Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uKw8HOAa18TztbAB7BFu_1jqh3o.roa
File:                     uKw8HOAa18TztbAB7BFu_1jqh3o.roa (raw, json)
Hash identifier:          khrpAVEHSByumbaV39exv8lQqpjrHanTzRJmM0gqYCI=
Subject key identifier:   B8:AC:3C:1C:E0:1A:D7:C4:F3:B5:B0:01:EC:11:6E:FF:58:EA:87:7A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F23
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uKw8HOAa18TztbAB7BFu_1jqh3o.roa
Signing time:             Tue 29 Sep 2020 09:56:32 +0000
ROA not before:           Tue 29 Sep 2020 09:56:32 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        45.64.30.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3875 (0xf23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:32 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B8AC3C1CE01AD7C4F3B5B001EC116EFF58EA877A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:58:f9:74:17:1d:27:cb:f2:bc:74:0b:e3:16:
                    e4:d4:e5:05:30:f1:b4:6e:fd:4a:9e:de:de:6e:73:
                    a4:32:43:1c:d5:84:19:eb:9c:d1:c1:b4:6a:ab:60:
                    db:b9:c4:7b:7e:76:2d:d4:36:43:14:e3:98:66:de:
                    b2:37:32:a4:01:5d:da:05:3b:1a:1d:0b:02:e0:a4:
                    de:ed:d7:ec:15:6d:be:e1:fe:a7:f3:12:63:95:3e:
                    eb:dc:0d:a4:bf:f0:eb:08:92:be:b0:01:67:53:3b:
                    f4:cd:16:1b:39:71:7c:d3:5e:dc:3d:54:41:b2:f1:
                    98:be:22:07:78:f6:ae:89:a9:f9:ba:eb:69:c3:56:
                    48:e1:d0:0f:c0:bf:ee:ec:8d:0f:5a:2f:f4:83:62:
                    2a:3b:1a:35:77:1d:1d:a3:39:31:7b:32:03:95:f5:
                    1d:c2:eb:c8:00:ac:b3:cf:e0:a9:40:f1:81:cc:53:
                    95:b8:51:88:38:25:0a:a8:dd:13:6c:6d:e2:aa:0c:
                    bb:c7:64:b2:83:7a:e0:3d:09:fd:07:aa:99:fb:43:
                    42:8e:7d:5f:a1:29:65:0f:c6:2a:cf:b7:e5:b4:04:
                    a8:8f:c7:81:cb:24:83:1c:28:6c:f6:89:c6:d4:62:
                    d6:98:a9:65:6e:e3:fd:3e:99:18:a6:5e:cf:4a:57:
                    13:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AC:3C:1C:E0:1A:D7:C4:F3:B5:B0:01:EC:11:6E:FF:58:EA:87:7A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uKw8HOAa18TztbAB7BFu_1jqh3o.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.64.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:c8:27:c0:13:0c:3b:97:82:09:65:49:2b:cd:96:a6:87:f5:
         e0:4d:c9:f2:45:a7:5e:49:e8:23:36:87:4b:2e:9f:49:40:a9:
         f4:a7:f9:b6:eb:e0:11:2b:3b:bc:3f:12:06:ce:d6:c8:68:c7:
         ad:3c:a8:34:72:73:50:35:7f:e8:41:75:f9:84:6a:1f:e5:ec:
         96:96:58:c2:a0:ba:fa:00:3a:69:ff:11:08:e3:e9:99:a0:7a:
         62:63:9b:ee:dd:32:79:a9:87:c0:37:75:98:5d:79:58:81:48:
         de:6b:af:bc:28:30:4e:9d:7f:c8:aa:ed:da:58:9d:8d:87:a0:
         27:dc:5b:cb:16:db:05:17:8a:88:80:ec:6a:ab:43:79:fa:34:
         6f:26:16:f9:00:4e:79:35:04:78:d6:97:0e:c5:e6:50:47:93:
         b5:19:03:57:77:97:99:5f:62:51:d0:81:7c:11:81:e3:de:20:
         d0:93:39:98:ba:aa:79:ed:43:db:cd:9a:6e:92:97:f7:e6:ca:
         27:33:a8:d0:91:a5:f8:32:28:b2:a0:75:38:1a:f7:a8:91:af:
         31:be:6d:85:69:c8:a8:28:ad:50:06:8a:6e:90:41:88:3e:5d:
         50:3a:ac:a6:b0:f4:95:33:21:95:89:03:ea:dd:75:7c:58:76:
         88:40:52:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----