Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xSGjgEHaPfzEMItKcQo8Bfy5Zxw.roa
File:                     xSGjgEHaPfzEMItKcQo8Bfy5Zxw.roa (raw, json)
Hash identifier:          sot702mOT1t8+YC+tzoz645m0HEcHsjfhwJm9ba1TeA=
Subject key identifier:   C5:21:A3:80:41:DA:3D:FC:C4:30:8B:4A:71:0A:3C:05:FC:B9:67:1C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D1C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xSGjgEHaPfzEMItKcQo8Bfy5Zxw.roa
Signing time:             Wed 29 Sep 2021 02:48:37 +0000
ROA not before:           Wed 29 Sep 2021 02:48:37 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        118.232.64.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7452 (0x1d1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:37 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=C521A38041DA3DFCC4308B4A710A3C05FCB9671C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:14:5d:dc:bb:45:d0:56:f8:86:91:46:c1:1c:
                    3f:e6:3a:ea:13:04:31:8f:db:2f:89:a0:47:fb:45:
                    db:0e:f1:a7:14:1a:54:a3:3c:3b:c9:2d:2a:de:68:
                    0a:60:ce:cc:7e:9c:7c:2d:f4:01:71:fa:cc:f7:42:
                    de:7f:c7:2d:ad:27:d6:ed:0a:0c:16:76:14:73:bd:
                    bb:cb:81:5b:ca:ba:88:24:0e:a3:0f:6b:3c:11:73:
                    ee:74:39:c9:87:36:4c:f3:45:68:22:08:1d:92:c0:
                    31:2a:43:28:a1:75:0b:4e:5b:49:3f:a4:f1:fe:63:
                    a0:1f:1b:87:82:9a:d1:90:e2:a3:0d:03:f4:fa:b8:
                    88:cf:09:fd:f7:da:f9:30:0d:cd:80:20:ff:16:56:
                    cf:7e:52:bd:5a:68:08:8c:9c:50:20:c7:2b:46:60:
                    78:86:5f:f5:ad:e5:a8:42:c8:e4:17:3e:33:b2:85:
                    43:5b:25:4d:fe:58:5a:18:08:b6:30:b1:50:b4:30:
                    f7:a1:cc:00:17:8d:48:bf:9b:08:bf:75:92:1a:29:
                    93:ef:2b:ad:97:12:ae:f1:00:18:6c:e7:3d:85:1b:
                    65:4a:ef:0e:ef:b4:bb:f1:fe:e1:6a:f1:51:30:74:
                    25:ea:e6:ba:c8:db:5c:19:6e:7c:1c:3c:0d:00:1a:
                    b2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:21:A3:80:41:DA:3D:FC:C4:30:8B:4A:71:0A:3C:05:FC:B9:67:1C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xSGjgEHaPfzEMItKcQo8Bfy5Zxw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2a:0d:15:3a:f2:dc:26:21:a6:13:b6:20:6f:f2:54:af:72:70:
         e4:07:73:fe:ba:f7:2f:5a:8a:0d:86:51:4f:a8:17:3c:ba:a9:
         2b:18:9c:b4:98:ad:4d:3c:ee:d5:49:70:93:56:f7:cf:a2:55:
         eb:a5:b1:75:62:28:37:77:98:f7:ca:c3:25:ab:2d:65:5d:4a:
         8f:ab:ac:ac:7b:db:16:36:a3:39:cf:b3:16:51:e7:d6:45:40:
         93:b2:47:50:95:d3:ed:48:42:a1:c2:28:f7:60:ae:20:e3:33:
         0b:a6:4b:47:97:3f:49:91:3f:2e:06:7a:ea:3e:12:08:35:21:
         63:21:aa:cb:ce:9c:25:f2:c0:fe:2d:a5:9b:35:23:33:84:81:
         c6:77:e6:c9:a0:db:de:18:1f:7d:62:cc:de:62:7b:ff:de:83:
         7e:7b:6d:b8:08:67:99:32:93:59:99:51:6a:ae:b9:c5:8b:b3:
         e6:37:c8:ce:0a:d8:7b:61:1f:1e:ab:f3:b9:92:2a:e8:af:77:
         e7:31:81:f3:ac:85:76:fa:c1:8e:49:53:50:ba:ae:8f:bd:89:
         ad:a2:ea:49:d1:b7:f3:ce:f9:c3:cc:67:80:b8:bf:6d:32:cd:
         96:e8:eb:07:55:cc:12:a1:f1:22:fc:a2:c5:b6:be:5f:c2:b1:
         f8:2a:6b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----