Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/x2b3IjBskRIkRZ-QN_diyF3OIh8.roa
File:                     x2b3IjBskRIkRZ-QN_diyF3OIh8.roa (raw, json)
Hash identifier:          T0F5G7/I499AfXUmmt40DU32zB5M829YQmIwQFC5w2g=
Subject key identifier:   C7:66:F7:22:30:6C:91:12:24:45:9F:90:37:F7:62:C8:5D:CE:22:1F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F44
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/x2b3IjBskRIkRZ-QN_diyF3OIh8.roa
Signing time:             Tue 29 Sep 2020 09:56:43 +0000
ROA not before:           Tue 29 Sep 2020 09:56:43 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.200.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3908 (0xf44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:43 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C766F722306C911224459F9037F762C85DCE221F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:41:57:4c:b6:d8:e0:d0:e3:a0:15:53:2e:fb:
                    a9:6c:6f:b7:23:64:ae:06:96:6a:6d:41:97:db:51:
                    f2:b0:61:3b:60:f8:17:c2:61:e8:ee:c6:54:3b:97:
                    de:09:cf:16:c4:99:0f:c5:f9:06:96:e5:3f:40:b0:
                    1e:ae:6c:35:9c:bd:fa:a8:c0:d2:ba:88:b5:3a:55:
                    e4:52:05:51:77:67:0f:7a:90:5d:3a:17:71:03:cd:
                    0f:dc:74:39:67:30:15:21:71:c7:5a:9b:9f:d3:a8:
                    31:94:af:ff:f3:45:a3:3e:11:6a:6b:93:01:6b:ba:
                    46:a7:ce:9e:dc:6f:ce:02:53:3d:26:d9:23:19:14:
                    b4:63:7d:08:33:02:ad:bb:1c:c8:54:d7:43:28:5f:
                    67:8d:8b:3c:97:e3:4d:ca:14:90:50:2a:b2:ae:33:
                    44:86:a9:11:bb:80:50:d4:6f:2e:e0:a4:a2:3a:1a:
                    ab:50:e9:58:48:28:aa:3d:48:9a:13:fc:43:a0:4d:
                    2e:9e:fc:c7:60:85:09:9d:fa:33:6b:cc:07:ea:f3:
                    77:7c:af:f8:74:9b:c7:38:08:1c:57:4b:28:ed:b1:
                    c4:c8:0d:f7:64:67:6d:d9:a4:06:9d:55:24:77:35:
                    db:7b:f1:0f:c6:e9:7f:b0:c4:6e:02:1c:8b:95:7a:
                    84:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:66:F7:22:30:6C:91:12:24:45:9F:90:37:F7:62:C8:5D:CE:22:1F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/x2b3IjBskRIkRZ-QN_diyF3OIh8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:99:dc:5a:fc:9b:94:eb:72:bb:b9:df:be:5d:fc:a9:fd:f7:
         1e:77:1d:ed:ad:25:3e:3d:40:e7:57:68:95:4d:7d:78:30:38:
         ba:2d:e3:dd:58:c6:9d:c4:c7:be:41:2e:31:7e:b4:c9:12:40:
         bd:bc:91:68:15:66:b3:94:6b:41:63:b6:bc:ac:d3:8a:3d:d4:
         a4:7b:c1:90:2a:a4:90:99:b0:96:55:84:a6:da:b7:1b:e0:2a:
         46:db:7d:72:66:4c:12:53:67:cb:e2:b5:cf:73:17:f6:bd:d4:
         6e:48:8f:d2:b2:c1:65:2f:f3:b1:c1:2d:ee:00:23:0c:37:73:
         2d:72:22:75:5d:5b:db:4a:fb:d8:f0:d7:bf:4a:f4:8a:48:fd:
         2f:2c:e6:7a:e3:5c:1c:2b:d2:7d:ec:0e:c3:5c:40:4c:d0:99:
         bb:06:1f:83:70:6a:d4:b6:b6:90:ab:aa:69:84:40:95:4d:99:
         14:25:c2:2d:4e:6a:65:04:f4:8c:c6:0a:72:bc:7e:0d:96:1b:
         49:1a:58:7a:a9:2c:fe:d1:63:1b:f9:1e:21:48:41:c3:f9:d3:
         37:14:8c:7e:ac:22:7b:c2:cb:29:1c:6a:56:40:bb:99:4e:18:
         94:0b:f0:fc:36:b2:d1:bf:22:8c:1b:6d:2b:40:f6:23:75:9d:
         1e:d0:f8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----