Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zYElsCsTy2ZLITresUBvboPN5CA.roa
File:                     zYElsCsTy2ZLITresUBvboPN5CA.roa (raw, json)
Hash identifier:          CLhn1ctwcrqgagf21t4w/CoDMqghlNqtruhiH9Xv0/Y=
Subject key identifier:   CD:81:25:B0:2B:13:CB:66:4B:21:3A:DE:B1:40:6F:6E:83:CD:E4:20
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1AC0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zYElsCsTy2ZLITresUBvboPN5CA.roa
Signing time:             Wed 29 Sep 2021 02:45:43 +0000
ROA not before:           Wed 29 Sep 2021 02:45:43 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        106.1.170.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6848 (0x1ac0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:45:43 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=CD8125B02B13CB664B213ADEB1406F6E83CDE420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4c:ae:68:70:cb:27:36:c9:a0:57:f8:a7:bf:
                    33:37:c5:70:63:9a:34:f7:a2:89:69:43:11:74:ea:
                    71:58:66:57:92:76:f3:54:df:3a:f7:31:eb:f5:53:
                    e6:88:9b:7e:a4:be:be:62:b9:c0:93:3b:d8:40:34:
                    f2:a9:5d:83:cc:20:dc:b7:87:28:ab:7d:a1:c3:66:
                    fa:ee:e2:9a:e1:e1:96:eb:32:3a:d3:1d:5e:99:40:
                    cd:a9:52:30:cb:d6:17:2b:1d:05:f5:9f:fa:7a:6a:
                    ed:fb:a0:ff:0a:e0:c1:d3:b7:0d:40:31:c4:ed:59:
                    66:0c:30:57:95:89:6f:dd:ae:c6:8f:45:33:7d:53:
                    ef:1b:e1:17:dd:7f:8d:75:14:c0:ff:57:d9:14:19:
                    da:5d:9a:f3:cf:63:99:e4:71:69:7f:9a:a6:a4:f4:
                    31:ea:9f:11:62:fa:6d:e6:b1:04:5f:01:63:d9:9a:
                    01:fe:c5:39:90:5f:20:be:3a:88:46:f3:f8:8d:e8:
                    d8:ba:e9:3c:71:14:58:97:63:04:4e:5c:3c:13:5c:
                    b5:bc:46:6e:67:c0:2e:29:20:f3:59:a7:d4:2d:7b:
                    50:05:89:02:d4:e2:e5:ee:61:92:f0:a6:5d:0a:7a:
                    ee:72:65:c0:dd:4a:dc:91:fb:22:20:65:ce:01:f0:
                    72:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:81:25:B0:2B:13:CB:66:4B:21:3A:DE:B1:40:6F:6E:83:CD:E4:20
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zYElsCsTy2ZLITresUBvboPN5CA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:a7:d0:a6:67:b2:8a:22:df:ef:0c:5f:6c:e2:75:11:90:1f:
         5f:05:cb:63:b2:26:06:99:90:ad:b2:37:32:05:6b:6b:6d:0d:
         12:60:10:3f:94:c5:4c:36:bf:41:e0:2a:e9:87:f3:eb:d1:74:
         11:18:fc:70:bc:2b:72:04:89:d7:04:f3:d2:71:46:9b:d6:51:
         86:76:02:f6:16:27:aa:2a:c1:55:c7:72:d7:0f:a0:85:d3:35:
         dc:2e:35:ca:f9:99:da:45:eb:38:af:f9:27:e4:b8:40:5c:14:
         1b:25:e5:eb:17:0c:f8:a8:3c:dc:e3:a2:13:ae:27:4a:b9:1c:
         98:20:cc:91:9d:4d:fb:6d:b8:55:0a:b6:4f:bd:4d:98:a8:99:
         56:d7:81:93:9b:dc:63:00:63:e2:ea:cf:37:43:76:2a:63:3e:
         c4:6b:9c:67:56:48:05:a0:a3:a7:c2:34:2c:10:44:2f:f3:54:
         8b:e9:1b:45:6c:94:9f:cb:74:42:df:fd:46:a3:66:7a:41:a9:
         be:ee:57:dd:94:8f:d1:0f:ab:82:fc:4a:1c:fb:61:e1:67:c4:
         3c:77:f1:9f:3f:66:d8:a5:e0:6d:55:71:17:67:19:53:43:b3:
         3e:52:4c:58:58:5e:1f:73:16:46:dc:6c:a7:d5:e7:bf:5c:9c:
         78:d5:16:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----