Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LpjoNJvZkhdkLyctYNWsey96Ge8.roa
File:                     LpjoNJvZkhdkLyctYNWsey96Ge8.roa (raw, json)
Hash identifier:          S1CMVZ1mQY9EDtA+c3/thQwy9HFWIBq3+L/sWLQpfGg=
Subject key identifier:   2E:98:E8:34:9B:D9:92:17:64:2F:27:2D:60:D5:AC:7B:2F:7A:19:EF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       157D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LpjoNJvZkhdkLyctYNWsey96Ge8.roa
Signing time:             Sun 07 Feb 2021 12:04:55 +0000
ROA not before:           Sun 07 Feb 2021 12:04:55 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.16.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5501 (0x157d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:04:55 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=2E98E8349BD99217642F272D60D5AC7B2F7A19EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:46:79:68:96:5a:08:83:4c:1f:0d:a2:98:bc:
                    8a:04:1b:f9:95:be:58:d4:0b:1d:d8:38:a8:e7:7e:
                    53:80:77:37:8b:71:97:cb:2e:b9:25:7e:c2:89:bd:
                    fc:58:50:17:bb:f4:b2:97:89:d1:01:fc:b4:8c:34:
                    d0:17:25:60:c6:39:8a:9d:f8:38:4c:1d:a7:0a:7f:
                    66:0a:6c:71:6f:af:96:4c:44:fa:62:0a:de:f3:71:
                    2a:6d:f4:03:07:15:d3:82:32:85:e0:59:ee:f3:0c:
                    e9:3a:9f:e8:c9:bb:02:bf:c5:57:a6:c1:bb:62:cc:
                    67:30:dc:2e:54:f5:84:03:8f:7e:1b:75:ea:07:2c:
                    ca:08:70:f4:31:fa:4a:12:a6:f6:da:1f:32:ef:7f:
                    06:dd:03:58:28:fa:31:29:f2:3d:c7:35:c5:9f:dc:
                    70:6e:2a:31:ad:ef:57:0b:cd:bf:03:34:61:94:0e:
                    a4:4d:57:48:cd:76:68:5c:bc:b9:bd:33:7d:93:e8:
                    d1:4d:65:4b:cc:23:fa:52:60:46:5d:b1:91:73:ab:
                    20:e1:0d:5b:41:37:5d:ad:b8:12:78:95:5c:ef:06:
                    bf:d3:31:90:c2:18:07:65:dd:81:e0:0b:6f:1d:7b:
                    2c:e1:80:16:c5:4a:3b:70:89:bd:c3:96:3e:73:ea:
                    56:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:98:E8:34:9B:D9:92:17:64:2F:27:2D:60:D5:AC:7B:2F:7A:19:EF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LpjoNJvZkhdkLyctYNWsey96Ge8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:a2:0f:69:6b:02:5d:c5:b5:b7:05:b5:5b:20:b2:3d:3f:80:
         ff:07:3b:02:52:41:c1:41:19:e8:17:16:92:31:16:6e:af:a9:
         ce:94:51:3f:f1:aa:00:15:29:cf:7c:5f:e3:c9:6f:45:2c:fe:
         bb:fb:97:04:64:75:2f:34:ce:c4:a8:1e:08:fa:3c:b5:8f:bd:
         a0:d9:65:0e:a7:d4:a0:09:90:5a:46:f4:7d:42:4c:61:d1:de:
         5b:30:4b:38:43:60:29:76:05:17:bd:92:45:eb:3b:16:0e:68:
         e6:b0:7f:b2:87:88:27:ae:ae:9d:58:9c:2a:03:e0:06:5a:a9:
         b2:8d:03:65:2a:d7:e2:e0:0f:9d:30:b9:0e:46:f4:40:e3:e7:
         f0:d6:60:0a:e9:33:77:d8:a6:04:ee:18:bd:22:26:4b:4d:dd:
         0f:c8:ba:5c:44:8f:be:64:ee:2a:7b:7b:10:94:48:c1:98:02:
         9d:c8:b6:40:2e:ad:99:58:33:5b:82:5d:24:c6:c6:7c:38:8a:
         34:3c:83:44:67:3a:3e:bc:76:ae:d4:d2:1b:76:5c:ff:9e:c7:
         5e:b3:e5:6e:12:78:c2:f3:ff:31:b0:73:8d:d5:e7:d6:cf:55:
         f3:a1:c2:0c:3e:5b:8c:70:18:c8:7c:8c:e5:9e:4c:4f:89:45:
         96:f9:b4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----