Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6iyAPs7347bFg63y99YeXSx63Cs.roa
File:                     6iyAPs7347bFg63y99YeXSx63Cs.roa (raw, json)
Hash identifier:          CAUyrv40PIp8RsP7I8gtEUr66zV+XwwJ/p15Q1RQfhk=
Subject key identifier:   EA:2C:80:3E:CE:F7:E3:B6:C5:83:AD:F2:F7:D6:1E:5D:2C:7A:DC:2B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E36
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6iyAPs7347bFg63y99YeXSx63Cs.roa
Signing time:             Tue 29 Sep 2020 09:55:28 +0000
ROA not before:           Tue 29 Sep 2020 09:55:28 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.132.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3638 (0xe36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:28 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=EA2C803ECEF7E3B6C583ADF2F7D61E5D2C7ADC2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:47:9d:bf:50:c2:e1:7a:20:b5:46:86:b9:50:
                    3a:71:e9:9a:8c:b2:28:33:79:81:3c:38:3c:0e:a1:
                    97:6c:ed:71:47:a0:8d:89:35:2f:66:92:6b:80:f8:
                    ec:05:3c:05:59:55:2f:b7:77:0f:ab:0e:fb:bb:3a:
                    82:fc:7e:d9:c4:50:d0:98:9f:b1:00:86:a2:67:1c:
                    ec:d9:91:94:5f:05:8c:d7:5b:b6:18:79:f0:01:16:
                    ac:eb:b3:1f:1b:73:6d:74:d6:30:be:81:a3:0a:5d:
                    a4:e4:dc:b6:0c:68:e5:a4:28:38:63:6f:4c:8a:df:
                    9b:12:b3:d4:e0:57:70:0a:37:48:18:ea:47:95:78:
                    f9:fb:f0:3f:be:16:01:ea:9c:2a:99:c2:da:b5:67:
                    5a:a6:5b:85:31:ec:fb:d6:57:95:6d:dd:cb:32:64:
                    3f:9d:64:7b:36:74:7d:5b:66:c4:ef:bb:82:69:f0:
                    82:90:2b:19:98:58:d7:31:38:29:b9:51:d8:36:50:
                    89:94:d1:de:f5:5a:4b:20:37:92:15:38:a6:31:6f:
                    ad:c2:25:b0:db:02:d8:1b:b8:d9:68:0d:44:a6:6b:
                    1a:56:0f:3e:9a:0b:ae:e7:cd:f5:b3:d9:63:1e:53:
                    15:d6:14:92:97:f3:7c:76:29:5e:21:76:4b:ff:dd:
                    35:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:2C:80:3E:CE:F7:E3:B6:C5:83:AD:F2:F7:D6:1E:5D:2C:7A:DC:2B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6iyAPs7347bFg63y99YeXSx63Cs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:80:8a:26:38:db:65:bd:98:cd:2a:96:77:bc:4a:e8:5e:e5:
         2a:3b:1a:ac:24:8a:4f:77:74:38:68:85:5f:6a:11:b6:ce:6b:
         d1:88:1d:73:80:32:f0:c0:71:54:a3:11:f1:7e:db:83:7e:82:
         68:a3:c4:05:f8:96:2d:45:21:bc:63:70:05:06:db:93:b2:12:
         c8:fe:15:37:33:6f:b5:b1:81:19:08:2a:9a:51:b7:55:af:12:
         da:f9:7d:f2:93:56:0b:96:4b:28:b7:7b:24:1f:98:d5:2d:31:
         19:30:43:a2:eb:87:b3:1d:2c:0d:6d:f9:6b:b6:e1:7b:49:c6:
         6a:ca:b3:da:f8:79:2a:94:7b:04:78:d3:71:a8:65:d6:36:17:
         92:61:f9:f2:3c:eb:a1:98:00:fc:27:2a:b6:97:62:ec:c9:64:
         a3:55:d1:cb:49:28:aa:39:76:d4:48:40:4b:bc:e1:ea:a4:a6:
         02:03:28:ef:a0:8a:36:39:df:44:60:78:1a:ec:b0:17:28:3e:
         f9:d1:1a:cf:b6:76:05:84:bb:da:05:60:0d:c8:9f:3d:3e:a4:
         48:6f:7e:b1:98:6f:4e:01:d9:ae:94:18:79:b1:a9:f5:d3:73:
         fc:2f:01:1e:c7:7c:b6:3e:da:c9:c3:27:d7:9d:73:cf:61:c8:
         c8:62:81:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----