Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SI4H9UN6MMci2Wzb__mOBBT0-p0.roa
File:                     SI4H9UN6MMci2Wzb__mOBBT0-p0.roa (raw, json)
Hash identifier:          maA/N1OlLLIZEBNB845NjyV8E6df7eamot/CPGd+CVg=
Subject key identifier:   48:8E:07:F5:43:7A:30:C7:22:D9:6C:DB:FF:F9:8E:04:14:F4:FA:9D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1F24
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SI4H9UN6MMci2Wzb__mOBBT0-p0.roa
Signing time:             Mon 25 Jul 2022 09:11:24 +0000
ROA not before:           Mon 25 Jul 2022 09:11:24 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.193.192.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7972 (0x1f24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Jul 25 09:11:24 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=488E07F5437A30C722D96CDBFFF98E0414F4FA9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a7:bc:84:c9:c7:d0:98:29:ba:b4:0a:db:d0:
                    b1:51:a6:20:57:1b:1f:ff:93:97:56:69:2d:59:cf:
                    ea:a8:42:fa:03:8f:9c:b4:0d:f8:a1:77:14:de:c1:
                    72:dd:b2:67:3c:81:d0:6a:59:97:67:e6:02:6f:1b:
                    df:2d:c9:82:5e:e7:e2:b7:88:65:51:09:bb:4e:98:
                    05:2f:9c:d1:91:be:17:2e:b8:b7:54:c2:10:81:6f:
                    c6:61:b3:49:33:07:89:af:5a:96:6f:3b:92:61:4e:
                    7d:8f:23:10:48:c3:17:1b:3f:a9:e6:f2:54:72:db:
                    17:08:d7:7a:72:af:4f:ff:84:ea:f8:b2:c8:6d:28:
                    e4:15:f9:96:50:92:7f:29:53:5a:c6:cf:e7:27:eb:
                    e9:38:20:5e:15:68:04:e2:21:0a:3f:af:9a:67:bc:
                    cc:00:50:38:31:f2:d3:0d:de:71:ab:e6:b4:23:48:
                    51:68:cc:f6:79:69:59:ef:03:f1:21:30:f3:14:03:
                    db:4c:d7:e2:aa:be:33:83:33:2f:61:59:2e:ee:b6:
                    64:11:ac:cb:18:14:a7:80:97:13:20:8c:f9:57:5c:
                    87:02:ac:3a:35:18:65:18:c7:bd:d7:ae:17:2f:cd:
                    28:38:fa:b7:c2:40:ba:fe:ae:77:a7:b3:6f:fc:6b:
                    41:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8E:07:F5:43:7A:30:C7:22:D9:6C:DB:FF:F9:8E:04:14:F4:FA:9D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SI4H9UN6MMci2Wzb__mOBBT0-p0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6b:ee:ac:bb:73:65:40:88:95:87:28:78:dd:af:0b:4c:70:17:
         40:a2:5a:c3:9f:7a:50:da:79:93:39:cf:e4:ed:43:1a:6c:94:
         47:1e:ad:69:4f:04:60:b0:11:6c:e6:5c:b4:5e:77:42:9c:5b:
         8f:5a:a7:25:3b:df:e7:5d:ed:23:df:cc:b4:ba:2f:24:15:f0:
         80:25:26:e2:e2:35:5d:66:7d:5b:85:f5:a2:3d:9f:e5:9a:4c:
         9d:01:6c:6b:9f:0d:92:67:12:19:29:1a:91:01:12:5f:9a:ff:
         03:5e:20:50:f3:4f:ba:de:b6:0c:7e:a0:8e:b4:cc:a7:bf:8c:
         b1:0e:48:67:87:3b:16:45:46:57:6c:c1:54:0a:9d:3b:68:2a:
         19:03:5a:cc:ae:cf:fa:57:38:09:21:39:92:18:1d:c9:32:41:
         1d:1e:6f:01:d6:e4:2a:6b:f7:21:75:4c:86:c1:75:2c:30:76:
         70:a5:71:0a:ac:fc:bd:2a:16:d0:17:43:de:f7:4e:9c:e2:b2:
         82:9f:a5:48:fe:11:09:7c:c7:a5:0c:11:85:2d:49:4e:81:ba:
         ea:21:77:b4:ca:dc:e9:70:a7:e1:21:f2:b6:89:47:76:60:dc:
         60:1e:4a:20:ef:7b:93:8f:4c:f5:ec:d2:18:02:40:76:40:74:
         cc:bc:d3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----