Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-7MLfuP44COWSVyoDlwrVFnKN1w.roa
File:                     -7MLfuP44COWSVyoDlwrVFnKN1w.roa (raw, json)
Hash identifier:          4koIbOqBamc728Z0ha7+A43Rl/6JV//RZohCyfIVZD8=
Subject key identifier:   FB:B3:0B:7E:E3:F8:E0:23:96:49:5C:A8:0E:5C:2B:54:59:CA:37:5C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F10
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-7MLfuP44COWSVyoDlwrVFnKN1w.roa
Signing time:             Tue 29 Sep 2020 09:56:27 +0000
ROA not before:           Tue 29 Sep 2020 09:56:27 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        123.195.208.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3856 (0xf10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:27 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=FBB30B7EE3F8E02396495CA80E5C2B5459CA375C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3e:35:8a:5e:da:ff:27:c8:70:fb:1c:aa:bc:
                    b9:71:e8:a4:33:2e:6d:ac:04:92:24:aa:cf:2f:eb:
                    0d:de:cb:c4:77:9a:6a:cf:59:2e:f0:bb:d1:80:89:
                    7d:1e:f6:42:31:5b:40:09:22:e0:b5:e3:d2:87:a1:
                    7d:11:4b:1d:79:27:58:ce:2a:aa:e7:ae:d6:bd:13:
                    7d:36:6f:d8:aa:93:93:95:6b:40:7a:cc:c6:b6:ef:
                    76:12:d0:9f:15:1c:48:90:0d:a3:61:0f:66:16:29:
                    fe:c8:92:f3:73:96:47:e0:8d:7d:8a:02:be:9e:c0:
                    dc:99:ab:c9:51:fb:bd:f6:62:70:0b:df:f9:a6:e9:
                    e5:1c:dc:b8:84:dd:94:ac:62:65:4e:8c:2a:84:f0:
                    c4:d3:86:53:83:44:ba:21:fb:5b:81:2f:5e:2c:96:
                    8c:da:21:15:de:76:ed:a8:30:c6:0f:39:12:d3:89:
                    18:8c:bf:97:21:08:f6:ea:4e:c8:4b:d3:a0:a2:86:
                    09:cb:1c:b7:5e:7c:0f:dc:52:39:ee:ec:c2:6b:f9:
                    9d:6c:2f:2e:32:80:a5:8c:33:5c:82:bf:7b:0d:b9:
                    7a:98:73:b3:ea:38:c8:bb:c3:37:d1:23:0c:7f:d4:
                    c6:cb:0c:7e:93:d6:05:49:7f:53:6e:d6:7f:5d:d1:
                    4d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B3:0B:7E:E3:F8:E0:23:96:49:5C:A8:0E:5C:2B:54:59:CA:37:5C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-7MLfuP44COWSVyoDlwrVFnKN1w.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:32:78:0d:a1:4c:cb:dc:21:2b:60:c4:cf:e6:df:dd:2d:cd:
         31:6b:cd:81:65:24:5e:27:93:fe:69:dc:75:77:34:84:1a:1f:
         15:1c:74:2a:c4:ea:0b:63:4b:dd:2c:19:43:b8:1d:ff:9b:60:
         80:75:09:dc:c9:0e:f3:fc:3e:26:cf:eb:5b:5f:7a:4b:a3:f6:
         06:f5:5e:ec:e5:e5:07:86:e2:e5:cf:2a:7e:3d:f0:21:c2:e4:
         4a:28:9c:08:a0:60:61:8e:af:a7:31:92:1f:8f:04:c0:e5:2f:
         a0:f9:42:dc:77:d5:38:03:0b:5a:6f:da:99:72:de:d1:d2:9b:
         07:2a:34:02:2a:49:2f:a7:96:11:95:fa:4e:dc:3d:06:7b:e7:
         2a:15:13:ec:0b:79:78:af:6c:1f:71:38:f9:fb:77:54:98:e2:
         19:89:23:61:eb:fd:7b:2d:6e:e7:b4:da:ae:8a:19:30:d5:d6:
         48:f2:96:11:a9:84:75:96:32:22:16:34:0a:f7:77:4b:ec:30:
         f6:ce:2c:28:b8:81:99:95:65:37:15:20:59:94:17:3e:bb:80:
         6d:1f:0d:ad:1e:75:5b:cb:54:4d:38:be:b2:d8:bf:61:c0:e5:
         ad:d2:61:9d:f6:6e:37:02:ed:bb:b4:2a:f8:a6:dc:3d:25:38:
         a9:ea:25:6e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDxAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU2MjdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEZCQjMwQjdFRTNGOEUw
MjM5NjQ5NUNBODBFNUMyQjU0NTlDQTM3NUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5PjWKXtr/J8hw+xyqvLlx6KQzLm2sBJIkqs8v6w3ey8R3mmrP
WS7wu9GAiX0e9kIxW0AJIuC149KHoX0RSx15J1jOKqrnrta9E302b9iqk5OVa0B6
zMa273YS0J8VHEiQDaNhD2YWKf7IkvNzlkfgjX2KAr6ewNyZq8lR+732YnAL3/mm
6eUc3LiE3ZSsYmVOjCqE8MTThlODRLoh+1uBL14slozaIRXedu2oMMYPORLTiRiM
v5chCPbqTshL06CihgnLHLdefA/cUjnu7MJr+Z1sLy4ygKWMM1yCv3sNuXqYc7Pq
OMi7wzfRIwx/1MbLDH6T1gVJf1Nu1n9d0U2XAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU+7MLfuP44COWSVyoDlwrVFnKN1wwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLy03TUxmdVA0NENPV1NWeW9E
bHdyVkZuS04xdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7
w9AwDQYJKoZIhvcNAQELBQADggEBAFIyeA2hTMvcIStgxM/m390tzTFrzYFlJF4n
k/5p3HV3NIQaHxUcdCrE6gtjS90sGUO4Hf+bYIB1CdzJDvP8PibP61tfekuj9gb1
Xuzl5QeG4uXPKn498CHC5EoonAigYGGOr6cxkh+PBMDlL6D5Qtx31TgDC1pv2ply
3tHSmwcqNAIqSS+nlhGV+k7cPQZ75yoVE+wLeXivbB9xOPn7d1SY4hmJI2Hr/Xst
bue02q6KGTDV1kjylhGphHWWMiIWNAr3d0vsMPbOLCi4gZmVZTcVIFmUFz67gG0f
Da0edVvLVE04vrLYv2HA5a3SYZ32bjcC7bu0Kvim3D0lOKnqJW4=
-----END CERTIFICATE-----