Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8JeGtQLZB69tVSRVGbJ7U6h5XmQ.roa
File:                     8JeGtQLZB69tVSRVGbJ7U6h5XmQ.roa (raw, json)
Hash identifier:          v4nK7hnjcuWTAsmyy3xKCiZwa0Q4KrE/2f8xann6XBs=
Subject key identifier:   F0:97:86:B5:02:D9:07:AF:6D:55:24:55:19:B2:7B:53:A8:79:5E:64
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1ADA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8JeGtQLZB69tVSRVGbJ7U6h5XmQ.roa
Signing time:             Wed 29 Sep 2021 02:45:49 +0000
ROA not before:           Wed 29 Sep 2021 02:45:49 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.194.144.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6874 (0x1ada)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:45:49 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=F09786B502D907AF6D55245519B27B53A8795E64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a1:29:08:0c:6b:2e:e8:93:57:3b:3c:24:b4:
                    89:9a:1f:9c:66:8d:a7:2f:30:f3:c2:14:76:fe:08:
                    da:61:3f:c4:8a:00:ef:05:ab:fd:f5:3a:07:a4:a2:
                    8f:d0:06:37:0e:10:5e:e0:8b:6c:57:c2:ca:53:4c:
                    73:5d:a9:43:f8:6e:32:1d:d7:e1:65:e3:22:32:87:
                    57:0a:28:4d:7c:24:ad:bf:ae:28:27:a8:fe:7e:ec:
                    d8:0b:eb:c1:a0:49:e1:62:fe:92:65:b8:63:19:6b:
                    22:88:08:ca:59:8e:dc:00:bb:00:d3:41:6d:df:10:
                    55:01:d4:c6:3a:62:bb:c9:47:90:a4:67:71:d3:61:
                    e1:9c:13:1c:93:58:8f:31:91:64:ec:fa:ea:7d:f3:
                    4d:e0:0c:78:f0:6b:6c:99:90:f6:15:9a:2a:e0:c9:
                    15:07:12:23:e0:9b:a0:01:17:5b:fb:64:44:75:1a:
                    78:ce:7d:32:2b:c3:86:ed:6e:40:d9:59:81:25:76:
                    b0:4e:87:58:8b:ba:dd:22:e3:6c:48:3e:aa:3a:27:
                    a4:d6:6f:20:d9:f2:75:8e:44:fb:58:ea:cb:17:cc:
                    fc:0a:ec:96:58:0b:96:36:9b:3c:4d:ab:e0:db:3f:
                    73:5a:59:59:e2:02:e4:cc:bd:c1:f3:f0:5e:91:d5:
                    31:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:97:86:B5:02:D9:07:AF:6D:55:24:55:19:B2:7B:53:A8:79:5E:64
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8JeGtQLZB69tVSRVGbJ7U6h5XmQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         95:80:44:9f:87:c8:a7:ce:1c:e9:cd:e2:8f:48:89:06:cb:88:
         88:b0:d0:52:12:1a:58:ff:64:df:36:41:49:58:5d:8b:0b:6f:
         23:dd:3f:20:10:42:c5:fd:8a:04:34:c3:20:bf:cd:5d:a0:3b:
         fc:1f:d6:c8:f0:34:ff:72:d0:8f:03:49:69:98:6a:57:54:35:
         12:8c:7d:ae:9e:ae:b5:6c:2c:5a:fa:cf:fb:b6:9e:39:05:7b:
         0e:83:bf:12:0b:e3:cc:0c:74:61:34:42:27:36:20:5d:d0:fb:
         fc:80:67:5b:a4:ce:1b:93:29:42:d1:35:0e:e2:ac:11:f2:fb:
         e7:8b:bc:27:35:f9:7c:5f:9b:62:ee:2b:e3:83:32:6d:5d:41:
         c8:92:23:9f:95:fe:b9:79:12:9b:70:2c:c1:3e:08:b6:b3:24:
         63:85:3d:e2:87:c4:c9:1f:1f:ee:17:54:e8:33:b8:e8:9d:30:
         17:83:eb:70:38:ef:00:2b:7d:22:0f:a6:6e:8e:95:ad:51:c5:
         9a:78:a6:49:8c:c0:ec:13:e2:31:62:8d:fe:da:55:90:c9:51:
         0f:a5:b2:85:cd:09:e3:d6:03:2c:f2:41:90:81:0a:89:8e:fc:
         d9:02:2f:0b:c1:44:03:bd:29:f3:82:b2:b4:08:5a:f0:7f:26:
         f5:51:4a:32
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGtowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ1NDlaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEYwOTc4NkI1MDJEOTA3
QUY2RDU1MjQ1NTE5QjI3QjUzQTg3OTVFNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDwoSkIDGsu6JNXOzwktImaH5xmjacvMPPCFHb+CNphP8SKAO8F
q/31Ogekoo/QBjcOEF7gi2xXwspTTHNdqUP4bjId1+Fl4yIyh1cKKE18JK2/rign
qP5+7NgL68GgSeFi/pJluGMZayKICMpZjtwAuwDTQW3fEFUB1MY6YrvJR5CkZ3HT
YeGcExyTWI8xkWTs+up9803gDHjwa2yZkPYVmirgyRUHEiPgm6ABF1v7ZER1GnjO
fTIrw4btbkDZWYEldrBOh1iLut0i42xIPqo6J6TWbyDZ8nWORPtY6ssXzPwK7JZY
C5Y2mzxNq+DbP3NaWVniAuTMvcHz8F6R1TF3AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU8JeGtQLZB69tVSRVGbJ7U6h5XmQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzhKZUd0UUxaQjY5dFZTUlZH
Yko3VTZoNVhtUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wpAwDQYJKoZIhvcNAQELBQADggEBAJWARJ+HyKfOHOnN4o9IiQbLiIiw0FISGlj/
ZN82QUlYXYsLbyPdPyAQQsX9igQ0wyC/zV2gO/wf1sjwNP9y0I8DSWmYaldUNRKM
fa6errVsLFr6z/u2njkFew6DvxIL48wMdGE0Qic2IF3Q+/yAZ1ukzhuTKULRNQ7i
rBHy++eLvCc1+Xxfm2LuK+ODMm1dQciSI5+V/rl5EptwLME+CLazJGOFPeKHxMkf
H+4XVOgzuOidMBeD63A47wArfSIPpm6Ola1RxZp4pkmMwOwT4jFijf7aVZDJUQ+l
soXNCePWAyzyQZCBComO/NkCLwvBRAO9KfOCsrQIWvB/JvVRSjI=
-----END CERTIFICATE-----