Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8kQh8C0TSl3LFQ53NcvT29oSAPA.roa
File:                     8kQh8C0TSl3LFQ53NcvT29oSAPA.roa (raw, json)
Hash identifier:          9w9ktBy0PB7xDP5Zy6OAI8NgZn/f4a2u+bKcUgs9isY=
Subject key identifier:   F2:44:21:F0:2D:13:4A:5D:CB:15:0E:77:35:CB:D3:DB:DA:12:00:F0
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       18C5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8kQh8C0TSl3LFQ53NcvT29oSAPA.roa
Signing time:             Sun 07 Feb 2021 12:53:33 +0000
ROA not before:           Sun 07 Feb 2021 12:53:33 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        123.193.80.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6341 (0x18c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:53:33 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F24421F02D134A5DCB150E7735CBD3DBDA1200F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d7:b7:0c:0b:f4:29:29:23:d6:1d:2d:d0:00:
                    e5:6c:dd:c1:4d:b6:e9:09:27:eb:9c:e4:85:22:e5:
                    2a:32:c1:9a:6e:35:27:51:30:8d:f7:d4:a8:66:92:
                    28:fe:3f:75:0c:ac:d6:db:63:75:c9:53:ee:ff:07:
                    6f:b7:6d:26:b8:1f:a0:82:07:e5:25:20:5b:22:cd:
                    d6:1d:f1:5d:4e:e2:70:22:a8:aa:16:db:d6:7a:92:
                    5c:25:40:0e:82:cc:2b:44:7b:db:d2:9a:15:9d:c8:
                    2d:88:cb:c2:e4:d3:7d:75:30:96:93:74:92:45:80:
                    87:26:6b:8a:30:42:01:db:b9:c3:fe:42:6d:ce:96:
                    f5:d4:3d:69:c8:3c:fb:6b:b8:b0:1f:c6:07:79:f8:
                    ed:62:80:27:5b:67:6a:14:e2:6b:5a:49:dd:38:47:
                    92:55:54:fc:f9:83:1e:91:16:bd:96:2c:a0:80:39:
                    7f:d8:19:71:51:15:18:e4:e4:3e:2d:89:b9:cc:30:
                    32:7e:48:21:01:ab:be:d7:82:e5:22:60:ca:28:8f:
                    4e:a1:a0:e6:02:54:a9:49:d5:1f:02:a2:9f:0a:63:
                    f1:e8:57:98:22:11:e1:fa:5e:4e:b6:f1:dc:53:83:
                    43:f4:09:c0:41:bf:6e:65:d1:24:d2:49:e8:cc:13:
                    6d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:44:21:F0:2D:13:4A:5D:CB:15:0E:77:35:CB:D3:DB:DA:12:00:F0
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8kQh8C0TSl3LFQ53NcvT29oSAPA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         94:04:df:db:e5:e8:a9:60:33:95:6d:e6:e7:b0:13:e8:b1:7c:
         18:29:30:de:a8:35:b2:35:fc:8e:d9:77:f9:c5:44:f2:29:74:
         1b:cf:6b:69:91:fc:ff:3f:bc:b9:5b:bd:9e:f2:99:b6:30:35:
         f4:9b:05:9d:ff:ce:65:a2:7d:f3:5a:c5:3d:40:85:6b:49:8e:
         ac:fc:84:2b:c5:f0:ee:eb:3d:b6:d3:0b:74:e9:07:16:6e:6a:
         c8:5e:46:26:43:e4:3a:3a:a7:3d:ca:3b:26:29:8b:f8:9b:2b:
         ad:ee:f3:60:73:2b:20:4e:c2:be:d2:3f:69:fa:65:50:af:e4:
         0a:2d:00:34:8e:d5:24:94:8b:1a:8a:00:20:d3:fc:0a:1b:ba:
         87:f7:4f:2f:07:22:c9:57:bd:7e:53:6c:b8:e6:e3:ab:d2:45:
         57:33:2f:0b:5b:e8:00:b0:19:a9:41:57:7b:30:61:5f:70:a4:
         fb:0f:17:80:4c:05:b9:21:3d:85:8e:55:3b:c2:aa:b4:58:87:
         a8:e0:50:cf:16:45:b2:8f:1a:1f:8e:d3:6e:fb:d8:63:44:bc:
         63:bd:b3:18:7a:3f:63:c7:d8:01:3d:72:52:01:e5:e5:82:33:
         ca:d0:39:ae:f8:ff:31:0a:f5:d2:7b:7b:9d:2d:da:53:72:9d:
         00:4c:f0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----