Hd9j6ugPkGzL6lY.roa (raw, json)
Hash identifier:          C97kc51ta3uzzo1Gf7kgCaIBcdrc2lwDvBCU40WqzO0=
Subject key identifier:   B1:98:64:6E:DD:90:43:B0:7F:1D:DF:63:EA:E8:0F:90:6C:CB:EA:56
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C4E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sZhkbt2QQ7B_Hd9j6ugPkGzL6lY.roa
Signing time:             Wed 29 Sep 2021 02:47:35 +0000
ROA not before:           Wed 29 Sep 2021 02:47:35 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        106.1.24.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7246 (0x1c4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:35 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=B198646EDD9043B07F1DDF63EAE80F906CCBEA56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8c:75:17:eb:43:b6:c9:99:29:9f:1c:39:81:
                    1c:a4:e3:8e:43:55:d4:1a:22:3a:02:e6:0a:ed:22:
                    af:05:e4:bb:b8:2a:e0:4c:be:ed:73:39:a8:2a:14:
                    3a:b8:72:1b:e8:57:c9:c1:11:bb:b5:f0:55:6a:4c:
                    e2:13:a2:a9:1c:70:09:36:21:50:83:78:97:84:60:
                    dd:b4:7a:c6:14:b2:4d:e7:a1:f9:13:36:26:60:19:
                    11:f2:36:a3:e7:cb:f0:ee:68:a0:45:e4:0c:07:db:
                    41:c3:72:f7:87:58:35:3b:23:61:cf:d2:1c:08:7c:
                    6e:79:61:96:e8:f3:fe:c9:bd:15:f6:37:b5:9b:91:
                    e5:88:fd:51:1c:5a:50:e9:9c:25:62:96:0a:76:d5:
                    fe:5d:24:1f:1b:4e:a8:6e:eb:ea:4f:85:40:5a:6a:
                    9e:a0:33:25:50:eb:2c:fa:d4:10:57:a6:e4:f4:06:
                    57:10:ab:f6:2e:91:a6:3c:a1:9a:8d:1a:fd:24:9a:
                    2d:ce:5c:75:6b:57:e6:62:de:9b:17:5b:33:0f:4a:
                    c9:8b:50:47:b7:69:e5:e4:52:51:30:a0:a6:cb:28:
                    d0:88:8a:fd:03:e7:52:cc:c4:6e:e8:88:94:f5:bf:
                    8b:98:83:1a:3f:4b:e4:64:d4:ad:97:02:2b:3c:a4:
                    a4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:98:64:6E:DD:90:43:B0:7F:1D:DF:63:EA:E8:0F:90:6C:CB:EA:56
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sZhkbt2QQ7B_Hd9j6ugPkGzL6lY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7c:bf:cd:02:fe:ac:77:b1:40:f5:76:05:f7:94:89:81:29:ab:
         42:1c:16:78:19:91:a8:12:49:5f:0c:a0:d9:72:58:3d:2b:d6:
         98:6e:1f:1e:fc:59:eb:3f:10:35:fd:0d:6c:1d:88:9e:72:6b:
         e8:66:22:33:3b:fe:ce:5b:81:5c:9b:60:2f:b5:fb:a3:1a:ad:
         b9:42:40:13:a4:07:f0:53:bc:c0:54:81:56:d4:c8:c8:af:74:
         36:90:f4:e4:0a:01:eb:18:6a:a4:01:36:33:f5:83:36:5d:af:
         5f:a7:10:b7:c5:d2:64:47:96:bd:56:f6:8c:26:10:32:9c:6f:
         00:08:b4:65:45:4a:ca:f6:78:e2:d1:36:05:c2:5f:09:23:5b:
         7f:9e:88:4c:42:d6:93:63:86:7b:c3:9f:80:9f:64:89:e7:a4:
         d9:20:81:13:66:e5:9d:ae:05:00:b0:dd:02:e4:fd:ec:ca:c0:
         78:27:aa:21:08:4e:6c:0b:3b:df:56:cb:b1:72:cf:35:75:ff:
         bb:65:04:f5:69:40:dd:f0:43:50:c7:c7:6a:67:89:33:bd:ec:
         5e:e5:e8:22:6d:f4:fd:1e:29:4f:0c:3f:3c:36:e4:4c:b2:72:
         bc:03:45:63:b2:5f:e8:ea:b2:32:d5:dc:9c:25:34:4c:c1:ad:
         05:36:fe:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----