Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5VDtI9hKN4ounYE1l9t0qq28Dnk.roa
File:                     5VDtI9hKN4ounYE1l9t0qq28Dnk.roa (raw, json)
Hash identifier:          EwixMXnyPcP60T+pGFVvYiMIVXqWBuszJXezXK1bQS8=
Subject key identifier:   E5:50:ED:23:D8:4A:37:8A:2E:9D:81:35:97:DB:74:AA:AD:BC:0E:79
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       20E9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5VDtI9hKN4ounYE1l9t0qq28Dnk.roa
Signing time:             Fri 25 Nov 2022 04:39:16 +0000
ROA not before:           Fri 25 Nov 2022 04:39:16 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.193.32.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8425 (0x20e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:39:16 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=E550ED23D84A378A2E9D813597DB74AAADBC0E79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:35:bc:89:ff:cf:07:4d:24:8b:d3:fc:b4:39:
                    28:c4:92:b8:07:50:ce:7b:d4:7c:bd:22:a8:54:1b:
                    da:da:90:a5:c3:39:5a:3d:25:5f:e1:29:67:ef:2f:
                    d9:33:30:35:f9:08:8a:6f:f7:f7:69:b1:72:ad:4c:
                    e4:d5:e2:ee:d4:4a:9b:87:d3:33:18:f1:95:a3:23:
                    3d:32:05:20:e1:22:c9:49:5f:8a:1e:df:10:70:9b:
                    9b:82:4f:e9:50:d6:b0:d6:4d:5e:65:cd:61:6e:c1:
                    05:bc:37:53:a1:62:bf:69:39:54:d1:66:c7:25:64:
                    be:4d:01:47:84:bf:91:d2:ec:87:d7:16:23:da:3a:
                    8e:d0:3c:ce:a9:84:88:22:4f:32:7f:e4:e4:ba:8c:
                    f5:67:d1:23:9b:d7:5b:ca:41:bf:bd:f5:5d:f7:cf:
                    fb:19:67:ef:38:85:5d:ce:c0:ab:e9:48:8d:11:ae:
                    ea:6d:99:86:bf:a5:e2:59:d6:2a:cf:b4:c9:22:5a:
                    98:29:1a:00:62:82:5d:9d:41:5a:be:50:01:5e:b2:
                    4b:70:ef:87:80:58:a9:c7:d2:59:e5:94:fb:e3:1b:
                    4c:f3:5b:b0:fa:d4:92:4f:46:46:55:37:0d:7b:85:
                    88:42:73:31:9f:c4:7e:5b:4f:2b:36:fd:7a:b5:e2:
                    33:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:50:ED:23:D8:4A:37:8A:2E:9D:81:35:97:DB:74:AA:AD:BC:0E:79
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5VDtI9hKN4ounYE1l9t0qq28Dnk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         54:bc:f5:7e:2f:36:65:d7:ba:bf:a9:9a:76:3d:6e:58:59:34:
         bb:16:6c:96:68:e4:04:12:77:da:8c:3f:6a:24:eb:cc:98:9e:
         3a:74:4c:c1:64:07:c4:6b:8f:a6:12:b8:d7:28:8f:55:23:c1:
         75:9b:1a:0e:8f:2f:4f:23:a1:f7:bd:54:fb:f1:ed:f5:07:d9:
         2e:3a:2d:d9:d7:e2:fe:88:b8:5f:2b:e2:7b:1f:fe:0c:a0:4b:
         a5:2a:ec:06:0f:9d:d6:f1:4b:10:38:ad:b1:c3:49:0b:3e:2e:
         32:f8:59:7f:86:d0:54:a6:71:2d:fa:70:32:de:59:b4:ba:76:
         f5:94:c7:46:0d:6b:1c:81:09:a0:29:3f:f4:ef:8b:7b:9e:af:
         2d:46:5a:93:c8:dd:90:07:bc:bd:b9:16:df:dc:e4:c5:f9:3f:
         79:e9:23:ee:86:60:1a:bf:36:c9:96:65:60:45:ec:8c:1f:88:
         19:97:78:ee:41:23:cc:6d:1e:d6:a0:57:f2:22:44:56:1f:ab:
         03:88:68:b6:33:1f:0a:4e:14:58:0b:63:fa:1d:9e:9d:a8:df:
         d7:9c:3e:49:b5:68:85:4f:c7:64:70:3f:3b:df:0a:2f:ed:dd:
         95:70:d0:99:ab:f8:71:55:f9:35:3a:81:84:f8:03:83:89:1e:
         66:d5:29:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----