Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7TzsweaKJIKvGB0km4kSKKM0cuU.roa
File:                     7TzsweaKJIKvGB0km4kSKKM0cuU.roa (raw, json)
Hash identifier:          VU+yH1jyf1+7y3E5HqA6UnOv3XbaeY56O2fnk29m92k=
Subject key identifier:   ED:3C:EC:C1:E6:8A:24:82:AF:18:1D:24:9B:89:12:28:A3:34:72:E5
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       152F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7TzsweaKJIKvGB0km4kSKKM0cuU.roa
Signing time:             Sun 07 Feb 2021 12:03:18 +0000
ROA not before:           Sun 07 Feb 2021 12:03:18 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.200.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5423 (0x152f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:03:18 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=ED3CECC1E68A2482AF181D249B891228A33472E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d9:fa:53:85:95:7a:27:26:af:13:e4:2b:d3:
                    87:59:7b:f7:08:f8:a5:66:61:1a:ed:cc:6a:da:ae:
                    67:a4:71:c6:f8:7b:72:a0:f4:a9:d4:a8:b5:40:46:
                    7d:05:91:dc:03:7a:2a:c2:83:34:18:1f:55:d6:eb:
                    3c:6f:d5:54:7a:71:dd:1f:28:56:0e:df:a3:4c:a0:
                    a1:08:f3:6e:e1:9a:78:b1:56:32:6f:39:75:9a:8c:
                    23:24:18:47:ac:2c:84:e0:5c:cf:be:cf:37:b1:72:
                    1a:b4:d7:9a:bc:66:f4:7c:eb:42:aa:c0:95:6f:bc:
                    e0:d2:52:76:74:ae:a9:09:19:24:9d:e0:bb:79:c0:
                    6f:33:4a:5e:73:61:66:ea:7d:9e:74:42:3c:25:66:
                    5e:07:f4:b8:63:55:c9:09:06:c0:d4:ff:c7:05:a2:
                    3e:0f:5d:c4:41:55:dd:58:b7:f8:b7:c2:d8:13:46:
                    1d:c9:1a:a5:2b:25:7f:27:32:11:68:0a:db:e3:f1:
                    06:aa:a6:75:8c:5c:aa:37:15:6f:68:22:66:ba:af:
                    48:46:ff:6c:e1:39:6c:d7:7a:ac:a1:c2:46:33:58:
                    5f:62:83:a2:ed:13:01:f5:8c:d1:68:55:c8:5b:8b:
                    ed:d8:96:0c:7b:83:d9:74:01:e4:78:d4:a7:78:85:
                    38:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3C:EC:C1:E6:8A:24:82:AF:18:1D:24:9B:89:12:28:A3:34:72:E5
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7TzsweaKJIKvGB0km4kSKKM0cuU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         07:5e:61:06:82:51:98:f2:6b:c8:84:fd:a3:ef:fd:ca:2d:67:
         1a:8b:83:35:cd:7d:11:78:bb:81:ad:68:dd:33:ba:0d:4e:86:
         7d:7c:78:a9:6e:24:40:4e:d9:9c:0b:27:57:67:f2:3f:89:f9:
         50:f2:3b:61:bf:b6:14:20:67:63:e0:23:83:46:30:7e:d5:88:
         55:86:e4:37:04:52:f9:1d:d4:e0:2e:f1:d0:41:c4:dc:59:08:
         74:b8:0d:d0:70:ff:53:65:09:2c:7e:eb:20:06:38:62:8e:ad:
         3b:58:b6:80:3f:7a:62:ba:89:9e:06:d8:b7:13:6c:b5:34:51:
         f8:f5:55:a4:73:f3:38:08:9b:58:d9:bb:cf:5e:73:f6:4f:1f:
         8c:9b:64:0d:40:f1:8b:07:9d:fb:f0:51:03:60:1b:19:0a:d9:
         d6:97:36:dc:96:0d:c2:e6:ed:fd:6e:35:c7:bb:a4:47:e0:99:
         e0:94:77:fc:c5:1d:4d:ef:61:bc:6d:ab:ca:cb:4b:e3:18:dd:
         c9:77:e3:80:ba:9f:87:3a:e1:34:a8:08:08:cd:4e:41:6b:0e:
         72:87:8f:19:04:54:44:5e:4c:66:e3:c8:7e:aa:29:be:b2:af:
         ba:f6:00:73:73:51:21:48:3f:68:7d:6d:8e:2c:10:91:9c:c5:
         19:7b:12:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----