Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/scDKCgBNNK0sQsCo69k7k7lL-o8.roa
File:                     scDKCgBNNK0sQsCo69k7k7lL-o8.roa (raw, json)
Hash identifier:          uLs9dNHs+OaBPUoloj/Eb07R65dEg0um/nPG6asRHt4=
Subject key identifier:   B1:C0:CA:0A:00:4D:34:AD:2C:42:C0:A8:EB:D9:3B:93:B9:4B:FA:8F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F77
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/scDKCgBNNK0sQsCo69k7k7lL-o8.roa
Signing time:             Tue 29 Sep 2020 09:56:59 +0000
ROA not before:           Tue 29 Sep 2020 09:56:59 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.80.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3959 (0xf77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:59 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B1C0CA0A004D34AD2C42C0A8EBD93B93B94BFA8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:74:16:d1:55:68:1d:6b:7f:f7:b0:2f:77:86:
                    81:d4:2e:ca:1c:5c:8a:bc:12:d2:eb:65:22:9d:71:
                    2b:08:eb:42:25:7c:16:f8:d6:d9:83:6f:30:88:e0:
                    f6:c2:e3:5d:de:33:f0:b7:67:40:d9:fd:09:83:1d:
                    59:49:04:69:6e:e5:0d:1c:67:c0:1c:45:7b:26:da:
                    09:3d:cb:fc:a0:05:76:4f:8d:01:3b:5d:14:49:84:
                    02:58:6d:3b:f9:59:f3:44:23:f4:09:fc:fe:20:84:
                    fa:ce:42:79:61:5d:2e:ad:49:db:2f:40:c3:46:d7:
                    92:c4:08:6b:1d:84:8d:1a:2a:9c:52:c5:b6:71:ab:
                    08:1b:2d:f0:d8:15:7d:1a:1f:9c:93:c8:4c:46:0f:
                    42:56:99:84:1a:2e:07:02:6e:19:0e:6f:08:f7:0d:
                    25:fc:e8:9c:11:18:e8:a3:08:31:fd:45:38:1b:14:
                    c6:12:fe:31:3f:14:24:af:d3:e0:18:05:aa:78:73:
                    44:57:97:6a:64:52:7d:6e:28:cc:84:9a:9d:d9:b9:
                    51:e6:9a:7a:33:1e:af:91:ab:1f:bd:a9:5e:41:27:
                    ad:12:e1:ba:f2:25:5a:8c:f4:20:10:c3:6f:4c:48:
                    ce:f3:ae:14:02:f7:6d:fc:2b:9f:41:c9:2b:a8:a6:
                    4c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C0:CA:0A:00:4D:34:AD:2C:42:C0:A8:EB:D9:3B:93:B9:4B:FA:8F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/scDKCgBNNK0sQsCo69k7k7lL-o8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         23:89:70:e4:0a:24:3d:3e:74:95:4c:2b:ef:7a:99:bc:fe:9f:
         b7:23:3e:50:05:9a:a0:ee:ae:0c:3d:38:b2:b2:8a:23:32:ef:
         4b:65:48:e2:7e:16:9c:3e:0e:65:95:62:aa:0b:07:18:1a:4d:
         d0:b2:0e:0c:3a:c7:50:e0:09:c0:5b:7a:87:4d:7d:2b:0c:d6:
         90:41:29:df:bb:68:e5:b7:74:33:d8:fb:78:8f:a7:01:e2:f1:
         60:70:68:20:04:1c:0e:03:15:e5:f1:8f:65:13:1a:da:f4:65:
         a8:96:0b:e4:81:5d:76:ca:bc:b0:eb:3b:29:de:19:fd:99:27:
         1d:e2:8e:6f:74:4a:b4:b3:c7:eb:dd:19:f7:68:6a:01:b6:99:
         92:b5:a1:da:63:72:96:04:c3:50:2e:02:51:db:c8:47:a3:6c:
         f3:9c:47:3a:fc:9b:f8:0c:4e:ad:0c:44:b6:9d:09:4b:37:cc:
         04:12:80:e9:d6:82:a5:0b:d5:67:21:eb:ce:67:1b:70:31:4f:
         c5:e7:c2:b1:56:75:a1:03:2e:75:35:81:9d:5b:d1:7c:5c:e6:
         d8:75:a2:9f:66:3b:52:79:3e:24:58:73:98:ce:20:8f:ba:44:
         3b:bd:d6:6d:71:d8:59:3f:8a:14:fd:57:50:08:c8:40:d6:f1:
         a9:ad:97:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----