Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/44bMAx6AAjfR9YFb78mQyos3b7w.roa
File:                     44bMAx6AAjfR9YFb78mQyos3b7w.roa (raw, json)
Hash identifier:          7GilFQGCs7Wz6DshquOnNe+mxBXmoRR4Udbc5SagHyw=
Subject key identifier:   E3:86:CC:03:1E:80:02:37:D1:F5:81:5B:EF:C9:90:CA:8B:37:6F:BC
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E0B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/44bMAx6AAjfR9YFb78mQyos3b7w.roa
Signing time:             Tue 29 Sep 2020 09:55:16 +0000
ROA not before:           Tue 29 Sep 2020 09:55:16 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.176.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3595 (0xe0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:16 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E386CC031E800237D1F5815BEFC990CA8B376FBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:84:85:3e:f6:18:b3:7d:6c:c9:87:19:f1:8a:
                    ee:aa:24:1e:20:eb:55:e3:91:f9:18:00:2b:6f:15:
                    68:da:1e:47:10:ea:1e:cc:44:a3:99:77:5a:3d:03:
                    44:b2:11:f2:42:49:85:0e:13:c4:2f:6d:04:9b:1f:
                    91:11:e5:8c:39:40:b7:3b:31:99:3f:56:d2:7a:fa:
                    1a:c1:d3:47:12:90:6c:09:3a:82:32:83:3f:10:fe:
                    48:c1:c9:32:00:07:ee:48:48:d0:9e:7d:06:f2:a6:
                    90:58:db:60:e5:69:c8:6c:4c:db:0f:0c:97:c1:bc:
                    9c:bc:8a:21:b8:f9:be:17:3e:1e:cc:4d:af:8a:7d:
                    e7:2d:df:2e:e1:20:16:7b:ab:3d:84:ff:b6:19:5d:
                    96:00:8b:1f:4a:e7:5b:35:bb:3e:a9:bc:06:a2:24:
                    01:7e:ae:ba:7b:5d:1b:5d:5f:61:13:4a:2e:91:90:
                    a1:a8:b8:0c:53:e8:b3:d0:eb:c2:aa:4e:59:14:a6:
                    13:b2:7f:de:79:39:39:a1:1f:28:ea:7f:1f:a5:de:
                    c4:34:63:6e:13:1a:38:94:22:ca:53:29:f1:89:58:
                    b1:ab:69:62:85:81:d2:b2:b0:ec:46:ea:14:46:b1:
                    38:50:ef:0e:45:da:81:21:89:42:95:b2:4f:38:a6:
                    02:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:86:CC:03:1E:80:02:37:D1:F5:81:5B:EF:C9:90:CA:8B:37:6F:BC
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/44bMAx6AAjfR9YFb78mQyos3b7w.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:1e:e6:6f:a4:da:d2:5a:01:0f:87:9c:cf:b7:1b:a3:fc:32:
         4b:53:4a:d2:c0:7c:40:c8:dd:b4:f4:70:c5:e3:18:0d:7d:19:
         60:dc:8e:52:f5:db:5e:96:be:bd:3f:94:75:bf:a6:49:9e:e5:
         6a:2d:2d:ac:61:94:bc:f5:4f:16:df:af:38:2b:da:5a:6d:c4:
         8b:7a:55:30:a4:44:0d:e6:7f:91:da:7d:06:ce:65:58:b1:7b:
         1a:c6:b0:75:c7:c6:c0:7c:6b:e7:51:4a:72:11:3e:e3:0b:28:
         d5:47:66:08:c8:54:65:00:67:76:3d:ad:45:d9:a8:71:ac:15:
         36:86:36:fd:68:29:e7:12:76:d0:1f:5b:a2:10:7d:dd:b3:7b:
         3b:86:c6:f2:a6:54:43:94:a7:f9:e7:d4:8a:db:ec:ba:64:f3:
         ef:a9:a4:31:84:03:61:ee:81:b3:5c:f8:53:d7:f2:80:77:29:
         c1:40:28:d0:54:ad:6a:6a:ad:f0:57:96:5c:1f:c0:09:5c:61:
         8c:a5:11:de:a4:db:dc:02:cc:af:11:ee:03:57:ee:dd:06:f0:
         82:7a:f8:82:26:f1:ef:67:4c:44:47:fa:51:eb:cd:1c:c7:80:
         74:3f:0e:b4:ae:0a:19:14:7f:bd:c6:79:14:c2:a2:d6:87:17:
         81:01:89:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----