Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0GA8hpd1Bb846U-qaOBaPVtc2oc.roa
File:                     0GA8hpd1Bb846U-qaOBaPVtc2oc.roa (raw, json)
Hash identifier:          o3F3zD7Cg91/LuvQc+vQLhQuyzu941eVIvuFYRvCWzk=
Subject key identifier:   D0:60:3C:86:97:75:05:BF:38:E9:4F:AA:68:E0:5A:3D:5B:5C:DA:87
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F83
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0GA8hpd1Bb846U-qaOBaPVtc2oc.roa
Signing time:             Tue 29 Sep 2020 09:57:03 +0000
ROA not before:           Tue 29 Sep 2020 09:57:03 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        211.76.119.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3971 (0xf83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:57:03 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D0603C86977505BF38E94FAA68E05A3D5B5CDA87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:72:51:8c:8f:d9:c2:5f:5b:c5:84:af:3b:8f:
                    26:99:bd:25:a6:ef:9b:7a:ab:90:ba:d7:a3:66:fb:
                    cb:0d:4f:25:73:41:53:53:e1:02:08:d2:99:aa:28:
                    4b:b3:fb:aa:c3:54:3e:37:8c:2a:9e:1c:dc:2e:e9:
                    64:f3:b5:79:05:50:54:f1:b1:a0:82:86:3b:f5:c2:
                    bc:fe:66:31:7d:08:11:e2:ed:71:66:73:94:6a:b4:
                    a6:09:68:41:17:8c:3a:45:86:57:f0:59:6d:78:94:
                    a8:d3:96:e1:fb:c3:2f:82:e7:09:dd:39:70:42:f9:
                    ed:0b:8e:5a:3f:f5:63:8b:fc:43:20:bf:60:50:ab:
                    3c:a8:e1:d9:7c:e7:77:89:ff:d3:30:7b:d8:33:fb:
                    4c:8f:ce:db:57:cf:f4:b7:bc:ec:43:4e:2f:e3:e4:
                    b8:6e:da:3e:60:fb:58:ef:71:1a:12:16:00:f9:dd:
                    b1:5f:b9:42:10:58:91:5b:12:4f:0b:d1:8c:f1:06:
                    f1:b0:c2:07:d0:21:5a:83:b1:79:61:a2:33:6f:ab:
                    41:98:08:e3:7e:fc:a3:6f:33:da:d4:83:c3:2d:64:
                    29:41:22:4d:78:bd:39:d1:f1:24:4d:cf:f8:b1:d0:
                    34:95:c6:ef:34:4c:00:d3:fa:55:ac:1d:c1:ed:3b:
                    47:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:60:3C:86:97:75:05:BF:38:E9:4F:AA:68:E0:5A:3D:5B:5C:DA:87
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0GA8hpd1Bb846U-qaOBaPVtc2oc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:4a:09:bb:c9:54:f7:65:79:ce:fb:41:c5:51:cc:c3:b6:97:
         bc:97:03:1e:21:7b:09:46:2e:e7:8b:07:8b:6e:a2:1e:56:b9:
         b0:d2:57:c9:65:cb:66:a8:a3:d2:99:03:f2:56:1b:a5:8f:51:
         2c:15:f4:00:16:d4:6f:e7:61:0a:ea:6c:8b:e8:ba:7b:a8:25:
         09:b5:f7:b2:17:cc:e8:27:17:ba:bb:bd:6b:4c:35:8b:e3:0e:
         22:ce:05:73:5b:40:82:b8:c2:c8:fe:36:76:5e:19:68:1b:9f:
         dd:f2:4e:3c:ec:09:fc:84:3b:31:a0:93:c0:70:cf:cc:c0:cf:
         39:99:05:58:db:36:d7:c6:f1:da:59:5a:19:a6:c1:3a:7f:ad:
         0b:07:5a:22:bd:58:49:ed:b9:89:59:56:45:eb:ec:e7:23:3d:
         58:4b:2b:97:90:1e:72:69:a4:b2:6b:d7:0f:2c:6d:9b:07:63:
         e0:47:27:18:0f:ca:eb:50:b6:e0:b4:a3:d1:28:5c:cd:62:e3:
         00:6b:9d:cf:e8:2c:e5:fc:c7:5a:64:4a:71:59:11:e4:13:01:
         5a:a8:95:7d:ed:bd:c9:cd:07:03:37:47:db:d9:ab:ac:a8:63:
         e6:ff:96:59:c4:91:f1:99:a6:f7:0d:f5:0e:72:eb:ee:25:14:
         5f:05:cb:c8
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICD4MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU3MDNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEQwNjAzQzg2OTc3NTA1
QkYzOEU5NEZBQTY4RTA1QTNENUI1Q0RBODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClclGMj9nCX1vFhK87jyaZvSWm75t6q5C616Nm+8sNTyVzQVNT
4QII0pmqKEuz+6rDVD43jCqeHNwu6WTztXkFUFTxsaCChjv1wrz+ZjF9CBHi7XFm
c5RqtKYJaEEXjDpFhlfwWW14lKjTluH7wy+C5wndOXBC+e0Ljlo/9WOL/EMgv2BQ
qzyo4dl853eJ/9Mwe9gz+0yPzttXz/S3vOxDTi/j5Lhu2j5g+1jvcRoSFgD53bFf
uUIQWJFbEk8L0YzxBvGwwgfQIVqDsXlhojNvq0GYCON+/KNvM9rUg8MtZClBIk14
vTnR8SRNz/ix0DSVxu80TADT+lWsHcHtO0dhAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU0GA8hpd1Bb846U+qaOBaPVtc2ocwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzBHQThocGQxQmI4NDZVLXFh
T0JhUFZ0YzJvYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT
THcwDQYJKoZIhvcNAQELBQADggEBAKRKCbvJVPdlec77QcVRzMO2l7yXAx4hewlG
LueLB4tuoh5WubDSV8lly2aoo9KZA/JWG6WPUSwV9AAW1G/nYQrqbIvounuoJQm1
97IXzOgnF7q7vWtMNYvjDiLOBXNbQIK4wsj+NnZeGWgbn93yTjzsCfyEOzGgk8Bw
z8zAzzmZBVjbNtfG8dpZWhmmwTp/rQsHWiK9WEntuYlZVkXr7OcjPVhLK5eQHnJp
pLJr1w8sbZsHY+BHJxgPyutQtuC0o9EoXM1i4wBrnc/oLOX8x1pkSnFZEeQTAVqo
lX3tvcnNBwM3R9vZq6yoY+b/llnEkfGZpvcN9Q5y6+4lFF8Fy8g=
-----END CERTIFICATE-----