Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LxOqFdRtyZM5bvS6pkyzE7PzNa4.roa
File:                     LxOqFdRtyZM5bvS6pkyzE7PzNa4.roa (raw, json)
Hash identifier:          tV7QWo5RgT4aNCLTCSP6RgGwBteh5wKXi86u3spc9bI=
Subject key identifier:   2F:13:AA:15:D4:6D:C9:93:39:6E:F4:BA:A6:4C:B3:13:B3:F3:35:AE
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       14C7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LxOqFdRtyZM5bvS6pkyzE7PzNa4.roa
Signing time:             Sun 07 Feb 2021 12:00:01 +0000
ROA not before:           Sun 07 Feb 2021 12:00:01 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.193.248.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5319 (0x14c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:00:01 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=2F13AA15D46DC993396EF4BAA64CB313B3F335AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ed:2b:95:ac:0d:cb:5c:37:a2:86:e0:35:11:
                    f2:42:c5:34:4a:67:32:3e:a9:7b:1d:c1:38:ca:2b:
                    50:df:ea:58:97:aa:78:b4:b5:52:d4:17:f3:a5:36:
                    98:35:77:d1:c4:01:7c:35:6e:a9:54:3e:f5:7d:2f:
                    b1:d5:40:63:01:df:76:fc:41:bb:e3:4c:c4:1d:ab:
                    da:eb:5a:ba:66:02:94:c3:03:80:21:36:b3:14:5e:
                    89:5f:b0:1c:d1:c5:da:5a:a2:ef:ce:b1:66:9d:ef:
                    69:3b:90:fe:ad:3a:e9:93:9d:12:11:e8:b7:ec:c7:
                    d5:44:68:6b:d2:84:bb:ee:75:f2:f5:5b:c1:cd:da:
                    12:88:84:ab:1e:63:8f:8b:c7:05:de:51:f0:d8:cb:
                    07:d1:55:83:d1:90:93:14:21:c9:7e:35:54:d2:77:
                    56:98:5c:2f:53:31:15:79:85:65:eb:b8:49:c1:7f:
                    61:6d:25:13:b0:d0:8e:ce:89:4f:08:72:c0:52:57:
                    28:0a:01:3c:30:a6:42:7b:e2:27:11:82:33:83:f9:
                    2e:29:35:c9:9f:70:40:ed:42:d7:f3:66:8b:9f:65:
                    dc:27:78:18:ad:e2:6f:6d:fe:40:35:20:9c:19:12:
                    9d:4e:ad:72:6c:53:1f:dc:eb:41:83:c0:b5:db:d6:
                    8f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:13:AA:15:D4:6D:C9:93:39:6E:F4:BA:A6:4C:B3:13:B3:F3:35:AE
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LxOqFdRtyZM5bvS6pkyzE7PzNa4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:b6:b4:aa:ba:e5:48:33:1f:a6:d6:f3:23:e1:e6:87:3f:94:
         dd:e8:92:7b:ab:30:d6:0f:1a:d1:cf:b2:b9:61:04:96:23:ed:
         f5:ca:9d:7a:db:9c:48:41:36:90:bd:47:69:63:78:a2:f0:91:
         ed:6f:70:5d:c4:8c:55:c1:f4:76:45:54:8a:fc:80:31:06:5a:
         ed:20:37:2a:cf:08:cd:22:bd:e2:c9:ef:28:35:39:21:d0:d1:
         4e:4e:f3:45:f3:9b:8c:6f:b7:1a:4a:a4:62:5d:89:a8:04:3b:
         8d:3f:fb:0c:30:4c:0e:1e:89:97:21:81:83:71:1f:cd:a0:ab:
         0d:2d:20:44:0b:a5:22:1f:45:0f:9a:8b:c1:cb:18:38:d6:dc:
         d1:a0:d2:dd:6f:3c:1b:9d:b4:e7:18:c5:bf:54:be:d1:ff:ef:
         c3:42:b0:e6:96:b6:79:02:4f:86:29:1b:27:1a:62:0b:95:34:
         62:c1:42:b5:aa:19:6d:f1:1a:83:f0:65:ef:89:78:a4:9c:5b:
         00:22:00:00:5b:51:40:00:02:d3:8f:a0:6a:2c:5e:0f:8f:c9:
         8b:48:d0:c0:f7:36:10:e8:59:23:c5:bb:d1:16:8c:bf:8c:89:
         03:4f:cd:e1:93:45:a8:20:a7:58:46:04:eb:58:4e:4c:d7:f1:
         9b:8e:87:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----