Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-d6x0AeawhBPE8ONMDt1tisMXVk.roa
File:                     -d6x0AeawhBPE8ONMDt1tisMXVk.roa (raw, json)
Hash identifier:          G/srENIbsby6bXepTlpDBSOXSNyjNN1zvTQ/sU3PYmM=
Subject key identifier:   F9:DE:B1:D0:07:9A:C2:10:4F:13:C3:8D:30:3B:75:B6:2B:0C:5D:59
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       18DB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-d6x0AeawhBPE8ONMDt1tisMXVk.roa
Signing time:             Sun 07 Feb 2021 12:54:28 +0000
ROA not before:           Sun 07 Feb 2021 12:54:28 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        123.193.224.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6363 (0x18db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:54:28 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F9DEB1D0079AC2104F13C38D303B75B62B0C5D59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d4:e1:6e:03:a3:56:66:3d:96:2b:53:93:8b:
                    49:10:27:f4:ab:e5:a4:04:99:45:b3:a3:14:06:f0:
                    bd:23:e0:43:1a:47:9e:4e:8a:8b:25:1a:9b:c7:ec:
                    de:c0:fc:cb:da:b2:11:7d:a4:2b:eb:fd:71:a0:b4:
                    ed:53:0d:94:69:55:86:31:eb:10:3f:37:46:c8:c4:
                    94:a8:e7:d4:4c:d4:18:38:ca:8c:a4:40:d0:4e:6a:
                    7d:96:14:75:a3:b2:11:40:6f:01:51:91:1a:9f:d2:
                    8f:a6:47:ac:1c:3a:c4:a4:9e:ae:0b:45:9f:13:9a:
                    37:77:4a:90:bc:95:5d:28:3c:28:a6:eb:96:f7:01:
                    d0:31:7f:5e:4b:fc:19:99:fb:06:95:b9:26:71:c9:
                    4b:fa:ac:fb:a3:1f:8b:8d:75:e7:97:4d:ac:e3:63:
                    7d:1e:77:e5:99:ab:3e:28:92:08:e7:0a:44:df:c1:
                    8f:4a:fa:5b:4e:e3:c3:87:3e:b6:e0:5b:7c:19:ec:
                    29:2c:31:d4:29:98:a1:b7:e8:81:aa:4e:1f:9b:6f:
                    b4:3c:82:33:53:7c:fa:10:b4:e3:33:f8:30:ab:c3:
                    ff:29:fe:f6:44:88:b3:cf:c7:f0:a1:01:cb:c0:99:
                    80:ec:f9:af:38:f5:55:d9:5d:27:95:8d:9b:c6:49:
                    26:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:DE:B1:D0:07:9A:C2:10:4F:13:C3:8D:30:3B:75:B6:2B:0C:5D:59
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-d6x0AeawhBPE8ONMDt1tisMXVk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         32:f4:0e:80:35:0d:3e:76:f3:95:a0:bb:03:77:e3:5a:3b:22:
         04:c6:35:d9:8d:1e:64:db:3f:62:ab:00:56:de:66:ba:38:2f:
         19:63:90:ee:cb:7d:df:ed:5e:c0:c8:86:d0:09:a0:1d:7c:7a:
         7c:cc:7f:14:16:e3:5e:4d:fd:0a:18:6a:fb:6c:82:f0:70:83:
         4b:9c:43:26:eb:a3:2d:a0:36:cc:b0:3c:0e:47:57:46:95:a7:
         0b:69:3d:fa:a8:f4:1d:21:1c:d0:37:a1:f7:5d:1a:f0:e2:e5:
         e1:9d:08:04:ee:7f:de:60:ea:f8:d5:13:a7:0e:a0:54:28:dd:
         6a:af:0c:ec:25:4d:65:f4:04:c5:c9:40:66:08:02:4b:c0:ae:
         ac:ac:ec:29:c8:ab:40:be:3f:70:9f:c1:b0:e9:ef:2f:2c:d1:
         1c:47:d8:fd:24:33:22:6a:a8:66:78:dc:0f:37:40:70:c2:93:
         70:c1:fa:91:c2:df:48:6c:bf:95:da:61:73:65:c0:67:49:51:
         38:c9:53:6d:a4:95:c0:7f:a7:d7:6c:ee:b1:51:8f:66:c4:56:
         69:bd:d1:84:7e:b5:19:a6:9e:d8:e3:29:53:d8:83:55:80:3a:
         ec:4c:7c:c5:b4:1b:93:ee:94:13:e3:14:7f:5a:9e:26:0d:91:
         da:34:2c:3e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGNswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjU0MjhaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEY5REVCMUQwMDc5QUMy
MTA0RjEzQzM4RDMwM0I3NUI2MkIwQzVENTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDE1OFuA6NWZj2WK1OTi0kQJ/Sr5aQEmUWzoxQG8L0j4EMaR55O
ioslGpvH7N7A/MvashF9pCvr/XGgtO1TDZRpVYYx6xA/N0bIxJSo59RM1Bg4yoyk
QNBOan2WFHWjshFAbwFRkRqf0o+mR6wcOsSknq4LRZ8Tmjd3SpC8lV0oPCim65b3
AdAxf15L/BmZ+waVuSZxyUv6rPujH4uNdeeXTazjY30ed+WZqz4okgjnCkTfwY9K
+ltO48OHPrbgW3wZ7CksMdQpmKG36IGqTh+bb7Q8gjNTfPoQtOMz+DCrw/8p/vZE
iLPPx/ChAcvAmYDs+a849VXZXSeVjZvGSSavAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU+d6x0AeawhBPE8ONMDt1tisMXVkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLy1kNngwQWVhd2hCUEU4T05N
RHQxdGlzTVhWay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV7
weAwDQYJKoZIhvcNAQELBQADggEBADL0DoA1DT5285WguwN341o7IgTGNdmNHmTb
P2KrAFbeZro4LxljkO7Lfd/tXsDIhtAJoB18enzMfxQW415N/QoYavtsgvBwg0uc
Qybroy2gNsywPA5HV0aVpwtpPfqo9B0hHNA3ofddGvDi5eGdCATuf95g6vjVE6cO
oFQo3WqvDOwlTWX0BMXJQGYIAkvArqys7CnIq0C+P3CfwbDp7y8s0RxH2P0kMyJq
qGZ43A83QHDCk3DB+pHC30hsv5XaYXNlwGdJUTjJU22klcB/p9ds7rFRj2bEVmm9
0YR+tRmmntjjKVPYg1WAOuxMfMW0G5PulBPjFH9aniYNkdo0LD4=
-----END CERTIFICATE-----