Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1A_jSwlCHavQY7izqpmLkgjNk-M.roa
File:                     1A_jSwlCHavQY7izqpmLkgjNk-M.roa (raw, json)
Hash identifier:          BOykGrlCwReg3opR7YG+EDmp3ThQvG4WNkXSdPJPQ6E=
Subject key identifier:   D4:0F:E3:4B:09:42:1D:AB:D0:63:B8:B3:AA:99:8B:92:08:CD:93:E3
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B8C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1A_jSwlCHavQY7izqpmLkgjNk-M.roa
Signing time:             Wed 29 Sep 2021 02:46:44 +0000
ROA not before:           Wed 29 Sep 2021 02:46:44 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.194.80.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7052 (0x1b8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:44 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=D40FE34B09421DABD063B8B3AA998B9208CD93E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:07:d1:8c:81:75:61:9d:41:84:53:4f:c2:4f:
                    11:7e:c3:f7:cd:eb:2c:73:0c:57:35:1e:9b:ca:e6:
                    a6:7b:d9:33:8e:54:b1:ac:29:b8:46:ea:b1:5b:ae:
                    d7:55:30:c4:03:6f:52:e9:29:9f:b2:bb:d3:28:02:
                    8f:a4:5e:4f:83:cc:8c:24:2f:a7:5e:4d:a2:0a:69:
                    6f:ba:3c:88:75:ad:ec:5f:e6:7b:59:d2:bd:1f:7a:
                    2d:93:2a:ed:69:af:b8:21:7a:88:09:22:ab:25:3a:
                    e2:de:a2:c8:6b:7f:52:e4:96:a4:46:5d:ee:86:d1:
                    7c:03:28:01:00:ba:9e:bb:b5:70:de:a2:37:c7:ab:
                    1c:14:f7:b6:9f:7a:02:7e:29:aa:06:9f:46:eb:7c:
                    58:8e:07:fd:1e:66:a9:f2:2f:99:8e:61:fa:15:ed:
                    c6:71:b2:26:1d:38:93:ab:ef:fe:ac:96:d2:b9:37:
                    ff:a3:f8:83:99:ed:4b:9a:1a:35:81:d0:e6:85:db:
                    91:57:73:4b:78:16:6d:80:da:e5:2e:78:a6:b2:e3:
                    ab:ba:0d:01:65:6b:f8:48:f4:b7:a5:7d:17:47:94:
                    b5:c5:9a:49:08:4c:99:40:51:a6:29:22:c7:41:18:
                    76:37:5b:bd:97:39:b4:b1:ed:49:2f:6d:0b:2f:40:
                    d6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0F:E3:4B:09:42:1D:AB:D0:63:B8:B3:AA:99:8B:92:08:CD:93:E3
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1A_jSwlCHavQY7izqpmLkgjNk-M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:00:06:f9:30:5d:d4:5f:fe:d9:2f:e0:e1:03:8d:8f:30:73:
         b5:9e:3f:9c:ce:1c:68:0b:00:0f:90:ac:50:88:a4:10:fe:e5:
         f2:33:03:e9:77:08:b2:2a:5d:fa:d3:38:62:bb:4d:d8:9c:0c:
         d8:00:50:2b:a8:9d:d8:da:94:54:0a:a4:29:05:91:91:e6:4d:
         46:e9:e2:57:c2:af:df:e4:f5:87:6c:4a:05:f0:8c:3f:de:64:
         58:c3:06:dc:9f:be:2c:2c:7a:e0:34:89:76:7d:0a:bc:21:f8:
         8f:b3:da:ff:87:00:00:30:1e:69:59:1d:5c:d8:23:67:cc:4d:
         2e:a3:1a:11:77:5c:68:e8:ae:6c:58:df:82:f9:62:03:d2:e3:
         2c:18:9b:6d:4b:08:25:3c:6f:6b:47:e9:7c:f4:f0:18:f9:4d:
         15:bc:2d:2a:8e:15:f3:5d:90:0a:b5:18:dd:ee:f2:f4:83:fe:
         b9:b6:54:bb:74:8e:91:45:42:87:7e:f2:55:37:4e:db:23:25:
         da:e9:17:d4:e0:ee:9d:c9:ee:bc:c9:db:bc:8a:19:36:97:5b:
         12:7e:b9:23:25:9a:9e:2c:b5:9b:d0:c8:cf:f9:34:88:83:02:
         d9:51:b8:23:52:bc:d7:8f:65:06:5e:b9:d0:11:42:00:99:91:
         2a:c5:d2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----