Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vf5TZ_OH0oKto1TRjPIEOaSqj4Y.roa
File:                     vf5TZ_OH0oKto1TRjPIEOaSqj4Y.roa (raw, json)
Hash identifier:          vZwQ8r9e1cxo6p5P2YBNPO39fS6RNu2/XWzzWIgBlJ0=
Subject key identifier:   BD:FE:53:67:F3:87:D2:82:AD:A3:54:D1:8C:F2:04:39:A4:AA:8F:86
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F53
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vf5TZ_OH0oKto1TRjPIEOaSqj4Y.roa
Signing time:             Tue 29 Sep 2020 09:56:48 +0000
ROA not before:           Tue 29 Sep 2020 09:56:48 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.176.228.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3923 (0xf53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:48 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BDFE5367F387D282ADA354D18CF20439A4AA8F86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7e:1f:d7:12:3a:9a:f2:7c:48:f5:d2:33:5b:
                    03:1b:99:5b:e3:97:75:df:7e:41:08:d4:f0:33:5d:
                    e0:c8:44:ee:7f:87:d8:ed:50:07:23:2b:b2:e2:f6:
                    0f:aa:9b:81:b0:c7:a6:12:c0:cc:4f:bb:d7:fc:09:
                    c8:63:9f:3c:a3:a0:24:52:0f:a7:fb:7e:c2:b7:0f:
                    2e:70:fc:99:21:db:89:a2:49:a2:29:39:e8:cb:ed:
                    c8:d8:1e:a0:38:15:44:8d:29:b2:2d:26:02:4d:b7:
                    d6:0c:5d:1c:fc:45:68:8c:ea:e1:71:98:f5:0f:42:
                    6b:c1:f6:03:0b:3b:49:10:9e:54:9e:2f:12:75:51:
                    e3:6e:e0:d2:56:a8:a6:58:19:4f:f5:2e:dd:f0:b8:
                    ca:c9:c1:27:91:b1:5e:71:5e:6b:da:dd:23:19:fe:
                    4e:e2:5b:61:bf:51:73:3f:cb:ff:14:8e:96:b0:da:
                    92:78:66:a0:80:bf:a0:3c:0c:b2:fd:8b:2f:8a:0b:
                    07:38:87:17:0e:fa:79:c5:c7:a6:91:01:ee:80:32:
                    ba:62:a4:41:f3:23:7d:89:d7:5f:79:4e:27:79:20:
                    33:14:8f:5e:9d:15:2e:53:36:19:47:7d:83:5d:71:
                    94:61:f2:ca:ef:cc:7c:12:de:2d:67:f9:06:62:75:
                    84:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FE:53:67:F3:87:D2:82:AD:A3:54:D1:8C:F2:04:39:A4:AA:8F:86
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vf5TZ_OH0oKto1TRjPIEOaSqj4Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:10:66:1b:45:6e:10:68:29:7b:29:54:a3:ab:7e:0c:9f:10:
         14:aa:f1:d6:48:d2:bd:cd:fa:47:15:97:91:8a:d4:64:10:e5:
         89:20:b9:f8:d2:02:a6:22:0d:0f:90:73:a0:80:6d:06:b0:9e:
         fd:7b:e4:76:4d:56:ca:10:63:56:32:d4:23:27:ab:97:ab:22:
         fb:3b:5a:22:7e:6e:ff:3c:00:57:95:8c:df:d2:5d:42:fb:46:
         8c:88:c4:7b:0f:cc:ca:4f:24:e5:42:a8:24:9e:d7:f1:07:c6:
         fd:8f:64:e8:b4:96:ca:3a:b6:a8:77:8b:ec:96:34:1a:17:d6:
         3e:08:9e:f2:d8:a4:5e:69:50:cd:d7:7f:cf:bc:d7:d2:d2:c9:
         6a:63:5f:fd:41:28:ef:5a:d6:6e:42:c2:c0:85:fc:14:14:81:
         62:f4:8a:09:44:0f:81:82:3b:9a:0d:7c:35:52:aa:17:09:8a:
         c5:79:86:16:54:b9:5d:5b:08:7e:f7:d5:4c:22:64:40:a4:a9:
         12:26:72:4d:e5:c3:0d:93:47:cf:ad:86:0f:46:6d:f3:4a:5d:
         f0:f8:ea:bf:0a:f5:cd:0a:7d:e0:c9:e2:23:31:d6:97:34:dd:
         3b:e7:a1:04:d9:e6:82:8a:2d:3d:d6:da:a2:c8:0f:a4:4c:39:
         e2:e8:a2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----