Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lxe6zSPYYqNf6tsyv7NMw3teTWQ.roa
File:                     Lxe6zSPYYqNf6tsyv7NMw3teTWQ.roa (raw, json)
Hash identifier:          nM9EuqBCKHdUEbu4rp3Wp27uklJWFnaAuP/W27PgdY8=
Subject key identifier:   2F:17:BA:CD:23:D8:62:A3:5F:EA:DB:32:BF:B3:4C:C3:7B:5E:4D:64
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C63
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lxe6zSPYYqNf6tsyv7NMw3teTWQ.roa
Signing time:             Wed 29 Sep 2021 02:47:42 +0000
ROA not before:           Wed 29 Sep 2021 02:47:42 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.195.120.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7267 (0x1c63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:42 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=2F17BACD23D862A35FEADB32BFB34CC37B5E4D64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cc:34:55:4f:d0:33:d7:74:63:43:ac:06:69:
                    4b:b2:c8:12:bb:c6:75:35:32:80:d2:a0:a3:66:65:
                    3c:00:f8:6c:3d:bd:21:78:bd:58:ea:6b:53:a9:ec:
                    e0:ed:3c:46:85:d6:cd:28:c9:a7:0c:70:61:7f:04:
                    1f:35:3f:25:b7:13:fc:e8:9b:ba:e3:27:e6:34:4c:
                    71:d1:e5:ed:50:55:e9:2f:7b:98:76:0c:7a:77:df:
                    60:93:c3:98:0c:67:b1:ca:06:76:51:bb:e5:28:d9:
                    63:a6:3f:2c:57:7f:9d:ff:ed:4e:ba:e6:d0:8d:d1:
                    6b:5e:93:17:8d:c1:77:ce:36:46:a7:38:b2:85:e2:
                    dc:b3:4c:6c:7b:b0:16:af:09:d2:89:f7:aa:e6:d8:
                    d4:96:9a:fe:59:19:80:35:1f:c0:4e:ec:66:cd:1f:
                    12:b8:4d:46:1d:fc:69:95:b1:8e:8e:d4:3f:64:c9:
                    28:42:0a:52:fe:5e:de:ec:e0:41:55:b8:e7:e9:55:
                    58:0d:69:c1:81:58:35:50:e8:37:fe:eb:15:91:62:
                    80:18:f4:9e:e8:b6:47:ce:f1:22:7b:d0:e3:b2:c2:
                    df:97:bc:7a:b2:fa:85:52:db:a3:92:cb:04:90:ca:
                    db:8f:e1:9d:cb:01:5f:71:fa:ef:40:46:25:cd:69:
                    d4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:17:BA:CD:23:D8:62:A3:5F:EA:DB:32:BF:B3:4C:C3:7B:5E:4D:64
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lxe6zSPYYqNf6tsyv7NMw3teTWQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         34:b8:a0:a9:dc:af:aa:6b:b2:12:16:87:60:95:40:f2:e2:29:
         35:d4:ab:77:2a:c4:ea:b2:02:eb:6a:fb:d9:67:ee:3c:c9:e8:
         c8:a3:22:1c:17:7f:09:19:78:1b:9c:a5:43:40:88:b5:f9:0e:
         73:06:34:97:8a:c3:15:e8:39:dd:83:a6:aa:ac:d1:9d:f5:16:
         e7:bd:b2:62:e9:bb:66:3d:70:79:e3:1d:04:dc:11:4f:f0:4b:
         5b:db:80:c4:a4:46:78:7f:63:82:8e:a1:1e:33:fb:d7:33:1e:
         1f:83:0c:b9:1d:2b:9a:53:e1:bd:61:16:e3:22:b9:0f:f5:a5:
         98:c1:b1:e5:2d:33:af:e3:ac:dc:b8:e2:ab:35:01:f1:46:85:
         8c:0e:90:6e:77:aa:7e:52:f6:2c:0c:85:d5:92:84:8d:0c:69:
         f3:cc:63:85:cd:b6:09:d1:24:7d:c9:f9:1f:90:7f:a6:0e:9f:
         96:96:a3:17:af:24:6b:6d:8e:a2:55:99:94:c4:be:51:5d:65:
         dd:66:d7:30:e1:a8:9c:0b:8f:66:9a:77:77:62:43:4d:06:fd:
         9e:6d:66:e2:1f:66:9a:1e:ac:e5:e9:b3:85:a0:66:24:33:ea:
         74:ed:7d:0a:eb:ea:e9:0d:e1:66:d4:99:6b:09:11:b3:2c:c6:
         28:e5:b6:96
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHGMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ3NDJaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDJGMTdCQUNEMjNEODYy
QTM1RkVBREIzMkJGQjM0Q0MzN0I1RTRENjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9zDRVT9Az13RjQ6wGaUuyyBK7xnU1MoDSoKNmZTwA+Gw9vSF4
vVjqa1Op7ODtPEaF1s0oyacMcGF/BB81PyW3E/zom7rjJ+Y0THHR5e1QVekve5h2
DHp332CTw5gMZ7HKBnZRu+Uo2WOmPyxXf53/7U665tCN0WtekxeNwXfONkanOLKF
4tyzTGx7sBavCdKJ96rm2NSWmv5ZGYA1H8BO7GbNHxK4TUYd/GmVsY6O1D9kyShC
ClL+Xt7s4EFVuOfpVVgNacGBWDVQ6Df+6xWRYoAY9J7otkfO8SJ70OOywt+XvHqy
+oVS26OSywSQytuP4Z3LAV9x+u9ARiXNadR7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQULxe6zSPYYqNf6tsyv7NMw3teTWQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0x4ZTZ6U1BZWXFOZjZ0c3l2
N05NdzN0ZVRXUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
w3gwDQYJKoZIhvcNAQELBQADggEBADS4oKncr6prshIWh2CVQPLiKTXUq3cqxOqy
Autq+9ln7jzJ6MijIhwXfwkZeBucpUNAiLX5DnMGNJeKwxXoOd2Dpqqs0Z31Fue9
smLpu2Y9cHnjHQTcEU/wS1vbgMSkRnh/Y4KOoR4z+9czHh+DDLkdK5pT4b1hFuMi
uQ/1pZjBseUtM6/jrNy44qs1AfFGhYwOkG53qn5S9iwMhdWShI0MafPMY4XNtgnR
JH3J+R+Qf6YOn5aWoxevJGttjqJVmZTEvlFdZd1m1zDhqJwLj2aad3diQ00G/Z5t
ZuIfZpoerOXps4WgZiQz6nTtfQrr6ukN4WbUmWsJEbMsxijltpY=
-----END CERTIFICATE-----