Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3wPCPfEZF7kOOHI6bXXaW7PEW1I.roa
File:                     3wPCPfEZF7kOOHI6bXXaW7PEW1I.roa (raw, json)
Hash identifier:          FEjKDB9KrNOeMvSmBGDxmyExoEPmsKPOIjfl1b+1j+w=
Subject key identifier:   DF:03:C2:3D:F1:19:17:B9:0E:38:72:3A:6D:75:DA:5B:B3:C4:5B:52
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F67
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3wPCPfEZF7kOOHI6bXXaW7PEW1I.roa
Signing time:             Tue 29 Sep 2020 09:56:54 +0000
ROA not before:           Tue 29 Sep 2020 09:56:54 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        123.193.96.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3943 (0xf67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:54 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=DF03C23DF11917B90E38723A6D75DA5BB3C45B52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ce:64:36:86:75:d3:d4:df:ab:9f:9f:62:3c:
                    79:60:fb:8f:35:c0:b6:f4:cf:42:9a:68:03:93:be:
                    24:53:7e:25:d7:0c:62:c6:ea:cb:39:7e:70:31:00:
                    e5:f4:87:c6:2a:5c:61:8a:a9:02:93:22:42:c9:bf:
                    72:d0:67:fb:92:29:e0:98:a3:c3:42:5e:e3:38:ae:
                    2e:e1:32:d5:d4:43:d0:68:cd:bd:40:27:07:ed:51:
                    27:c7:ea:c5:f8:c2:0c:05:ea:14:f5:3c:10:9d:b2:
                    18:e2:5b:12:5a:d2:2d:a6:0f:0b:96:0a:c4:53:6c:
                    45:ac:85:2e:91:0b:53:55:6d:33:0f:0e:95:f2:39:
                    45:69:77:4b:9f:05:49:2d:2d:78:7c:fb:ba:bf:f7:
                    ed:d1:e7:da:4f:69:f1:11:32:48:56:3c:a0:0c:9d:
                    1e:eb:32:e0:3b:ab:3b:28:43:80:d9:1c:72:f2:75:
                    33:96:aa:03:55:5f:48:98:7a:61:55:1c:9d:a0:a3:
                    c8:a3:4f:1b:0b:9b:9a:39:d4:f4:c8:c5:a2:3f:de:
                    d6:0c:82:bd:af:83:7c:6e:03:ed:d1:00:5f:cc:b2:
                    80:21:e6:7d:93:23:38:d9:40:2c:b9:bc:dd:f7:85:
                    b9:fe:70:52:f9:d2:d2:fe:a4:47:e3:48:23:e4:26:
                    c1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:03:C2:3D:F1:19:17:B9:0E:38:72:3A:6D:75:DA:5B:B3:C4:5B:52
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3wPCPfEZF7kOOHI6bXXaW7PEW1I.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a0:9c:06:86:6f:c4:cd:32:cf:e7:55:2c:1d:12:a7:73:fa:ca:
         37:69:2a:e3:e7:f3:8c:e5:ca:74:e2:86:ff:48:ab:a7:9f:13:
         19:95:f0:f9:bd:38:49:13:7c:83:e1:10:66:4a:df:3a:7d:da:
         4c:0a:da:8d:e6:d7:8e:64:f7:b2:9f:63:9c:6d:d2:95:f8:80:
         58:6e:a9:9d:1c:f7:5f:76:c5:b3:b6:bf:48:0e:41:e7:a4:68:
         e1:ac:8b:bb:04:04:bf:9f:93:dd:e9:e3:f3:aa:04:a6:15:df:
         79:ed:88:e8:56:c8:94:47:71:22:8c:ef:7e:85:52:b4:8f:34:
         38:4d:39:22:32:e3:29:05:6f:02:2b:3a:38:3e:40:db:d0:a4:
         91:c3:33:91:4d:f2:6d:49:53:0d:df:a0:00:58:20:26:29:6c:
         62:f4:c2:b3:8c:1d:aa:64:10:c0:03:7a:20:e3:d7:8a:ce:ff:
         3b:7f:a3:30:c0:86:67:a3:a3:3f:33:27:f5:ff:e7:66:9e:7a:
         f9:b1:da:2d:5b:1d:c0:5e:54:c1:14:6d:f7:61:b2:d6:a1:c1:
         bd:1f:74:17:23:5c:e8:75:f2:4c:00:11:fa:a7:a4:71:46:72:
         11:8b:b7:dc:5c:d2:fb:9a:a9:41:12:79:cb:7e:f2:fb:f5:7f:
         e2:07:ca:cb
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICD2cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU2NTRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKERGMDNDMjNERjExOTE3
QjkwRTM4NzIzQTZENzVEQTVCQjNDNDVCNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDnzmQ2hnXT1N+rn59iPHlg+481wLb0z0KaaAOTviRTfiXXDGLG
6ss5fnAxAOX0h8YqXGGKqQKTIkLJv3LQZ/uSKeCYo8NCXuM4ri7hMtXUQ9Bozb1A
JwftUSfH6sX4wgwF6hT1PBCdshjiWxJa0i2mDwuWCsRTbEWshS6RC1NVbTMPDpXy
OUVpd0ufBUktLXh8+7q/9+3R59pPafERMkhWPKAMnR7rMuA7qzsoQ4DZHHLydTOW
qgNVX0iYemFVHJ2go8ijTxsLm5o51PTIxaI/3tYMgr2vg3xuA+3RAF/MsoAh5n2T
IzjZQCy5vN33hbn+cFL50tL+pEfjSCPkJsGzAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU3wPCPfEZF7kOOHI6bXXaW7PEW1IwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzN3UENQZkVaRjdrT09ISTZi
WFhhVzdQRVcxSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wWAwDQYJKoZIhvcNAQELBQADggEBAKCcBoZvxM0yz+dVLB0Sp3P6yjdpKuPn84zl
ynTihv9Iq6efExmV8Pm9OEkTfIPhEGZK3zp92kwK2o3m145k97KfY5xt0pX4gFhu
qZ0c9192xbO2v0gOQeekaOGsi7sEBL+fk93p4/OqBKYV33ntiOhWyJRHcSKM736F
UrSPNDhNOSIy4ykFbwIrOjg+QNvQpJHDM5FN8m1JUw3foABYICYpbGL0wrOMHapk
EMADeiDj14rO/zt/ozDAhmejoz8zJ/X/52aeevmx2i1bHcBeVMEUbfdhstahwb0f
dBcjXOh18kwAEfqnpHFGchGLt9xc0vuaqUESect+8vv1f+IHyss=
-----END CERTIFICATE-----