Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vBgHzz22E3hnsxdmPhpLEcJtv88.roa
File:                     vBgHzz22E3hnsxdmPhpLEcJtv88.roa (raw, json)
Hash identifier:          HYhkk/hhtYvt7pqJM2sI7j0nhlygsn0VO43iu6XAUCw=
Subject key identifier:   BC:18:07:CF:3D:B6:13:78:67:B3:17:66:3E:1A:4B:11:C2:6D:BF:CF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0EE7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vBgHzz22E3hnsxdmPhpLEcJtv88.roa
Signing time:             Tue 29 Sep 2020 09:56:16 +0000
ROA not before:           Tue 29 Sep 2020 09:56:16 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.234.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3815 (0xee7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:16 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BC1807CF3DB6137867B317663E1A4B11C26DBFCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e7:95:32:51:42:94:5c:9d:07:1b:2d:f6:a7:
                    1d:07:43:ad:c6:6e:ed:29:e2:08:a4:d2:cd:9c:80:
                    91:97:84:d2:9e:25:c8:e2:2e:ce:c4:09:26:58:1e:
                    49:d7:85:26:73:da:3f:94:d3:41:18:59:eb:41:e7:
                    81:e9:59:e6:7a:6c:41:d8:d6:6d:f2:cd:dd:78:54:
                    e7:b2:b8:6e:b1:29:8d:98:9d:a6:8d:27:77:91:b0:
                    5f:72:de:12:a9:8b:70:3f:eb:d8:86:52:67:6e:a5:
                    80:cd:80:4a:9b:1d:90:15:31:92:bc:7f:88:46:8e:
                    d1:79:11:e3:ae:46:f3:03:47:a0:af:30:28:fc:27:
                    a1:98:7d:26:0c:dd:24:63:1a:32:f3:7d:fc:5a:e8:
                    4c:54:e8:35:3b:cb:cc:c6:f1:4f:49:14:5b:65:df:
                    73:bd:6d:99:56:df:8c:36:3c:86:bd:ae:da:96:80:
                    d5:68:52:4e:e8:94:e3:00:16:75:ba:68:38:a1:ff:
                    b5:a7:fa:f3:76:2e:62:4d:54:aa:9f:a7:cf:eb:92:
                    f8:5b:79:34:07:04:9c:76:42:df:cb:2b:6e:70:e7:
                    41:27:b6:1e:ae:06:6d:97:7f:32:4f:94:6e:a1:da:
                    0c:29:58:c1:1d:9b:4e:21:64:69:0a:12:78:f9:a8:
                    66:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:18:07:CF:3D:B6:13:78:67:B3:17:66:3E:1A:4B:11:C2:6D:BF:CF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vBgHzz22E3hnsxdmPhpLEcJtv88.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:6c:4e:d1:37:c2:60:68:01:75:f3:ac:33:e3:fc:35:06:63:
         b9:39:b2:5f:6b:21:96:08:e8:24:e4:f4:db:03:40:83:ae:b4:
         be:a3:76:db:9c:4b:3b:a6:7a:c1:bb:b3:30:f3:c7:d0:8a:80:
         37:05:29:91:37:84:c9:8f:43:ef:cd:ce:83:50:00:61:e1:d1:
         96:c4:dd:b1:70:65:7a:39:f7:7a:e7:1f:61:19:5e:27:56:9e:
         b4:1d:56:10:39:65:29:c6:a6:25:b4:c7:31:02:77:db:42:5f:
         fc:80:dc:11:7c:ab:d5:04:dd:fb:6b:72:c9:ff:0a:42:bd:97:
         4c:f8:26:d2:50:27:d8:29:df:4d:93:38:c9:09:9c:78:6a:91:
         75:51:ea:da:2c:3f:4b:b3:ec:15:fb:45:49:60:3e:a4:45:f0:
         68:df:a8:b7:ec:11:2e:a9:16:76:61:b4:3f:44:11:ed:22:7c:
         92:d0:cb:35:58:d3:31:08:2d:b2:86:c2:86:75:cb:3f:c0:e5:
         57:33:b4:0e:80:7b:87:54:4e:59:88:59:2d:ac:26:93:6f:2e:
         4c:36:7c:a6:06:d1:6c:34:28:fa:0a:48:f9:d6:6f:dd:81:09:
         62:7a:63:b4:21:7d:72:f4:d2:fd:92:a4:bd:b7:fb:a5:06:6b:
         d9:be:43:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----