Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CkLv1IiRXo5SU2KsO4dwYVO0xds.roa
File:                     CkLv1IiRXo5SU2KsO4dwYVO0xds.roa (raw, json)
Hash identifier:          5MaBMoG2z1Sxwsf9WhZqigCq1ReHCZZyoTtsxxGawv4=
Subject key identifier:   0A:42:EF:D4:88:91:5E:8E:52:53:62:AC:3B:87:70:61:53:B4:C5:DB
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D9A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CkLv1IiRXo5SU2KsO4dwYVO0xds.roa
Signing time:             Tue 29 Sep 2020 09:54:45 +0000
ROA not before:           Tue 29 Sep 2020 09:54:45 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.193.24.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3482 (0xd9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:45 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=0A42EFD488915E8E525362AC3B87706153B4C5DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e4:bb:01:ef:e9:92:09:bc:ae:a9:53:e9:de:
                    ed:4c:ce:f8:8c:04:96:88:5e:47:b2:16:2b:30:85:
                    d8:2a:27:13:f8:b5:0c:68:b2:30:63:4d:ba:af:5c:
                    79:c8:5e:61:89:d6:d1:cd:3c:37:56:ba:d5:fb:ef:
                    25:b0:ae:68:40:b8:2b:14:59:15:d6:09:a9:a7:d2:
                    cd:20:ca:e1:b6:d0:b4:0e:43:3b:43:a3:23:e6:61:
                    d1:ef:54:72:f2:08:7a:fe:9b:52:e8:94:89:ab:60:
                    7a:d0:df:d3:bc:31:4a:bb:3c:ca:1b:8f:44:d6:87:
                    c9:6b:9a:93:5c:b0:da:87:25:17:3b:55:f7:f8:ca:
                    88:af:cf:2c:eb:41:74:b3:67:ce:5c:99:f4:b3:50:
                    d2:2d:c2:7a:6e:97:72:17:72:f3:e7:30:89:08:73:
                    b7:2c:64:55:62:b3:d0:4f:18:db:eb:c3:d7:99:ba:
                    19:2a:37:f2:66:c9:1a:1d:91:1d:51:05:dc:04:ce:
                    bd:4c:53:7b:96:61:7e:b8:4f:7c:6f:0e:b4:29:7a:
                    1d:87:7f:ad:8c:54:25:9e:41:14:ed:6c:76:1f:99:
                    92:5b:55:17:95:85:c2:69:62:33:fb:2b:9d:89:f0:
                    bb:1e:d7:65:86:28:1e:86:43:2a:e4:2f:78:3b:c0:
                    be:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:42:EF:D4:88:91:5E:8E:52:53:62:AC:3B:87:70:61:53:B4:C5:DB
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CkLv1IiRXo5SU2KsO4dwYVO0xds.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         61:6b:2b:0b:2a:d1:c2:1b:d4:3f:a1:65:54:f9:de:1d:0a:09:
         4f:ee:74:df:e6:e9:4e:7e:83:92:01:f1:35:fc:e8:a6:ee:9a:
         b2:e7:c3:9d:ca:9b:09:d1:99:31:70:26:16:22:ba:9a:c7:fd:
         e4:c9:10:70:72:64:fe:05:70:d6:f1:df:4f:ad:d5:fe:80:4f:
         43:95:69:d5:a7:52:72:51:d2:49:4d:24:de:64:ee:25:6a:e0:
         9b:ba:cc:c3:a5:20:bc:aa:dd:fd:c5:6a:7c:ec:06:3b:56:76:
         cc:a4:e5:2e:b8:d5:74:14:b9:c1:54:44:f8:0e:d0:2a:2f:ab:
         24:04:97:06:b1:ce:d9:84:d4:b5:1d:4c:76:11:2e:54:85:09:
         0c:e7:df:8d:17:df:ce:45:a9:e4:54:3d:8d:a7:f8:c5:19:55:
         33:c5:3a:5b:1e:31:82:8f:ab:16:69:37:aa:c4:0d:df:0d:ef:
         c3:af:d3:88:f5:02:27:da:8a:98:ea:cb:70:4d:fe:bc:4c:c5:
         b9:2b:58:37:b9:0c:e8:da:bc:c5:2b:b2:c2:cb:bd:02:3b:8b:
         ff:0a:d2:5e:88:e3:c1:07:3a:70:05:28:66:02:a3:e0:b7:b3:
         7c:e0:09:53:f8:fc:5c:fd:2a:0b:da:5e:17:b1:86:d9:77:d8:
         a9:f9:ef:75
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDZowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU0NDVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDBBNDJFRkQ0ODg5MTVF
OEU1MjUzNjJBQzNCODc3MDYxNTNCNEM1REIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCr5LsB7+mSCbyuqVPp3u1MzviMBJaIXkeyFiswhdgqJxP4tQxo
sjBjTbqvXHnIXmGJ1tHNPDdWutX77yWwrmhAuCsUWRXWCamn0s0gyuG20LQOQztD
oyPmYdHvVHLyCHr+m1LolImrYHrQ39O8MUq7PMobj0TWh8lrmpNcsNqHJRc7Vff4
yoivzyzrQXSzZ85cmfSzUNItwnpul3IXcvPnMIkIc7csZFVis9BPGNvrw9eZuhkq
N/JmyRodkR1RBdwEzr1MU3uWYX64T3xvDrQpeh2Hf62MVCWeQRTtbHYfmZJbVReV
hcJpYjP7K52J8Lse12WGKB6GQyrkL3g7wL4zAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUCkLv1IiRXo5SU2KsO4dwYVO0xdswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0NrTHYxSWlSWG81U1UyS3NP
NGR3WVZPMHhkcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wRgwDQYJKoZIhvcNAQELBQADggEBAGFrKwsq0cIb1D+hZVT53h0KCU/udN/m6U5+
g5IB8TX86KbumrLnw53KmwnRmTFwJhYiuprH/eTJEHByZP4FcNbx30+t1f6AT0OV
adWnUnJR0klNJN5k7iVq4Ju6zMOlILyq3f3FanzsBjtWdsyk5S641XQUucFURPgO
0CovqyQElwaxztmE1LUdTHYRLlSFCQzn340X385FqeRUPY2n+MUZVTPFOlseMYKP
qxZpN6rEDd8N78Ov04j1Aifaipjqy3BN/rxMxbkrWDe5DOjavMUrssLLvQI7i/8K
0l6I48EHOnAFKGYCo+C3s3zgCVP4/Fz9KgvaXhexhtl32Kn573U=
-----END CERTIFICATE-----