Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/R989EwTXqbT6P9vNJ65ePT-quuI.roa
File:                     R989EwTXqbT6P9vNJ65ePT-quuI.roa (raw, json)
Hash identifier:          8IYWkt9Sh+h6IrHTKQ7riqPQWsbdPXKFOSfr/LxhO6w=
Subject key identifier:   47:DF:3D:13:04:D7:A9:B4:FA:3F:DB:CD:27:AE:5E:3D:3F:AA:BA:E2
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1463
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/R989EwTXqbT6P9vNJ65ePT-quuI.roa
Signing time:             Sun 07 Feb 2021 11:58:27 +0000
ROA not before:           Sun 07 Feb 2021 11:58:27 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.128.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5219 (0x1463)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 11:58:27 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=47DF3D1304D7A9B4FA3FDBCD27AE5E3D3FAABAE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:05:ef:10:56:c1:9d:3c:3a:04:67:ae:c9:14:
                    da:65:f6:fc:40:31:0d:69:94:9c:90:6f:30:d8:a6:
                    8b:8e:96:5f:d7:f0:ae:9c:cd:b8:b8:25:8d:f5:5b:
                    19:4b:f8:1f:00:34:25:24:e9:2b:dd:41:d0:34:72:
                    c3:e1:db:4e:25:1e:46:6a:4e:a5:98:58:08:21:96:
                    e4:14:3e:c4:8d:fe:e8:8e:26:21:13:3b:7a:b1:22:
                    4d:a9:c6:92:7f:04:53:fb:ed:6e:d3:23:f7:4f:87:
                    16:ca:8d:ca:29:57:43:c4:7a:12:b1:24:47:85:39:
                    f6:f6:66:b4:e6:38:4f:2a:25:1e:c6:df:f1:f7:e3:
                    84:6a:ad:4c:59:3d:3b:77:75:ab:f2:3c:cc:2e:37:
                    46:50:9b:dc:ca:a2:da:dd:2b:9e:f9:52:bf:87:89:
                    36:80:10:71:ac:1f:85:e0:c3:91:a0:d3:bc:46:74:
                    c5:ac:36:cd:8c:e5:32:26:07:bd:7b:21:76:a8:8b:
                    23:47:be:8e:1c:c3:70:b5:9a:d2:67:f1:ca:6f:4c:
                    f9:11:59:08:86:2d:5e:d6:ba:8a:29:4f:75:1a:31:
                    47:ad:d6:cd:d3:8f:ef:61:fe:ff:5d:cd:5d:66:e6:
                    8c:d8:32:41:32:35:c4:e2:17:03:99:ea:38:64:93:
                    c4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:DF:3D:13:04:D7:A9:B4:FA:3F:DB:CD:27:AE:5E:3D:3F:AA:BA:E2
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/R989EwTXqbT6P9vNJ65ePT-quuI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         03:9a:49:71:16:66:54:ae:0b:02:73:c3:7c:cb:36:8e:f5:46:
         80:b6:c2:32:c7:78:e3:be:0e:65:ed:78:4b:5f:db:f2:c8:cd:
         d9:f1:be:24:b6:e2:1a:6a:73:2b:2a:a7:61:fb:3d:7c:70:5a:
         ba:fa:dd:7a:6d:81:b1:59:2c:a9:8a:01:04:4d:6b:cd:b9:5a:
         f0:96:e1:e3:cf:4f:df:ae:ae:ee:29:dd:40:80:a7:89:21:ac:
         74:e1:a5:96:5f:02:f4:e3:5f:33:1d:70:9f:40:8f:1f:b8:0c:
         3a:99:bb:ea:2a:11:72:76:b7:c2:c1:00:55:1c:70:27:6f:e9:
         76:e2:3b:96:f3:d9:da:eb:9f:1e:52:30:ed:85:f6:d9:c9:62:
         1e:48:e6:23:80:95:12:2c:26:2c:94:b6:0a:34:4a:8f:4e:40:
         de:33:7c:51:09:5c:1d:c9:c7:00:32:06:56:15:d6:26:1a:3d:
         3a:50:29:85:2c:e7:49:f1:0c:21:f0:36:aa:82:b8:e0:ff:72:
         46:9a:65:0d:e6:8a:bc:46:d8:2e:98:6d:9e:d7:e7:e9:89:99:
         af:2e:8a:ef:b3:73:be:07:ee:b3:71:6e:02:08:fb:d7:02:e3:
         73:49:7a:3a:2b:6a:b1:71:f5:a9:12:4f:5b:b5:76:e2:15:12:
         bd:68:bb:a8
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFGMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MTU4MjdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDQ3REYzRDEzMDREN0E5
QjRGQTNGREJDRDI3QUU1RTNEM0ZBQUJBRTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQBe8QVsGdPDoEZ67JFNpl9vxAMQ1plJyQbzDYpouOll/X8K6c
zbi4JY31WxlL+B8ANCUk6SvdQdA0csPh204lHkZqTqWYWAghluQUPsSN/uiOJiET
O3qxIk2pxpJ/BFP77W7TI/dPhxbKjcopV0PEehKxJEeFOfb2ZrTmOE8qJR7G3/H3
44RqrUxZPTt3davyPMwuN0ZQm9zKotrdK575Ur+HiTaAEHGsH4Xgw5Gg07xGdMWs
Ns2M5TImB717IXaoiyNHvo4cw3C1mtJn8cpvTPkRWQiGLV7WuoopT3UaMUet1s3T
j+9h/v9dzV1m5ozYMkEyNcTiFwOZ6jhkk8TxAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUR989EwTXqbT6P9vNJ65ePT+quuIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1I5ODlFd1RYcWJUNlA5dk5K
NjVlUFQtcXV1SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7
woAwDQYJKoZIhvcNAQELBQADggEBAAOaSXEWZlSuCwJzw3zLNo71RoC2wjLHeOO+
DmXteEtf2/LIzdnxviS24hpqcysqp2H7PXxwWrr63XptgbFZLKmKAQRNa825WvCW
4ePPT9+uru4p3UCAp4khrHThpZZfAvTjXzMdcJ9Ajx+4DDqZu+oqEXJ2t8LBAFUc
cCdv6XbiO5bz2drrnx5SMO2F9tnJYh5I5iOAlRIsJiyUtgo0So9OQN4zfFEJXB3J
xwAyBlYV1iYaPTpQKYUs50nxDCHwNqqCuOD/ckaaZQ3mirxG2C6YbZ7X5+mJma8u
iu+zc74H7rNxbgII+9cC43NJejorarFx9akST1u1duIVEr1ou6g=
-----END CERTIFICATE-----