Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4vX2FhcC9fYJPId756CVMpk3pkY.roa
File:                     4vX2FhcC9fYJPId756CVMpk3pkY.roa (raw, json)
Hash identifier:          nMZLucB6Qdad2kd+kOMXQmFag0v8aPjjWnsHmXpFA6U=
Subject key identifier:   E2:F5:F6:16:17:02:F5:F6:09:3C:87:7B:E7:A0:95:32:99:37:A6:46
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       161D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4vX2FhcC9fYJPId756CVMpk3pkY.roa
Signing time:             Sun 07 Feb 2021 12:08:25 +0000
ROA not before:           Sun 07 Feb 2021 12:08:25 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.9.0/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5661 (0x161d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:08:25 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E2F5F6161702F5F6093C877BE7A095329937A646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:60:40:fa:0a:f7:4f:17:d5:a1:77:5b:f6:d6:
                    b5:63:20:51:28:a6:d4:ef:15:07:53:3b:18:2c:b1:
                    56:c2:5d:38:44:ff:3c:aa:ae:3c:44:bf:1c:40:e7:
                    df:74:dd:d0:f3:d6:6c:53:91:ee:26:6b:74:be:c6:
                    8c:e1:ce:3d:a2:5b:96:bb:7d:8f:88:f0:16:d1:4c:
                    d9:3e:df:17:1c:60:7f:38:22:13:32:7c:30:96:b4:
                    9b:37:97:43:8b:c6:d6:52:c5:54:49:32:21:0f:0e:
                    dc:8d:01:1f:25:f2:ce:f0:54:07:0c:28:f0:b3:b3:
                    1c:27:5c:91:ca:ec:37:01:89:3c:95:1a:37:a2:4b:
                    2d:98:c6:a8:25:8d:0f:c3:8d:67:79:0d:18:39:32:
                    a5:d4:30:c8:2b:4a:87:7c:e2:63:c0:18:f8:a7:d9:
                    96:0b:7a:c0:16:e5:55:c5:84:17:c5:15:60:20:26:
                    a5:ec:0c:7d:3d:8c:46:c0:74:44:bb:15:b8:29:82:
                    4f:4e:33:02:07:4e:35:8a:00:ac:67:bd:7f:ac:78:
                    6e:29:21:82:bb:f1:b8:37:36:51:f7:6c:0f:77:ca:
                    e4:8f:18:66:f0:87:e8:d8:ec:38:0c:e8:26:3d:d3:
                    84:2a:57:94:18:74:15:40:f0:71:d9:4b:dd:a7:06:
                    2d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F5:F6:16:17:02:F5:F6:09:3C:87:7B:E7:A0:95:32:99:37:A6:46
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4vX2FhcC9fYJPId756CVMpk3pkY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.9.0/26

    Signature Algorithm: sha256WithRSAEncryption
         0a:2a:a9:dc:2e:c1:48:f5:f6:ad:d0:73:c1:19:e2:ce:9f:97:
         d3:14:42:4e:24:42:cb:3d:55:90:38:fc:56:66:17:a5:fa:89:
         73:38:3b:83:72:71:6b:8f:f3:01:47:65:85:cd:93:2d:4d:e6:
         b7:e2:11:ce:2c:9d:cd:71:bc:35:46:dc:40:92:b5:47:7d:59:
         7c:53:84:e6:41:0e:d4:b2:ee:6a:0a:aa:99:44:0d:4f:e2:6c:
         01:eb:df:10:6b:f0:d9:b2:96:8d:57:60:42:96:61:03:d8:39:
         65:95:4d:c6:bd:8b:2e:aa:d9:b1:19:cf:a7:aa:9e:68:0f:22:
         ef:a6:3c:a9:a2:16:f1:b2:7c:84:11:de:d8:69:7e:a5:d3:ba:
         93:35:a6:9a:1d:34:2a:7e:40:00:dc:61:a1:7a:a2:bd:e7:17:
         3d:66:2e:0a:b2:35:e9:be:a0:1a:67:89:22:51:c6:cf:4e:30:
         3a:05:07:05:40:d5:a7:3b:71:ef:d4:25:bb:0a:54:bb:d3:f4:
         e1:f9:0c:ca:93:f5:69:61:8c:01:a7:2d:5d:90:71:e7:cf:2c:
         7e:14:e6:0c:19:d6:ca:99:e4:3a:03:7e:d6:80:f0:f4:b3:39:
         ee:56:d4:4b:e6:78:55:3f:86:a9:34:9f:86:95:49:ab:b5:84:
         a5:af:2b:21
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICFh0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjA4MjVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEUyRjVGNjE2MTcwMkY1
RjYwOTNDODc3QkU3QTA5NTMyOTkzN0E2NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDnYED6CvdPF9Whd1v21rVjIFEoptTvFQdTOxgssVbCXThE/zyq
rjxEvxxA59903dDz1mxTke4ma3S+xozhzj2iW5a7fY+I8BbRTNk+3xccYH84IhMy
fDCWtJs3l0OLxtZSxVRJMiEPDtyNAR8l8s7wVAcMKPCzsxwnXJHK7DcBiTyVGjei
Sy2YxqgljQ/DjWd5DRg5MqXUMMgrSod84mPAGPin2ZYLesAW5VXFhBfFFWAgJqXs
DH09jEbAdES7Fbgpgk9OMwIHTjWKAKxnvX+seG4pIYK78bg3NlH3bA93yuSPGGbw
h+jY7DgM6CY904QqV5QYdBVA8HHZS92nBi1jAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQU4vX2FhcC9fYJPId756CVMpk3pkYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzR2WDJGaGNDOWZZSlBJZDc1
NkNWTXBrM3BrWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQZ7
wwkAMA0GCSqGSIb3DQEBCwUAA4IBAQAKKqncLsFI9fat0HPBGeLOn5fTFEJOJELL
PVWQOPxWZhel+olzODuDcnFrj/MBR2WFzZMtTea34hHOLJ3Ncbw1RtxAkrVHfVl8
U4TmQQ7Usu5qCqqZRA1P4mwB698Qa/DZspaNV2BClmED2DlllU3GvYsuqtmxGc+n
qp5oDyLvpjypohbxsnyEEd7YaX6l07qTNaaaHTQqfkAA3GGheqK95xc9Zi4KsjXp
vqAaZ4kiUcbPTjA6BQcFQNWnO3Hv1CW7ClS70/Th+QzKk/VpYYwBpy1dkHHnzyx+
FOYMGdbKmeQ6A37WgPD0sznuVtRL5nhVP4apNJ+GlUmrtYSlrysh
-----END CERTIFICATE-----