Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3wESuCrhxr7n7SHtw0ZtLno9E9Y.roa
File:                     3wESuCrhxr7n7SHtw0ZtLno9E9Y.roa (raw, json)
Hash identifier:          ExwQvVqme2D97EWvxFDWUCDR/lT6BHyT0UsC2xr+79M=
Subject key identifier:   DF:01:12:B8:2A:E1:C6:BE:E7:ED:21:ED:C3:46:6D:2E:7A:3D:13:D6
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2014
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3wESuCrhxr7n7SHtw0ZtLno9E9Y.roa
Signing time:             Fri 25 Nov 2022 04:38:18 +0000
ROA not before:           Fri 25 Nov 2022 04:38:18 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        123.193.160.0/19 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8212 (0x2014)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:38:18 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=DF0112B82AE1C6BEE7ED21EDC3466D2E7A3D13D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0e:53:99:57:24:0b:48:87:3e:72:b5:54:b1:
                    00:6b:94:01:11:10:5b:92:d1:72:4a:8c:d3:97:83:
                    8d:93:79:6f:5a:88:b3:bc:77:5b:2e:44:81:7a:e3:
                    74:ee:e7:aa:a6:7f:64:fe:de:9f:d5:9c:74:7c:bc:
                    61:52:f5:dd:e8:57:ba:b4:79:63:d9:43:ef:0d:61:
                    f3:b0:f9:42:68:3d:45:6f:fc:66:d2:53:78:97:47:
                    bc:df:5c:8a:96:4c:74:eb:f6:e7:7c:1b:98:e4:35:
                    e3:5f:53:c1:20:b0:09:48:c9:78:16:a3:bd:2e:23:
                    9e:f2:a4:a3:06:b2:0c:d5:9c:4e:1a:88:be:72:49:
                    32:f1:e7:e1:c4:93:ed:12:38:75:1e:49:f6:f5:de:
                    ca:73:0b:e7:35:30:16:cf:c1:29:b2:1a:81:24:8d:
                    77:d9:48:1f:d3:5e:ae:4e:87:6e:55:b3:cb:88:57:
                    53:82:76:8a:07:98:1d:ee:63:56:c6:4a:98:dc:89:
                    3f:b5:6e:29:02:e9:11:a6:56:0a:79:3f:66:08:21:
                    94:a5:80:79:e6:3b:d3:3b:ce:b3:c5:8f:2a:15:bc:
                    f2:3d:27:18:17:12:26:77:20:d3:92:39:e4:5f:b5:
                    65:84:90:4e:0a:99:7e:44:11:52:1d:6c:df:9d:51:
                    c4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:01:12:B8:2A:E1:C6:BE:E7:ED:21:ED:C3:46:6D:2E:7A:3D:13:D6
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3wESuCrhxr7n7SHtw0ZtLno9E9Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0a:1b:b3:00:36:f0:a1:01:11:b2:b6:b0:35:8d:bb:73:0e:2a:
         97:7b:0d:0a:50:21:7e:7a:47:56:5d:b5:49:c3:f3:b2:99:73:
         e7:5c:6d:e3:82:35:d1:96:02:46:2a:b8:45:4e:c9:06:1d:d1:
         28:4e:85:f7:47:7e:55:38:c7:fb:5b:0a:d9:55:c2:ae:1e:83:
         e0:f8:d0:0e:71:c9:8b:00:2f:5d:bd:c3:b3:27:d2:f1:2b:f3:
         4e:51:92:cb:a7:76:50:44:80:37:bb:d5:7e:77:d4:9d:4d:c3:
         ef:3c:d1:27:2f:0d:08:29:cd:5f:b9:c8:dc:14:a2:7b:34:5a:
         15:99:37:2f:49:06:a4:fe:d4:18:07:37:10:f2:15:a1:1d:0a:
         4d:7e:a2:5c:22:ce:49:63:62:5d:8e:db:d0:6a:ec:e9:2b:e1:
         17:31:f4:68:5b:45:50:e5:1e:c2:80:8f:f3:a9:b8:36:0f:ba:
         96:b5:1e:79:7a:f6:3a:f2:2b:a6:3c:75:b7:e6:c3:ea:4d:f7:
         f3:13:8b:cb:fe:cb:26:3b:35:39:54:e2:bd:13:d1:84:4c:9a:
         5c:c6:00:9d:df:75:92:a0:15:06:e6:47:b5:5c:10:d4:4e:0f:
         ac:50:15:57:c8:ad:f4:9d:6c:fe:1d:c8:b4:f0:6c:86:c1:be:
         ed:72:8d:98
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIBQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM4MThaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKERGMDExMkI4MkFFMUM2
QkVFN0VEMjFFREMzNDY2RDJFN0EzRDEzRDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3DlOZVyQLSIc+crVUsQBrlAEREFuS0XJKjNOXg42TeW9aiLO8
d1suRIF643Tu56qmf2T+3p/VnHR8vGFS9d3oV7q0eWPZQ+8NYfOw+UJoPUVv/GbS
U3iXR7zfXIqWTHTr9ud8G5jkNeNfU8EgsAlIyXgWo70uI57ypKMGsgzVnE4aiL5y
STLx5+HEk+0SOHUeSfb13spzC+c1MBbPwSmyGoEkjXfZSB/TXq5Oh25Vs8uIV1OC
dooHmB3uY1bGSpjciT+1bikC6RGmVgp5P2YIIZSlgHnmO9M7zrPFjyoVvPI9JxgX
EiZ3INOSOeRftWWEkE4KmX5EEVIdbN+dUcQFAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU3wESuCrhxr7n7SHtw0ZtLno9E9YwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzN3RVN1Q3JoeHI3bjdTSHR3
MFp0TG5vOUU5WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV7
waAwDQYJKoZIhvcNAQELBQADggEBAAobswA28KEBEbK2sDWNu3MOKpd7DQpQIX56
R1ZdtUnD87KZc+dcbeOCNdGWAkYquEVOyQYd0ShOhfdHflU4x/tbCtlVwq4eg+D4
0A5xyYsAL129w7Mn0vEr805RksundlBEgDe71X531J1Nw+880ScvDQgpzV+5yNwU
ons0WhWZNy9JBqT+1BgHNxDyFaEdCk1+olwizkljYl2O29Bq7Okr4Rcx9GhbRVDl
HsKAj/OpuDYPupa1Hnl69jryK6Y8dbfmw+pN9/MTi8v+yyY7NTlU4r0T0YRMmlzG
AJ3fdZKgFQbmR7VcENROD6xQFVfIrfSdbP4dyLTwbIbBvu1yjZg=
-----END CERTIFICATE-----