Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6UxGJxt0CXX1-daf66l5tx9_4Ko.roa
File:                     6UxGJxt0CXX1-daf66l5tx9_4Ko.roa (raw, json)
Hash identifier:          aKxyt25zU9v6cargqAUtewIhP+jIUA8s3JFWxjXqLn4=
Subject key identifier:   E9:4C:46:27:1B:74:09:75:F5:F9:D6:9F:EB:A9:79:B7:1F:7F:E0:AA
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0DE1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6UxGJxt0CXX1-daf66l5tx9_4Ko.roa
Signing time:             Tue 29 Sep 2020 09:55:06 +0000
ROA not before:           Tue 29 Sep 2020 09:55:06 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.180.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3553 (0xde1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:06 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E94C46271B740975F5F9D69FEBA979B71F7FE0AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2f:1e:5a:cb:d8:0b:e4:b7:38:d0:3d:8f:bd:
                    a1:16:0f:4c:1d:8f:61:fb:30:09:a0:49:a5:21:29:
                    e4:6d:53:6d:9d:cd:d2:3a:89:3c:24:12:d3:6a:bb:
                    23:b3:fd:f9:d7:22:01:94:08:94:1f:17:74:7d:44:
                    9f:79:59:6b:5c:46:c5:b3:c2:c9:8b:91:32:b6:de:
                    db:09:8e:8c:45:7c:38:ca:57:2a:f4:45:6c:98:b6:
                    6c:99:e1:88:ab:98:54:39:02:7a:63:e4:45:15:05:
                    2f:80:4b:cb:9f:7b:66:63:89:e9:51:a4:99:80:c5:
                    7a:95:36:31:ff:2a:d9:dc:78:0e:74:6c:35:d2:01:
                    c6:7d:2f:70:cd:81:fb:43:ee:85:db:bb:38:a3:b5:
                    23:0c:8e:1f:92:f9:d2:22:47:f0:52:9d:17:e8:0e:
                    08:54:81:1e:72:0f:51:f9:d2:b1:fb:8b:65:c6:9c:
                    ee:0b:4d:91:b9:c1:ef:d9:d6:49:76:57:88:31:de:
                    b2:b2:88:d1:1a:73:9c:16:89:f4:60:16:26:db:6c:
                    93:92:62:89:f2:8a:b3:96:2b:f4:d4:33:14:4e:00:
                    ed:84:63:61:09:5a:d8:e0:e1:5f:32:e4:55:db:8b:
                    79:75:63:2a:10:c0:7e:0d:1e:0a:88:7d:39:a7:c2:
                    bc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:4C:46:27:1B:74:09:75:F5:F9:D6:9F:EB:A9:79:B7:1F:7F:E0:AA
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6UxGJxt0CXX1-daf66l5tx9_4Ko.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:ab:4f:a9:11:b4:08:24:6f:95:5d:b7:80:31:03:5c:2f:3c:
         a6:85:5f:73:2f:99:a3:00:5a:ee:a0:fa:66:7f:17:04:8a:03:
         94:96:7c:66:d4:00:87:44:0d:46:30:5d:2e:44:49:9f:7f:38:
         86:9d:6c:d9:7f:9d:6d:ec:cd:64:00:1b:cf:aa:3c:19:78:d1:
         60:67:73:28:c1:88:b0:9d:c2:72:f4:6f:fd:e0:ad:3c:3a:78:
         26:da:a2:8a:12:36:fb:b9:27:d2:93:89:85:fb:6a:35:02:49:
         da:ee:da:94:22:fc:49:36:46:d7:b7:57:c0:70:3e:2a:95:73:
         33:40:b7:f5:b2:a7:a9:64:a8:ca:88:6a:9d:b0:7d:28:76:49:
         f3:b0:05:8a:57:bc:68:69:73:a4:af:4f:11:5b:12:0e:8d:d4:
         90:f0:50:96:8f:53:aa:e8:62:92:cf:60:f9:42:3c:5c:87:d4:
         e6:c3:fe:4c:57:d9:c5:37:a2:ff:dc:58:2e:10:29:97:78:99:
         c4:7b:43:55:fb:d2:05:a4:b5:2c:12:62:89:5b:05:de:61:52:
         fa:8e:a8:38:90:a3:3f:19:0f:61:19:ae:8c:0c:93:4e:5a:c9:
         c0:2d:e3:b3:a5:ba:0c:ba:49:ea:4a:93:1c:f3:df:de:12:eb:
         1c:95:30:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----