Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5-IXZQE7UUuaDcB6zo-TKl6TJqU.roa
File:                     5-IXZQE7UUuaDcB6zo-TKl6TJqU.roa (raw, json)
Hash identifier:          0b5hcJwA9UrA3gRxDg42HYtUo7pfcYebtuIfsm/z9MU=
Subject key identifier:   E7:E2:17:65:01:3B:51:4B:9A:0D:C0:7A:CE:8F:93:2A:5E:93:26:A5
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B0C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5-IXZQE7UUuaDcB6zo-TKl6TJqU.roa
Signing time:             Wed 29 Sep 2021 02:46:04 +0000
ROA not before:           Wed 29 Sep 2021 02:46:04 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.194.160.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6924 (0x1b0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:04 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=E7E21765013B514B9A0DC07ACE8F932A5E9326A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:de:eb:2a:b1:ea:46:45:0a:4c:96:2e:4a:b1:
                    1e:34:20:a5:42:83:5c:ba:69:c2:b3:54:7e:f4:59:
                    38:8d:22:2a:ef:67:35:fb:ea:62:a3:f1:07:8a:90:
                    a5:08:41:96:b8:c5:57:bb:6c:ca:ca:72:16:d1:03:
                    fc:58:03:2e:c3:ea:ed:2d:a9:fe:6f:04:f8:4d:fe:
                    62:af:7a:c6:02:6b:e1:e0:ec:d2:59:60:63:6c:07:
                    09:6f:8b:4d:31:f9:eb:5f:06:e7:a0:c7:00:c9:42:
                    c7:20:74:69:22:90:51:e2:f4:a4:83:c3:52:3d:45:
                    44:51:16:19:53:15:d2:94:22:64:f6:c0:09:3a:7e:
                    e3:54:8c:87:d0:4f:0c:93:10:23:75:9b:4b:0f:a6:
                    37:1c:fc:53:36:e7:57:75:a2:0b:54:15:f5:6e:ab:
                    2e:83:c6:0c:3b:c4:77:f8:d3:10:23:db:23:2c:95:
                    47:3a:8e:fb:b6:a9:10:37:0f:1c:62:7d:5c:d5:4b:
                    f8:91:d6:11:9a:d3:47:73:4c:9a:e9:0c:a4:8a:9d:
                    9a:72:8c:87:9d:4b:7c:1d:71:85:27:73:4a:a7:36:
                    65:4d:cc:90:28:2d:8e:de:61:72:36:5e:42:a0:a2:
                    98:2c:4b:54:f8:c6:3e:a5:31:c3:65:20:be:47:82:
                    f2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E2:17:65:01:3B:51:4B:9A:0D:C0:7A:CE:8F:93:2A:5E:93:26:A5
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5-IXZQE7UUuaDcB6zo-TKl6TJqU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:61:af:09:a8:a6:9b:82:89:cd:5f:3c:84:b6:4a:4d:69:7c:
         2e:c5:68:77:29:2f:57:58:b4:32:95:c6:ca:8d:dd:01:a6:62:
         52:f7:95:32:d8:65:f0:c5:83:54:9e:ab:75:29:9a:97:07:35:
         ae:2b:dc:fc:d9:97:36:28:a8:f4:13:20:6e:28:f5:7f:bc:3e:
         a0:be:61:85:ff:fc:5b:d0:0f:20:fb:55:e2:06:e5:36:b1:a0:
         30:42:8a:7d:88:76:09:b8:6b:48:dd:f7:47:1d:25:eb:ce:77:
         4c:16:fc:29:88:c0:0c:fc:95:55:b0:b0:95:38:b0:c4:00:d7:
         99:ca:3a:3a:6f:dc:03:00:fa:27:d2:94:e5:0a:85:f1:c8:ac:
         16:de:8d:9e:e8:85:89:e8:2e:f1:88:2c:a2:b2:7d:37:2f:fa:
         0f:92:15:d0:52:74:2e:f4:58:b4:93:11:81:00:fd:06:f9:66:
         e2:a0:27:54:7b:e5:09:d5:4f:8b:1b:f2:66:97:3b:af:c4:f9:
         0a:76:1c:b4:5d:2c:c3:1f:69:c6:55:49:65:4b:bc:7a:a7:be:
         4e:98:a9:70:82:d1:8b:85:c3:6f:74:dd:64:05:48:08:d1:5f:
         a6:41:3e:a7:f0:ea:a2:1b:a2:74:ef:eb:3a:2a:55:57:88:58:
         a5:4c:60:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----