Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/D6NTUJQa2dzrIeKeXl1AFDB6efY.roa
File:                     D6NTUJQa2dzrIeKeXl1AFDB6efY.roa (raw, json)
Hash identifier:          WvRhSqn9k0ClmqxP18ZLCFky5Y2+voCHYooOS9uf9rY=
Subject key identifier:   0F:A3:53:50:94:1A:D9:DC:EB:21:E2:9E:5E:5D:40:14:30:7A:79:F6
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B2F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/D6NTUJQa2dzrIeKeXl1AFDB6efY.roa
Signing time:             Wed 29 Sep 2021 02:46:16 +0000
ROA not before:           Wed 29 Sep 2021 02:46:16 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.193.56.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6959 (0x1b2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:16 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=0FA35350941AD9DCEB21E29E5E5D4014307A79F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6e:32:50:76:b9:93:a5:2a:fb:25:9e:3b:dc:
                    25:9e:01:0f:bb:57:0b:ec:27:49:71:45:70:d0:c9:
                    27:eb:aa:46:10:cf:b4:9a:dc:dd:13:60:ba:a3:81:
                    d3:fb:50:b0:2c:ca:90:0e:e6:77:92:f3:13:39:a0:
                    0a:f2:c1:5a:ee:84:f8:74:07:32:99:68:5d:3f:dd:
                    cd:4f:d1:8f:f3:4d:5e:11:73:17:d0:ce:87:57:d0:
                    99:91:38:d5:78:e4:72:72:2d:a7:24:4e:b2:25:0a:
                    7c:40:a9:27:71:9d:fe:6f:f8:79:60:f1:5a:0f:cb:
                    ed:e7:86:14:69:1e:67:75:f2:ae:70:d8:fc:74:7d:
                    ba:6d:61:d7:e0:78:71:0e:61:bb:aa:37:fe:2a:49:
                    c0:2a:db:c3:8d:f5:d6:d2:61:8a:18:20:c7:b7:f2:
                    8e:fa:f1:57:b0:d4:21:3c:2a:e5:83:39:69:a7:80:
                    a2:60:24:a4:50:00:91:9e:06:d8:ad:54:9c:db:9a:
                    51:94:5e:67:31:45:10:7e:71:e3:b7:b3:6d:01:22:
                    24:f3:16:66:9a:49:ad:ed:1c:5a:cf:a0:7c:98:44:
                    61:6e:67:9e:55:b0:d7:d4:aa:0d:3e:e0:a3:90:4f:
                    51:29:1f:3d:b2:46:2a:8d:b1:7b:c4:52:d2:bf:e0:
                    c6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A3:53:50:94:1A:D9:DC:EB:21:E2:9E:5E:5D:40:14:30:7A:79:F6
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/D6NTUJQa2dzrIeKeXl1AFDB6efY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:75:e7:89:d4:92:4f:a6:9b:0c:ca:a2:19:26:34:58:fd:fb:
         de:c0:83:86:f9:53:36:c1:72:0e:27:1a:72:60:d2:87:2a:72:
         47:1a:2e:a4:f6:4e:e4:3a:5a:b3:b0:cc:b2:e9:49:eb:82:83:
         04:b4:be:8f:60:d1:62:d1:29:54:7a:ef:73:0f:fb:81:0f:e7:
         a2:57:2e:95:1a:71:64:35:b2:16:93:96:db:18:65:e7:62:6e:
         96:86:c7:6e:35:c1:e2:c4:1d:7f:32:41:3e:ba:4c:d0:4e:92:
         5b:cc:ec:71:0b:3a:0e:3d:78:09:d8:66:47:56:2e:aa:82:cd:
         83:8c:f8:ed:b1:05:e2:87:84:72:13:49:67:07:02:b5:5f:21:
         cc:53:57:e6:fb:6b:10:44:e9:75:fc:a8:25:d4:93:bf:bf:9f:
         f5:d3:16:aa:82:2c:24:6f:6e:7f:8e:46:ad:86:33:5e:f4:d8:
         ef:20:32:35:7e:99:99:71:29:65:fd:1c:f9:04:36:1b:02:9a:
         a8:8a:49:60:91:c8:15:ca:49:b6:df:39:05:08:a4:e6:89:63:
         45:b0:7c:c5:e7:3d:34:00:be:f6:b3:0f:43:77:b0:82:3f:b4:
         98:e6:78:6b:46:96:0a:2d:b8:db:e1:43:4a:7a:69:10:42:35:
         05:9f:cd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----