Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DMo5nSBcoOtr5l3zWrjnowKxidg.roa
File:                     DMo5nSBcoOtr5l3zWrjnowKxidg.roa (raw, json)
Hash identifier:          X1RuMc24DimsAwEl2401Wbp1IWorM0U4xGzmp6qh5ew=
Subject key identifier:   0C:CA:39:9D:20:5C:A0:EB:6B:E6:5D:F3:5A:B8:E7:A3:02:B1:89:D8
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E9B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DMo5nSBcoOtr5l3zWrjnowKxidg.roa
Signing time:             Tue 29 Sep 2020 09:55:56 +0000
ROA not before:           Tue 29 Sep 2020 09:55:56 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.152.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3739 (0xe9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:56 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=0CCA399D205CA0EB6BE65DF35AB8E7A302B189D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a8:71:5f:bd:a3:ba:c7:d0:42:23:cc:34:23:
                    3e:c1:91:62:2e:03:c9:d4:e9:07:f4:8d:e4:2b:d3:
                    fb:97:37:75:a9:12:92:63:23:aa:d6:e8:b5:10:8f:
                    59:cd:cc:11:36:c0:b4:e9:d0:51:c9:f8:cf:f5:a6:
                    5f:38:e9:3b:73:63:e5:c0:4f:e2:64:85:fa:e9:43:
                    13:ec:bf:bc:9e:a0:27:dc:27:37:03:d1:0c:bf:1e:
                    18:31:a6:9c:0f:84:93:e3:03:88:12:f4:c1:46:4c:
                    06:b6:21:39:90:a0:16:52:c8:57:11:90:9c:f7:a1:
                    ed:31:f4:c3:56:9d:1f:96:0b:df:17:c2:2e:b3:4c:
                    70:d8:05:4f:82:7b:43:da:30:dc:82:cc:aa:b1:c0:
                    5d:04:f9:6c:4c:2b:b1:d0:e5:4c:0a:9a:7f:1f:55:
                    a9:ed:c4:13:22:31:fd:55:b0:7d:31:c8:6b:5c:81:
                    65:4d:d6:9a:9b:fc:aa:ed:ef:b6:5d:cb:2f:6f:d2:
                    11:92:b9:16:77:53:cd:4e:a4:9f:96:ff:f9:68:9e:
                    ba:9d:ac:c7:61:42:c5:ec:21:62:45:ea:63:cc:01:
                    32:79:89:d5:19:6f:33:43:e7:34:24:2a:9b:ca:40:
                    1c:6a:78:3f:c7:d4:cc:30:d9:89:fd:c2:a1:fd:3c:
                    c6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CA:39:9D:20:5C:A0:EB:6B:E6:5D:F3:5A:B8:E7:A3:02:B1:89:D8
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DMo5nSBcoOtr5l3zWrjnowKxidg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1e:cb:06:63:91:dd:0b:17:21:40:e3:c4:c1:bd:a2:0a:f6:81:
         46:4b:26:4d:c5:f2:f9:4d:08:ee:6c:5b:7b:1b:80:94:23:14:
         30:6f:ff:c2:10:48:9f:2f:57:81:f2:24:c9:87:5d:cc:89:e1:
         3d:6a:93:07:48:c9:e7:b9:43:61:86:d6:a5:b5:49:2e:61:a5:
         25:1a:62:96:27:7d:97:58:dd:fd:80:64:d1:dc:99:31:0d:b2:
         d8:8b:4a:3a:90:1e:2c:46:c1:21:06:e0:2b:68:fc:7e:6d:ba:
         37:6f:b0:16:1b:ad:8e:30:c6:96:0c:e8:ed:79:ca:30:d6:3d:
         c7:ac:46:7b:2f:47:3d:6b:be:fc:cc:c3:11:3e:3c:90:c8:a9:
         36:e0:c5:3d:a9:2c:1b:ac:5b:97:f1:7d:a6:0a:96:df:be:c8:
         86:04:a2:bd:38:4b:10:e8:1e:3e:e3:62:19:e5:89:bd:bd:8c:
         53:55:03:4a:da:0b:20:1b:70:6a:44:9a:63:72:ac:45:7f:80:
         c7:63:ed:2f:35:b2:d9:e7:2a:70:32:00:a4:d7:c5:82:73:9d:
         30:48:df:c1:f0:a2:90:4e:19:0e:5d:a2:f4:75:8c:4f:7e:6a:
         69:ae:63:07:8a:22:1f:ec:17:34:4a:4d:22:eb:a8:2c:bc:64:
         95:84:b5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----