Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6EhBX3vjbcYSQpnpEy6bfg0mtTQ.roa
File:                     6EhBX3vjbcYSQpnpEy6bfg0mtTQ.roa (raw, json)
Hash identifier:          bROJWLCDs3btrEalLJDqvSxUpOcY8lOkmdiyJYG8NnM=
Subject key identifier:   E8:48:41:5F:7B:E3:6D:C6:12:42:99:E9:13:2E:9B:7E:0D:26:B5:34
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1533
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6EhBX3vjbcYSQpnpEy6bfg0mtTQ.roa
Signing time:             Sun 07 Feb 2021 12:03:22 +0000
ROA not before:           Sun 07 Feb 2021 12:03:22 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.204.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5427 (0x1533)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:03:22 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E848415F7BE36DC6124299E9132E9B7E0D26B534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:15:41:25:19:1a:24:e7:a8:a7:b5:6b:5c:7b:
                    ea:9c:a4:61:99:86:d3:3c:14:70:cf:92:da:4b:d4:
                    56:7c:d7:d7:f2:1b:dc:90:9b:f2:46:94:83:13:a8:
                    fe:6d:6f:65:61:d6:1f:93:ad:06:b3:61:27:96:50:
                    3e:55:d2:5e:ed:94:4b:98:ed:0c:7b:24:8b:f1:ec:
                    2f:b2:4d:47:91:d7:ce:e0:88:a1:b2:ef:76:ec:58:
                    12:b8:a7:96:8a:f7:fb:3c:81:6d:31:cf:59:82:2f:
                    8f:18:c9:ec:29:0a:1c:93:72:69:16:0f:b6:08:57:
                    6d:a4:3e:ef:27:a6:b9:78:1c:d1:32:be:10:b9:2d:
                    d6:20:25:82:9b:d7:46:4d:40:9b:0c:a1:84:c9:82:
                    d3:8b:74:37:32:51:b2:32:34:47:42:98:0e:40:38:
                    60:bf:62:92:2b:51:8a:a9:57:8d:19:85:77:b6:d7:
                    af:84:77:0d:4c:8a:92:14:bd:30:2e:60:b7:63:0c:
                    d4:2b:89:5a:2b:2b:ca:e8:56:9d:ac:be:50:9e:e8:
                    3a:68:e3:6f:22:b7:30:f0:6a:44:d6:15:08:3e:f8:
                    2a:6a:40:72:d0:c8:14:3d:60:4a:c8:c8:34:39:b0:
                    19:bf:44:e5:b2:0e:02:62:b6:c7:d6:73:ee:d1:71:
                    d6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:48:41:5F:7B:E3:6D:C6:12:42:99:E9:13:2E:9B:7E:0D:26:B5:34
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6EhBX3vjbcYSQpnpEy6bfg0mtTQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:41:b3:68:8e:3f:bb:c8:5f:3b:29:df:4a:71:bb:ba:e3:30:
         d0:c4:ae:c2:d5:6e:f6:bf:e7:7e:4c:e0:fd:dd:0d:f0:2a:a2:
         bf:aa:11:51:75:e7:03:02:24:97:bb:51:dd:35:63:1e:80:a0:
         98:71:71:8e:aa:54:a5:bd:3f:4a:b2:22:93:ad:2c:76:c1:2d:
         b5:e9:73:2a:6e:9d:af:ba:cd:cf:3d:85:58:e1:21:ec:9f:a9:
         c0:42:d1:b7:42:f7:c7:91:8d:61:c9:ad:78:63:eb:86:bb:83:
         47:ce:b7:e7:ef:09:0a:3c:b8:55:11:c4:7e:04:6d:2d:56:ad:
         7f:e9:62:78:a6:17:bf:06:cb:80:d6:10:e9:14:6f:65:3c:75:
         05:17:3b:c9:18:bd:0d:97:8f:1a:6e:83:2f:31:62:95:d6:3c:
         d2:4a:ca:57:3d:d2:ed:a5:59:f3:20:15:ff:5a:35:05:24:12:
         f2:86:49:58:e8:a3:aa:6d:43:15:b6:ee:5d:4d:ee:a3:31:10:
         76:82:50:16:56:2b:ff:64:1a:05:af:80:ea:84:75:29:a4:67:
         53:c0:3f:13:e0:97:de:6a:ed:78:2d:bf:8c:7b:25:be:80:bb:
         18:88:ee:ee:16:d3:e3:b2:85:1d:f0:fa:e1:cc:ea:14:c3:57:
         b3:2d:fb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----