Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2aKDa2dcXobQWoUjG50OQNxOkU0.roa
File:                     2aKDa2dcXobQWoUjG50OQNxOkU0.roa (raw, json)
Hash identifier:          wZeeUT8PYYjruYSr+SFl0ayHEXVayayn1Pm5N7kVOMI=
Subject key identifier:   D9:A2:83:6B:67:5C:5E:86:D0:5A:85:23:1B:9D:0E:40:DC:4E:91:4D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0EC2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2aKDa2dcXobQWoUjG50OQNxOkU0.roa
Signing time:             Tue 29 Sep 2020 09:56:06 +0000
ROA not before:           Tue 29 Sep 2020 09:56:06 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.8.64/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3778 (0xec2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:06 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D9A2836B675C5E86D05A85231B9D0E40DC4E914D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5b:c4:76:8e:15:a9:8d:ed:73:ff:fb:e3:3e:
                    7b:7c:ab:bc:36:f8:8a:05:77:b6:f6:ba:d0:b1:a2:
                    4b:43:d6:0d:45:16:89:fb:bb:40:fd:ae:3a:85:ee:
                    ee:48:d5:5c:b5:d3:2c:dc:cf:a8:c3:5f:8d:4c:cf:
                    3c:07:86:54:27:5f:00:38:85:32:05:a3:20:50:39:
                    e3:98:59:f8:58:48:e2:83:d1:96:08:64:8a:47:bb:
                    75:a5:2a:20:f9:b5:15:00:f0:f4:13:31:25:a8:df:
                    f5:15:a7:ac:12:c1:d1:a9:3a:9e:37:80:a4:d2:5c:
                    bf:ee:b4:13:b9:df:7c:fb:e6:e3:81:cc:68:0c:6c:
                    c2:04:24:c2:6e:6d:01:ff:e4:91:4f:f3:8f:d6:9f:
                    2f:9a:5a:16:97:ee:80:30:78:84:4f:97:4a:e9:2f:
                    98:fd:7f:ad:24:e2:15:14:d3:32:d1:09:74:0e:b7:
                    f7:ce:04:e8:56:78:e2:0a:6c:d0:cd:fa:5a:61:14:
                    60:64:69:3c:68:54:ca:95:2a:bc:43:b8:41:4b:37:
                    4a:17:15:03:68:43:2a:8f:44:29:d9:14:6e:7b:88:
                    58:27:e4:b5:8c:f6:d2:05:7a:69:e8:18:b4:da:30:
                    61:45:5b:77:f8:18:a4:85:8f:10:12:92:4c:99:53:
                    fa:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A2:83:6B:67:5C:5E:86:D0:5A:85:23:1B:9D:0E:40:DC:4E:91:4D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2aKDa2dcXobQWoUjG50OQNxOkU0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.8.64/26

    Signature Algorithm: sha256WithRSAEncryption
         31:4b:ed:3c:98:ed:76:4e:0f:d5:5b:54:b8:07:d3:3b:10:9d:
         5a:3f:52:96:21:74:97:cd:0e:e9:65:28:4b:63:76:f1:11:85:
         8f:89:cf:5f:66:6d:e5:1b:fe:70:f9:bc:14:21:f6:f5:e6:1a:
         6d:b1:c8:c3:70:42:2f:d5:3e:63:7d:c8:e3:07:ec:5a:71:59:
         34:4f:60:42:2f:fb:7a:ab:92:72:23:23:2a:8f:c3:de:48:2b:
         91:30:25:ce:d3:a0:b1:90:09:c0:c1:a2:26:c1:07:aa:e8:b2:
         02:4d:23:9d:46:aa:b9:4d:16:11:ff:07:9f:6a:c6:f3:ce:95:
         c0:29:e6:ea:d4:91:2b:18:2d:5b:f9:d6:27:27:94:93:91:68:
         ed:2e:b0:76:bb:3c:b6:dc:b3:99:39:52:9e:a0:91:86:43:3b:
         7e:7c:fd:76:e2:f4:77:37:71:fa:69:f7:1b:11:b1:34:b5:da:
         45:9e:83:1d:35:d8:31:89:14:e6:9c:74:71:50:a9:fc:d7:79:
         ec:f1:0b:03:f8:7a:e6:27:a9:1f:67:7b:c1:79:03:32:08:f7:
         f6:a0:cf:81:78:61:c4:46:cf:0d:8b:a9:7b:d1:a1:c7:f2:43:
         48:f7:d3:de:40:99:b0:b9:64:94:8c:27:29:d0:38:89:4a:37:
         91:61:ce:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----