Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BrC855crnhTgLgq1kCw1wozG1aQ.roa
File:                     BrC855crnhTgLgq1kCw1wozG1aQ.roa (raw, json)
Hash identifier:          j++01o5fS6xsuCMdf+pjHKp1yjoI8iyYTkvPwsSx5sw=
Subject key identifier:   06:B0:BC:E7:97:2B:9E:14:E0:2E:0A:B5:90:2C:35:C2:8C:C6:D5:A4
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1BD7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BrC855crnhTgLgq1kCw1wozG1aQ.roa
Signing time:             Wed 29 Sep 2021 02:47:04 +0000
ROA not before:           Wed 29 Sep 2021 02:47:04 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.195.144.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7127 (0x1bd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:04 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=06B0BCE7972B9E14E02E0AB5902C35C28CC6D5A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:32:25:de:82:17:80:49:df:34:b5:95:0a:23:
                    1f:f7:70:5f:f5:5e:b2:d7:07:b9:97:f0:54:39:d9:
                    fe:d8:03:4e:ee:56:30:78:fb:71:3b:3b:76:47:24:
                    71:12:ee:8e:5a:53:97:0e:c3:c8:59:65:85:fe:9f:
                    f7:f3:c2:72:24:e3:e3:20:aa:0e:ee:f1:d6:de:eb:
                    94:93:5c:0c:58:95:8e:fc:df:03:21:5e:cb:52:c6:
                    f2:ec:57:ab:27:b8:97:6f:c5:79:c0:6c:47:21:9c:
                    8b:53:2b:4b:b3:e8:94:67:9f:5a:70:f9:ce:c0:1c:
                    5a:c1:05:d0:62:47:34:2c:77:dc:30:9c:09:61:6a:
                    46:33:b9:9e:6d:b9:7f:5a:1a:12:f1:cd:9d:27:37:
                    18:64:76:d8:63:db:43:9c:84:2d:d8:b4:a6:87:35:
                    5f:b9:89:74:f6:36:53:aa:ec:4e:26:88:c1:09:55:
                    ee:ba:66:55:9d:1c:ed:e4:ac:4b:31:1e:ab:2d:14:
                    e1:da:c6:87:ad:fc:98:88:b1:62:ed:4b:a8:55:37:
                    5b:95:49:d6:b4:13:12:5a:e1:31:8d:16:f3:86:b4:
                    85:d2:4a:31:17:87:38:0a:85:9c:36:cc:4d:f0:d6:
                    47:46:33:19:8c:d3:23:84:64:5b:43:b9:75:09:97:
                    fd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B0:BC:E7:97:2B:9E:14:E0:2E:0A:B5:90:2C:35:C2:8C:C6:D5:A4
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BrC855crnhTgLgq1kCw1wozG1aQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2f:96:b1:c4:49:a5:7a:f0:e1:07:4f:5f:b2:e0:5d:ed:99:50:
         93:ce:55:91:60:dd:e4:4e:c1:a0:27:21:7e:0f:b6:69:b5:da:
         02:d3:ea:b1:50:3d:16:37:a9:5d:43:7b:01:ba:7b:81:f7:88:
         33:62:14:f1:31:74:31:b9:c7:1c:49:74:55:5b:78:fd:11:25:
         8d:0b:6f:03:16:89:87:fc:ee:f8:a9:9a:c0:75:34:86:ae:de:
         11:04:8c:84:60:71:2d:1c:8f:4c:b5:3a:0b:96:41:a6:f5:ff:
         05:4a:f2:24:ac:bc:78:e9:ce:1c:0b:7d:5e:e2:06:09:b5:7a:
         32:f5:a2:ab:9d:41:0b:37:4a:5a:42:3e:cd:49:a0:a8:83:41:
         65:e8:95:eb:48:aa:d6:5d:79:2f:c7:8f:d2:02:62:fe:a5:75:
         5e:b8:82:de:44:85:cf:93:60:ad:ca:51:42:a4:d8:ba:1a:2a:
         62:8d:6a:6b:e9:86:0e:d4:b7:32:62:29:bb:e5:96:0d:71:55:
         f9:09:2e:65:c2:49:fc:81:18:02:ba:c5:45:08:b1:cd:51:5a:
         df:13:29:78:5a:73:bd:10:0c:93:70:6e:5f:4d:47:46:25:f9:
         37:f3:d7:43:a7:a3:b5:ca:88:65:5d:57:7f:2e:3e:f0:cf:34:
         02:b4:44:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----