Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w98_ch9BTu9chIIYriIHx8yWclA.roa
File:                     w98_ch9BTu9chIIYriIHx8yWclA.roa (raw, json)
Hash identifier:          4HHITexQhEw2IPxql7uYcMkdUZrJSFO0UeL9HAUCZFY=
Subject key identifier:   C3:DF:3F:72:1F:41:4E:EF:5C:84:82:18:AE:22:07:C7:CC:96:72:50
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F5B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w98_ch9BTu9chIIYriIHx8yWclA.roa
Signing time:             Tue 29 Sep 2020 09:56:51 +0000
ROA not before:           Tue 29 Sep 2020 09:56:51 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        211.76.119.128/25 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3931 (0xf5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:51 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C3DF3F721F414EEF5C848218AE2207C7CC967250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5d:d7:c0:e1:41:82:03:a6:39:90:72:d0:7f:
                    76:29:27:31:1f:40:dd:45:64:53:42:ab:f9:b1:9d:
                    c0:68:ef:c3:20:52:41:bf:30:93:bf:4a:5a:e4:15:
                    97:7c:6c:d1:5f:79:e1:ee:82:f0:59:7a:1b:78:97:
                    4b:c5:e2:38:13:76:0f:ee:b1:b9:cf:a5:ba:f7:b2:
                    e8:76:b7:c0:ac:0f:fb:cc:1a:e2:a4:ee:1c:76:fc:
                    45:5e:0e:4d:44:0a:f1:b7:1d:c0:c2:14:16:d1:f5:
                    55:a9:25:d8:e7:71:78:02:1d:78:41:55:e2:f7:93:
                    0c:1a:62:be:2c:3b:92:1a:a9:1e:78:21:b5:6b:c9:
                    ec:bc:23:1c:bf:48:af:44:1f:13:a6:42:f6:9a:82:
                    9e:d7:a1:94:19:97:d3:40:f1:6b:63:fc:f0:6d:5b:
                    d0:f9:6b:45:8a:09:73:e0:e8:cd:61:80:5a:75:3b:
                    36:1d:73:a9:f3:f6:dd:74:a1:23:fb:e7:07:4b:80:
                    2a:f1:00:25:68:59:e0:a8:4a:bb:28:db:84:b6:26:
                    ea:24:9a:3b:4c:71:c6:ae:87:9d:a1:c1:a0:9e:9d:
                    57:31:b3:b3:a3:72:dd:a2:b6:6a:56:34:ef:bb:d6:
                    bb:31:21:53:6a:d2:31:1b:4e:08:71:b3:8a:d8:50:
                    7d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:DF:3F:72:1F:41:4E:EF:5C:84:82:18:AE:22:07:C7:CC:96:72:50
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w98_ch9BTu9chIIYriIHx8yWclA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.119.128/25

    Signature Algorithm: sha256WithRSAEncryption
         a7:0e:08:b3:7f:b7:07:73:36:92:dd:06:26:b2:64:d5:22:f3:
         3f:23:ff:7c:a4:38:3d:ec:cb:c6:f9:87:07:9e:3e:2f:80:af:
         5c:d9:87:13:a1:38:0b:91:6d:b4:fa:45:60:82:df:f4:ba:7b:
         59:cf:f6:be:84:95:82:76:48:fd:ac:7a:1f:04:fd:5e:52:4b:
         ff:8c:21:83:18:7f:bf:e9:ff:e2:55:ff:06:43:8a:cd:f5:22:
         15:d8:40:d8:6e:a1:85:db:3b:3b:ce:d6:55:da:8e:f7:c5:08:
         26:be:b9:37:f7:1f:66:43:27:0c:b4:80:f8:7f:b5:01:b4:04:
         ef:a8:16:fe:89:2c:a1:7c:23:0a:88:27:7c:4c:89:76:4b:bc:
         7f:50:e5:03:37:a0:36:b2:6c:8b:55:83:f3:26:37:d3:46:b7:
         cc:e0:92:e8:c1:56:e1:f2:29:7e:ce:03:cb:b0:50:eb:d2:c6:
         8f:7a:0e:49:8e:c0:32:b0:95:54:89:67:0b:b4:4c:78:9a:a4:
         e6:5d:34:8e:e6:20:c9:59:14:b9:27:59:ca:89:db:71:66:31:
         62:5e:bf:81:93:c9:2a:47:fb:a3:a7:86:3d:70:96:e9:c9:83:
         6f:2c:76:22:bb:9c:cb:8c:eb:f4:df:7d:59:d3:88:3d:46:40:
         78:7f:f5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----