Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ShDpr3yeXyYbIXh1XdkIe3mH3WE.roa
File:                     ShDpr3yeXyYbIXh1XdkIe3mH3WE.roa (raw, json)
Hash identifier:          0CYKQVgsJof33wz+WXZQMsSARWUOuctrzqbWHpk+XoM=
Subject key identifier:   4A:10:E9:AF:7C:9E:5F:26:1B:21:78:75:5D:D9:08:7B:79:87:DD:61
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       146F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ShDpr3yeXyYbIXh1XdkIe3mH3WE.roa
Signing time:             Sun 07 Feb 2021 11:58:38 +0000
ROA not before:           Sun 07 Feb 2021 11:58:38 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.148.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5231 (0x146f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 11:58:38 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4A10E9AF7C9E5F261B2178755DD9087B7987DD61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a8:a8:4b:fe:2f:b3:03:74:ed:57:21:6c:bf:
                    6e:9d:99:aa:3f:a0:4b:79:88:32:90:a0:a9:83:18:
                    4e:74:2a:ed:bf:20:9e:4e:02:a3:f3:8d:db:9a:1c:
                    f1:db:f4:7e:81:97:0e:1f:1f:5e:c4:af:ed:63:18:
                    41:3e:4c:36:68:07:89:b5:76:e7:1e:3c:e4:cb:5b:
                    35:d8:8c:9f:74:11:56:d4:81:2e:43:b0:f5:46:70:
                    72:8f:8a:ea:6f:57:84:95:e4:ed:57:4d:80:7f:ab:
                    5e:2b:c9:50:b8:aa:a2:52:09:32:b5:fc:f6:08:de:
                    e5:eb:8f:6e:de:b7:0b:1a:83:de:05:b0:b6:87:18:
                    44:e1:57:fb:92:a1:a2:e3:9e:ab:8e:d1:f1:22:35:
                    f4:ff:fa:42:00:fe:57:0c:1b:fb:78:03:94:cb:d6:
                    3d:d7:5a:81:95:a4:5e:99:92:a8:8c:b4:a1:26:77:
                    fe:66:b0:07:c3:cc:31:af:93:52:94:de:5a:47:90:
                    1b:47:61:7e:14:49:9f:ef:4d:c8:f0:bb:c4:81:73:
                    fd:f1:f8:54:c6:9f:ab:b2:fa:bb:00:b3:15:fd:fd:
                    17:40:69:7c:ce:9b:a7:ae:ed:78:e4:a5:47:27:7e:
                    d2:a9:3e:da:ec:a8:cf:7a:ad:ce:e2:7b:08:0a:c8:
                    c6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:10:E9:AF:7C:9E:5F:26:1B:21:78:75:5D:D9:08:7B:79:87:DD:61
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ShDpr3yeXyYbIXh1XdkIe3mH3WE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:74:7b:5a:72:6d:2b:d6:21:fe:6b:98:0e:39:fa:b0:da:d8:
         13:d1:eb:9e:ec:6c:fd:e5:71:ab:95:16:9b:b3:cc:8e:f5:de:
         04:92:51:f9:66:7d:57:bc:34:b8:53:32:ec:6e:3d:d6:dc:21:
         bd:f1:a3:e5:f5:f8:a4:63:b6:74:07:1c:c2:72:5a:5f:a7:37:
         d7:24:85:18:81:39:62:97:22:00:d7:b7:86:c1:a1:9b:b0:3b:
         a8:f0:af:c5:e6:92:87:70:d7:17:3e:c3:97:fe:6a:65:b1:c1:
         5d:ec:d7:20:0f:34:c0:91:c7:f2:09:06:ae:8c:0d:05:61:20:
         cf:45:fc:94:a6:75:bf:95:84:6f:57:9c:a7:ad:a9:ad:1e:20:
         73:53:04:7f:08:ed:27:cf:50:ff:ed:21:85:2d:6f:a2:6a:2e:
         e0:4b:6b:5c:31:43:6f:a2:69:b9:13:49:76:64:2d:58:88:14:
         fb:92:46:7d:6f:b9:74:ef:3f:2a:e8:4c:e6:19:30:4b:9b:cb:
         1b:1e:12:5a:8b:87:1b:c0:54:68:35:aa:af:d9:33:d8:f1:9b:
         36:ac:53:79:2b:c8:b0:b8:dd:0d:56:3f:44:f0:d0:82:65:2c:
         f3:d2:36:e5:ec:50:74:a6:72:de:96:7d:24:43:85:e0:5b:49:
         29:76:5b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----