Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OhPLzOunQ7IoIFAQxFUptG2totQ.roa
File:                     OhPLzOunQ7IoIFAQxFUptG2totQ.roa (raw, json)
Hash identifier:          nG58B/ONRJ0gvhT+HxfEbU45V4zcBSnDEAXlBIYX+YU=
Subject key identifier:   3A:13:CB:CC:EB:A7:43:B2:28:20:50:10:C4:55:29:B4:6D:AD:A2:D4
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       10BC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OhPLzOunQ7IoIFAQxFUptG2totQ.roa
Signing time:             Wed 25 Nov 2020 04:24:17 +0000
ROA not before:           Wed 25 Nov 2020 04:24:17 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        123.193.160.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4284 (0x10bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:24:17 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=3A13CBCCEBA743B228205010C45529B46DADA2D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:55:d1:df:e6:e1:07:2c:62:90:ac:b8:12:df:
                    18:e5:40:64:f7:58:a1:21:dc:3f:39:a7:f3:d8:9c:
                    05:f5:16:d8:3b:1b:09:eb:22:de:6c:34:c6:a4:c1:
                    bf:7f:00:8e:12:82:15:9a:48:04:9c:95:38:f4:05:
                    6d:bc:c1:94:ef:0e:2a:9a:0a:0f:8e:5f:40:f1:6e:
                    d8:58:38:8f:3b:e9:a9:fc:40:61:1a:d9:cd:9d:7c:
                    ca:cd:fb:0c:ab:97:05:19:10:ef:f1:a9:73:c1:e0:
                    18:ea:b6:af:14:35:bf:d0:81:19:e7:a3:8f:5f:c6:
                    8a:99:84:ce:b3:d7:cb:64:1a:21:86:92:de:b2:3f:
                    05:9b:19:74:a4:20:54:21:5e:00:14:9e:0a:e8:8e:
                    ec:66:f8:71:b5:5a:c2:5d:1a:9e:fd:dc:be:3f:5a:
                    71:a7:58:e4:49:fd:56:8d:01:0c:df:a4:ff:d9:e0:
                    16:aa:0a:7a:93:8b:a9:47:fc:fb:61:a5:72:0c:00:
                    a4:6a:e4:74:96:85:5e:59:f1:0d:04:ee:57:69:da:
                    e6:4e:41:ab:9e:fa:79:b9:61:f0:d4:ae:86:72:bd:
                    64:41:62:ac:a7:dc:49:87:83:dd:0f:88:51:9f:a6:
                    a7:3e:fe:d2:07:87:7e:c0:37:6b:f6:6e:1f:5e:a2:
                    cb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:13:CB:CC:EB:A7:43:B2:28:20:50:10:C4:55:29:B4:6D:AD:A2:D4
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OhPLzOunQ7IoIFAQxFUptG2totQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         33:a9:52:36:3a:63:70:38:74:b9:13:53:04:7e:46:29:5a:7f:
         ca:64:91:40:41:71:5d:2f:0b:72:70:b3:e7:fd:6d:03:13:5e:
         23:7a:d3:2c:4a:3e:db:5a:9f:bf:68:4b:7d:5d:b9:dd:3b:f0:
         0b:0b:3a:c9:9f:d5:76:4a:37:d4:ba:0b:93:a6:9d:37:a4:00:
         30:dc:6a:7e:5f:38:b8:1b:56:08:2f:96:84:e4:ea:36:a7:ee:
         ce:66:17:20:9c:5d:2f:20:32:c2:61:b0:25:a6:99:89:f6:7a:
         24:e3:9e:32:cd:b1:cb:b3:b1:89:3b:0e:a1:27:5b:3c:43:ae:
         8e:13:30:8d:02:d3:46:9b:4f:e0:eb:7e:76:6f:7a:dd:7d:2d:
         26:f5:c4:09:82:d8:7c:e3:41:88:7c:9a:67:f2:41:f4:0e:94:
         2d:cc:87:c8:62:33:ac:7d:26:cf:84:69:fb:7b:2c:c5:93:79:
         64:09:42:ff:17:64:ea:cb:fe:24:c8:13:ae:22:ee:91:62:31:
         84:1a:af:35:a4:8e:bf:8a:b0:0e:2b:fe:85:35:f6:52:2b:bd:
         b1:33:3f:e8:62:96:dc:e2:f6:d9:2c:36:b6:36:6d:5e:58:e5:
         aa:95:b8:e6:12:df:af:7e:9d:39:a5:f3:fe:71:0c:c7:2c:ae:
         ab:9a:84:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----