Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Q8i1kHPvpNOCFCugjGD4saxlNJw.roa
File:                     Q8i1kHPvpNOCFCugjGD4saxlNJw.roa (raw, json)
Hash identifier:          VSj4K2djwiWDlVYqaPBwKzEprDWwY2rhqqBXYwBlFZw=
Subject key identifier:   43:C8:B5:90:73:EF:A4:D3:82:14:2B:A0:8C:60:F8:B1:AC:65:34:9C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E6F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Q8i1kHPvpNOCFCugjGD4saxlNJw.roa
Signing time:             Tue 29 Sep 2020 09:55:43 +0000
ROA not before:           Tue 29 Sep 2020 09:55:43 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.80.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3695 (0xe6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:43 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=43C8B59073EFA4D382142BA08C60F8B1AC65349C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6d:f0:f7:b2:8d:9f:b3:c4:5b:a1:9e:83:5b:
                    eb:1b:8d:20:da:a0:e4:f3:46:85:1c:3b:e8:a0:11:
                    9f:be:39:73:a6:e5:0e:7f:0c:7b:02:72:b8:3b:7d:
                    04:63:44:6b:6e:f0:ed:9b:4a:6a:28:d1:63:34:ac:
                    c9:e2:f9:db:9b:94:2a:b2:f2:c8:99:c6:f5:b7:11:
                    98:2a:5c:88:75:dc:0a:9f:12:aa:5e:26:1f:a5:00:
                    d7:5e:6f:71:db:43:64:7c:79:16:e5:eb:ed:d2:80:
                    01:6b:cc:f8:83:6c:fd:c9:54:4b:b0:1a:55:69:d1:
                    88:e5:40:ae:28:a1:80:3f:7d:9d:5b:fd:71:39:f6:
                    3a:82:d1:cf:00:32:70:b5:19:5d:46:21:de:9b:8a:
                    bb:bb:01:fa:75:31:14:fc:7b:16:ab:d0:f8:07:af:
                    e0:a8:45:a7:0e:8c:a9:e4:13:15:3c:a4:4d:70:d0:
                    27:96:1e:03:4c:91:b1:ce:78:ab:bf:b8:65:3d:d7:
                    0a:1e:b6:13:34:c7:bc:47:00:60:9a:4a:ae:8c:83:
                    3a:b1:eb:35:73:33:c2:53:d5:c8:01:cf:97:6e:d2:
                    eb:97:2e:5a:3b:07:0d:11:cb:7e:29:2e:0a:b4:ab:
                    57:f1:de:8b:e4:6d:4b:c0:db:f9:57:54:e7:8c:80:
                    e0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C8:B5:90:73:EF:A4:D3:82:14:2B:A0:8C:60:F8:B1:AC:65:34:9C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Q8i1kHPvpNOCFCugjGD4saxlNJw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         59:83:fc:c3:cd:df:f4:42:8b:f1:0d:a8:d8:b3:75:17:8c:78:
         99:df:0d:9c:25:73:e8:95:89:94:f8:71:e7:a9:e7:37:24:73:
         6d:6c:da:27:78:25:d5:75:ee:bc:1f:7d:56:a6:06:2c:5a:b5:
         c8:bb:b9:5c:3e:f6:ca:70:b0:23:b8:04:59:8d:64:46:a3:83:
         79:77:70:7d:4b:7b:3f:d6:1c:9b:1e:6f:75:8a:3b:38:af:db:
         13:cb:db:03:fa:ad:9c:13:57:03:07:a7:cc:3d:0a:e3:0b:ac:
         c0:57:b1:88:fa:df:06:72:0d:b7:4c:10:5f:16:e5:f8:90:59:
         db:c9:1c:19:94:f7:e0:18:c0:7d:ca:25:10:84:6f:0f:52:a8:
         a2:b9:a5:b6:93:17:1d:b1:a7:6f:f5:17:7a:68:7c:d4:06:22:
         19:35:ba:2e:c6:45:b6:a8:7f:1a:86:ef:c0:51:e8:3f:7b:0e:
         43:13:e4:5e:4f:74:c1:04:cf:3a:31:83:4b:ad:95:c4:2d:dc:
         44:72:13:01:80:0d:eb:e4:88:cf:b7:e1:31:d0:63:da:73:95:
         ef:35:ce:78:d7:f0:2d:f7:9a:69:29:00:b3:ff:a8:7c:03:2b:
         37:53:27:54:22:e3:64:65:15:8a:b2:fb:6a:59:02:01:80:13:
         40:90:8e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----