Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2jMrTN_WRjGKabpNuFsI-6JnxUo.roa
File:                     2jMrTN_WRjGKabpNuFsI-6JnxUo.roa (raw, json)
Hash identifier:          CXApXmDLdHXfrA9rrbe0FoF7s4+muVMbgwjSQs8M5lc=
Subject key identifier:   DA:33:2B:4C:DF:D6:46:31:8A:69:BA:4D:B8:5B:08:FB:A2:67:C5:4A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D12
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2jMrTN_WRjGKabpNuFsI-6JnxUo.roa
Signing time:             Tue 29 Sep 2020 09:54:09 +0000
ROA not before:           Tue 29 Sep 2020 09:54:09 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.200.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3346 (0xd12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:09 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=DA332B4CDFD646318A69BA4DB85B08FBA267C54A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6d:f3:db:ec:ba:53:9b:e8:d9:fd:16:f5:34:
                    e3:df:30:69:7a:ce:f1:6e:2c:38:0d:fb:24:4d:9b:
                    59:64:8d:72:c5:16:e4:84:18:23:b5:1b:4b:e2:6d:
                    2b:de:af:82:47:e4:07:ae:5b:63:cd:27:36:68:46:
                    32:7f:eb:5c:8d:d5:9f:2b:c2:7c:5e:43:71:ad:b8:
                    ae:bb:79:27:6b:2c:1e:12:74:38:07:d9:9a:b3:ed:
                    bc:35:64:7d:0a:ec:85:8e:19:64:78:4b:3d:49:7f:
                    d2:aa:19:52:2d:8f:61:67:37:98:4a:2b:9c:05:ad:
                    72:01:6f:84:be:cc:46:99:8d:6e:9b:68:a1:b0:39:
                    1f:48:9b:0d:4b:06:c1:1c:84:2c:ed:10:47:76:2a:
                    29:5c:3c:c4:d9:45:c0:17:e2:ed:63:2d:51:e5:6b:
                    77:ea:80:01:88:97:c6:d5:02:99:10:b8:08:e1:5d:
                    2a:69:ec:e9:9f:bf:63:2a:aa:4d:53:cd:21:23:4a:
                    98:d9:8d:81:bf:09:4b:3f:60:be:b2:6a:3b:be:52:
                    f4:44:32:ce:b3:08:67:61:c5:33:a1:63:df:eb:54:
                    bf:e5:a9:83:0a:1e:c5:75:e0:94:32:43:09:c6:38:
                    04:59:86:eb:7d:79:80:39:72:d0:49:4f:98:e8:02:
                    f8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:33:2B:4C:DF:D6:46:31:8A:69:BA:4D:B8:5B:08:FB:A2:67:C5:4A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2jMrTN_WRjGKabpNuFsI-6JnxUo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:70:61:1b:9a:68:84:aa:a3:25:11:ba:42:2e:b0:5f:46:9e:
         af:e9:02:50:16:0c:33:c5:81:75:b6:ae:02:17:ff:a4:1a:2d:
         e4:af:c7:3c:fe:bf:c5:b0:38:b8:9a:55:e3:fd:7d:db:53:3a:
         34:cf:0b:91:bb:55:ef:64:f1:e1:df:b8:ac:4b:58:97:71:86:
         99:c3:9f:18:22:a5:9c:dd:9d:f2:09:1d:bd:7b:c8:e6:cc:29:
         bf:0f:f2:94:85:4b:75:2b:57:b2:09:8a:55:ab:4c:a6:3b:58:
         35:1a:75:46:61:75:23:5b:e2:88:82:0b:98:dd:0f:6e:9f:6a:
         32:a4:eb:ba:93:71:43:51:fb:8d:f1:02:77:d9:59:e6:0a:48:
         8f:ba:48:cd:bc:36:1c:8d:9d:1e:49:14:a8:ba:fc:f3:af:e0:
         b2:f5:e4:c9:29:9d:5e:32:59:af:b7:34:97:05:ed:0d:5c:fe:
         90:26:c0:03:57:83:f8:94:4f:f0:a5:2d:46:33:5a:4c:5c:9a:
         b4:d2:de:55:f6:bc:bd:4b:5a:b4:ad:85:7c:cf:03:fe:ff:6b:
         dc:68:20:bb:1d:68:9f:fd:0e:45:07:f8:63:7c:ee:e6:c4:fc:
         84:02:2b:ed:be:1d:76:45:ab:2a:bf:65:93:c6:3a:ea:31:07:
         16:49:6b:5b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDRIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU0MDlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKERBMzMyQjRDREZENjQ2
MzE4QTY5QkE0REI4NUIwOEZCQTI2N0M1NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrbfPb7LpTm+jZ/Rb1NOPfMGl6zvFuLDgN+yRNm1lkjXLFFuSE
GCO1G0vibSver4JH5AeuW2PNJzZoRjJ/61yN1Z8rwnxeQ3GtuK67eSdrLB4SdDgH
2Zqz7bw1ZH0K7IWOGWR4Sz1Jf9KqGVItj2FnN5hKK5wFrXIBb4S+zEaZjW6baKGw
OR9Imw1LBsEchCztEEd2KilcPMTZRcAX4u1jLVHla3fqgAGIl8bVApkQuAjhXSpp
7Omfv2Mqqk1TzSEjSpjZjYG/CUs/YL6yaju+UvREMs6zCGdhxTOhY9/rVL/lqYMK
HsV14JQyQwnGOARZhut9eYA5ctBJT5joAvgXAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU2jMrTN/WRjGKabpNuFsI+6JnxUowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzJqTXJUTl9XUmpHS2FicE51
RnNJLTZKbnhVby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wsgwDQYJKoZIhvcNAQELBQADggEBALVwYRuaaISqoyURukIusF9Gnq/pAlAWDDPF
gXW2rgIX/6QaLeSvxzz+v8WwOLiaVeP9fdtTOjTPC5G7Ve9k8eHfuKxLWJdxhpnD
nxgipZzdnfIJHb17yObMKb8P8pSFS3UrV7IJilWrTKY7WDUadUZhdSNb4oiCC5jd
D26fajKk67qTcUNR+43xAnfZWeYKSI+6SM28NhyNnR5JFKi6/POv4LL15MkpnV4y
Wa+3NJcF7Q1c/pAmwANXg/iUT/ClLUYzWkxcmrTS3lX2vL1LWrSthXzPA/7/a9xo
ILsdaJ/9DkUH+GN87ubE/IQCK+2+HXZFqyq/ZZPGOuoxBxZJa1s=
-----END CERTIFICATE-----