Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PDsm2K3lIs7NiLoBiZ-VIDcUBiM.roa
File:                     PDsm2K3lIs7NiLoBiZ-VIDcUBiM.roa (raw, json)
Hash identifier:          /SDkiqPnS8//8XHYoID7ysyRc5Tsv+UTswu9IWhkzvY=
Subject key identifier:   3C:3B:26:D8:AD:E5:22:CE:CD:88:BA:01:89:9F:95:20:37:14:06:23
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       10A6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PDsm2K3lIs7NiLoBiZ-VIDcUBiM.roa
Signing time:             Wed 25 Nov 2020 03:44:05 +0000
ROA not before:           Wed 25 Nov 2020 03:44:05 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.136.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4262 (0x10a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 03:44:05 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=3C3B26D8ADE522CECD88BA01899F952037140623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:17:65:54:30:d1:fa:ce:46:5e:d6:0e:c0:d2:
                    4e:5e:f2:7f:9e:3a:01:2c:a4:b9:07:91:ca:d0:4e:
                    8b:79:22:28:1f:85:d7:bf:04:ae:0f:ca:55:39:67:
                    47:83:67:5f:74:7d:6f:35:34:b3:2b:cf:15:74:09:
                    6a:cb:1f:fc:07:11:9f:55:83:cc:d7:9a:ec:bc:b0:
                    08:60:5f:18:06:9a:a6:be:cf:31:a7:37:d8:49:cd:
                    38:e3:57:38:92:d5:85:6f:23:31:12:cc:5b:23:3d:
                    80:3f:33:43:7a:7c:9a:b0:5e:e4:a2:1b:09:e7:fa:
                    7f:5f:b5:b6:83:43:21:59:b2:b0:1a:f6:fe:a8:b7:
                    8a:33:74:59:1e:eb:58:3c:60:26:4b:7f:1b:99:08:
                    5d:a4:1b:12:ab:1a:df:8a:71:3e:bd:25:a0:1e:a9:
                    40:d9:61:00:a7:e2:0a:77:5e:e3:95:da:dc:c0:ef:
                    83:7a:1e:50:36:8f:1f:5c:79:3c:63:56:89:06:9e:
                    c7:7e:d1:65:8f:86:cf:12:5a:fa:d9:21:be:ca:af:
                    2a:50:0b:ca:38:33:60:29:62:65:f3:11:4c:a5:15:
                    d1:bd:76:6e:ec:c4:78:39:9a:d1:dd:ac:2d:cf:37:
                    3e:f2:90:3c:63:c6:74:91:0b:ee:5c:0c:ce:aa:45:
                    d5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3B:26:D8:AD:E5:22:CE:CD:88:BA:01:89:9F:95:20:37:14:06:23
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PDsm2K3lIs7NiLoBiZ-VIDcUBiM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4b:d5:ef:5a:92:b1:dd:d9:d0:78:0f:9e:eb:76:8a:52:7e:aa:
         25:69:51:ba:4b:66:7c:af:ce:5e:0d:38:89:c4:70:a9:ce:c2:
         cd:06:22:14:80:c9:09:f9:16:da:a7:33:4a:8a:1d:35:e4:ae:
         42:6e:91:31:4b:68:7a:d6:b1:2e:f6:5a:8a:0f:c1:f3:97:7b:
         06:3e:52:07:29:02:dc:69:ab:09:16:6f:3d:ed:1a:60:a2:81:
         c7:a6:9b:60:a6:da:b2:64:f3:07:fa:77:8c:28:fb:83:7c:56:
         89:62:e9:b4:1f:15:54:72:ba:ac:c9:3a:ff:1a:da:ee:bd:2f:
         29:79:e7:f0:f2:7f:8c:65:7e:6d:56:af:a7:04:32:c6:da:8a:
         0e:31:2e:d3:43:a8:79:a2:78:b8:e6:85:51:b5:5d:a3:f3:03:
         3b:7b:fc:c2:77:fd:b5:39:46:29:97:8f:b7:11:00:5d:7a:fa:
         f4:05:4e:f3:23:6d:0e:50:32:f9:5b:80:eb:7d:4b:54:10:52:
         ce:9c:3c:32:4f:39:61:c6:ab:0a:c1:fe:49:4a:80:e9:ab:59:
         47:1e:a8:3a:60:72:17:14:73:b6:64:7a:c0:d4:a9:f2:92:bc:
         d6:79:b1:63:9b:ac:3b:e1:35:e8:a0:c5:c6:27:8e:b6:48:99:
         89:f1:c2:e0
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEKYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDExMjUw
MzQ0MDVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDNDM0IyNkQ4QURFNTIy
Q0VDRDg4QkEwMTg5OUY5NTIwMzcxNDA2MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQF2VUMNH6zkZe1g7A0k5e8n+eOgEspLkHkcrQTot5Iigfhde/
BK4PylU5Z0eDZ190fW81NLMrzxV0CWrLH/wHEZ9Vg8zXmuy8sAhgXxgGmqa+zzGn
N9hJzTjjVziS1YVvIzESzFsjPYA/M0N6fJqwXuSiGwnn+n9ftbaDQyFZsrAa9v6o
t4ozdFke61g8YCZLfxuZCF2kGxKrGt+KcT69JaAeqUDZYQCn4gp3XuOV2tzA74N6
HlA2jx9ceTxjVokGnsd+0WWPhs8SWvrZIb7KrypQC8o4M2ApYmXzEUylFdG9dm7s
xHg5mtHdrC3PNz7ykDxjxnSRC+5cDM6qRdXNAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUPDsm2K3lIs7NiLoBiZ+VIDcUBiMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1BEc20ySzNsSXM3TmlMb0Jp
Wi1WSURjVUJpTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
w4gwDQYJKoZIhvcNAQELBQADggEBAEvV71qSsd3Z0HgPnut2ilJ+qiVpUbpLZnyv
zl4NOInEcKnOws0GIhSAyQn5FtqnM0qKHTXkrkJukTFLaHrWsS72WooPwfOXewY+
UgcpAtxpqwkWbz3tGmCigcemm2Cm2rJk8wf6d4wo+4N8Voli6bQfFVRyuqzJOv8a
2u69Lyl55/Dyf4xlfm1Wr6cEMsbaig4xLtNDqHmieLjmhVG1XaPzAzt7/MJ3/bU5
RimXj7cRAF16+vQFTvMjbQ5QMvlbgOt9S1QQUs6cPDJPOWHGqwrB/klKgOmrWUce
qDpgchcUc7ZkesDUqfKSvNZ5sWObrDvhNeigxcYnjrZImYnxwuA=
-----END CERTIFICATE-----