Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/23eHAWBkACAsx_4OaSF9imS2HmE.roa
File:                     23eHAWBkACAsx_4OaSF9imS2HmE.roa (raw, json)
Hash identifier:          oLRdSpMNdL876jQwBbzAr9jxLqqrST0OuBUXOeueSRQ=
Subject key identifier:   DB:77:87:01:60:64:00:20:2C:C7:FE:0E:69:21:7D:8A:64:B6:1E:61
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E2E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/23eHAWBkACAsx_4OaSF9imS2HmE.roa
Signing time:             Tue 29 Sep 2020 09:55:26 +0000
ROA not before:           Tue 29 Sep 2020 09:55:26 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.193.144.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3630 (0xe2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:26 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=DB778701606400202CC7FE0E69217D8A64B61E61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:80:6c:d2:cf:e0:6e:f7:53:66:a1:6a:e0:68:
                    ac:0c:70:98:4d:9b:0e:29:e5:99:b4:b4:6c:8d:d1:
                    b9:93:ec:c2:30:5b:ac:af:71:e6:0c:c2:57:6d:a7:
                    52:62:e5:f0:26:db:3a:16:09:f5:99:a7:a6:11:bc:
                    9c:7a:6e:42:ca:55:ea:ed:d2:c9:fd:f3:05:3a:6a:
                    89:1f:53:37:23:9c:76:de:1e:2f:f9:97:f4:fd:11:
                    e3:4d:13:81:56:68:22:15:32:42:26:dc:fa:74:4f:
                    22:03:dc:15:19:48:2c:1b:c2:bb:76:23:ad:3a:a7:
                    97:d6:04:68:8b:93:fa:12:93:a1:29:a8:7a:44:bf:
                    6a:e8:08:aa:20:66:b8:73:c1:8a:3d:40:67:59:b5:
                    48:8d:3c:c8:33:a8:dd:ed:a6:7a:9d:10:2f:43:61:
                    be:e5:b7:e0:3e:1d:8c:49:5f:7e:1b:b5:9d:f1:54:
                    5c:4c:db:35:18:ed:d1:21:c4:d7:72:e7:8b:6b:d5:
                    82:3c:a3:5c:18:12:0e:5f:b0:23:0f:be:70:03:02:
                    4c:06:8e:9f:51:db:1c:b6:09:e4:2c:92:4d:d4:3f:
                    4f:e1:a0:6d:90:98:06:bc:0b:5b:40:36:5c:55:89:
                    38:9d:ce:cb:ae:5f:17:2d:be:c7:db:52:ec:4d:78:
                    50:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:77:87:01:60:64:00:20:2C:C7:FE:0E:69:21:7D:8A:64:B6:1E:61
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/23eHAWBkACAsx_4OaSF9imS2HmE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         99:f4:d6:51:33:82:54:5e:8e:7f:7f:64:30:b3:d6:4b:a6:31:
         14:17:d1:92:82:61:24:01:31:d9:35:97:15:18:96:84:ff:1b:
         00:85:65:67:5a:66:77:cf:42:43:eb:86:cb:76:c1:75:9e:51:
         bb:67:15:de:52:9c:e9:66:81:93:d4:e1:b6:1c:ca:eb:70:b4:
         d4:dc:9d:a2:63:89:ef:af:35:00:30:1c:71:09:94:5c:c8:34:
         59:df:ba:04:d9:97:82:bd:8d:43:f3:e0:7b:46:c1:db:58:7d:
         35:ec:8b:b4:3b:b2:81:b7:07:08:b3:e3:37:9c:b9:82:4b:00:
         e1:db:c4:95:0f:6c:3b:10:39:24:ca:34:f2:16:2c:bc:a7:c4:
         25:ae:59:7c:b2:c7:1c:26:1d:5e:b2:73:53:0a:20:7a:84:68:
         be:de:6c:09:d9:b6:12:13:73:b1:64:57:af:87:91:7d:24:0f:
         fa:41:98:6b:82:5a:b5:77:cb:82:82:80:0d:61:bf:d3:b9:76:
         b9:2a:2c:55:25:37:4d:1b:ed:60:23:75:84:75:15:2f:ec:f8:
         9f:85:90:ac:a6:a9:eb:3c:52:30:c8:51:01:57:da:ca:3d:b1:
         36:9d:47:07:03:3b:d1:bc:5e:54:ac:89:cb:dc:ab:e9:3b:72:
         ef:cc:ee:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----