Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DhQhnSPzYTS2TGwU5GIvuPoepgE.roa
File:                     DhQhnSPzYTS2TGwU5GIvuPoepgE.roa (raw, json)
Hash identifier:          53WdmvzBhoV2PwomR1slSr5J3idoo6zow4yGNwd2V9M=
Subject key identifier:   0E:14:21:9D:23:F3:61:34:B6:4C:6C:14:E4:62:2F:B8:FA:1E:A6:01
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0EEF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DhQhnSPzYTS2TGwU5GIvuPoepgE.roa
Signing time:             Tue 29 Sep 2020 09:56:18 +0000
ROA not before:           Tue 29 Sep 2020 09:56:18 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.193.48.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3823 (0xeef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:18 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=0E14219D23F36134B64C6C14E4622FB8FA1EA601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:af:6e:73:28:9c:2a:92:c3:15:c0:22:b2:fd:
                    b0:25:c0:b9:79:4b:b3:5e:ec:ca:b2:83:62:62:8c:
                    98:c5:74:9b:31:11:ac:44:e4:01:8f:1f:75:90:86:
                    df:c6:fa:8f:a6:3b:b9:cc:c3:2c:21:af:55:03:37:
                    4f:9d:5b:fb:70:4d:4b:ce:e8:8d:ae:d2:ca:72:71:
                    6b:45:74:e8:19:fd:72:ba:9b:4d:c4:83:62:d4:3c:
                    e3:70:30:1f:ec:f5:16:0b:ce:6e:8e:43:8c:d9:1d:
                    fd:5e:30:f6:84:8c:43:a8:5e:35:4b:96:d1:94:3c:
                    30:2c:d1:5a:c9:be:c0:b7:5f:28:e7:d0:69:56:6b:
                    21:9c:c3:12:69:e5:5d:2a:89:55:b5:89:c4:ee:69:
                    a4:a5:b5:cc:74:43:b8:58:2c:05:f9:b5:a2:db:47:
                    d2:40:1e:d0:f4:d2:a3:a1:6c:d6:3d:13:b3:74:54:
                    dc:fc:58:c5:c0:fe:47:02:43:5c:6c:1a:e3:3c:75:
                    ab:aa:1c:3e:b5:02:d5:4a:8b:52:15:dc:61:90:00:
                    5b:a2:1d:29:ac:a7:03:42:48:24:52:f4:2c:5f:3a:
                    dc:75:82:64:45:9e:11:9e:60:03:f0:fe:3b:63:9e:
                    80:5a:7d:77:20:84:49:f2:6a:5f:a6:07:37:ec:24:
                    dd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:14:21:9D:23:F3:61:34:B6:4C:6C:14:E4:62:2F:B8:FA:1E:A6:01
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DhQhnSPzYTS2TGwU5GIvuPoepgE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ad:06:52:05:ec:bb:dc:86:9a:bb:4a:55:10:29:38:df:e6:aa:
         82:2a:c4:75:ea:7c:4e:4d:51:39:0d:da:2c:d5:e9:4e:75:eb:
         1c:ec:e0:79:46:4f:49:5c:1b:22:26:8e:e7:92:85:04:3f:06:
         af:53:59:9b:e1:27:e3:7e:45:ca:8e:09:41:d3:0b:fc:42:ad:
         8d:bc:d9:04:cb:cf:0d:6f:90:0d:01:ef:58:ca:15:b9:15:14:
         92:52:4b:f3:a8:f6:7d:b4:c3:86:8e:41:af:f6:7d:17:05:11:
         0c:48:dd:68:88:a5:d5:dc:bc:54:48:2c:1d:4e:be:0b:7c:f1:
         03:8e:31:c3:a8:19:9a:29:e6:88:89:97:ab:7e:c1:c4:f5:af:
         f6:7b:ac:51:d2:b6:f0:8f:7d:d5:12:62:13:ab:d4:96:98:2e:
         a1:ac:24:7f:98:6e:33:84:5a:9f:27:f0:20:a1:72:eb:35:7c:
         87:83:63:96:c9:aa:a1:aa:d0:58:af:99:09:99:2a:33:75:5b:
         5e:0a:e1:e9:70:76:c6:90:10:8c:25:64:83:f3:df:4d:dd:5c:
         69:e1:0c:94:12:a9:24:b1:15:f2:f0:6a:23:17:09:61:60:0c:
         b2:63:13:d9:6d:7c:8f:82:15:a7:89:97:72:cd:51:cb:df:49:
         29:b9:18:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----