Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Tta3gbh3kceT28sYSzVRpJQrXmU.roa
File:                     Tta3gbh3kceT28sYSzVRpJQrXmU.roa (raw, json)
Hash identifier:          5ZSzX5TZo6aNbXHttiuJeTmMr9ImrAlXdZ9tkYJaYX0=
Subject key identifier:   4E:D6:B7:81:B8:77:91:C7:93:DB:CB:18:4B:35:51:A4:94:2B:5E:65
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C90
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Tta3gbh3kceT28sYSzVRpJQrXmU.roa
Signing time:             Wed 29 Sep 2021 02:47:55 +0000
ROA not before:           Wed 29 Sep 2021 02:47:55 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.194.204.96/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7312 (0x1c90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:55 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=4ED6B781B87791C793DBCB184B3551A4942B5E65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a1:c1:71:20:43:7b:1e:7e:e3:25:8a:41:38:
                    bb:4b:ee:50:40:6b:72:7d:1b:51:a6:13:45:9a:0b:
                    59:1a:0a:00:07:f1:18:a9:b3:cd:98:9b:c3:c8:4d:
                    e3:ef:f9:6a:c5:f9:15:32:95:e2:ae:0b:d4:b7:84:
                    37:af:94:2c:27:7f:e9:72:cd:72:54:b7:90:78:17:
                    cb:7d:4c:c0:20:3e:b3:de:a2:1a:47:34:16:f4:7a:
                    49:e6:4a:df:d5:14:e4:99:5c:b8:1b:78:cf:30:8d:
                    f5:bd:e7:9d:c7:fe:fe:11:c0:fe:35:af:18:ea:b5:
                    3f:e2:ef:ef:19:15:4c:c2:97:1c:e7:d4:2f:d7:77:
                    a0:76:85:00:60:4f:31:51:7f:f8:0c:48:9b:b4:31:
                    10:13:15:9c:4f:6d:b4:64:f3:74:30:5b:b4:98:69:
                    ef:c3:84:3a:d0:63:69:af:4c:df:a1:21:1d:c7:35:
                    9d:d2:82:f7:1f:ae:98:5b:aa:cb:d2:f7:df:04:87:
                    fc:9a:64:bc:1c:57:bf:d3:65:d5:4c:bd:36:a4:da:
                    08:e6:69:1d:a6:82:ac:08:32:02:03:8a:ac:7f:8e:
                    c4:3f:d9:4a:80:98:c5:f4:35:2b:72:27:cc:b6:1d:
                    cb:81:ed:24:0e:19:cc:fc:63:c9:59:7d:24:68:6d:
                    99:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D6:B7:81:B8:77:91:C7:93:DB:CB:18:4B:35:51:A4:94:2B:5E:65
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Tta3gbh3kceT28sYSzVRpJQrXmU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.204.96/29

    Signature Algorithm: sha256WithRSAEncryption
         34:d2:de:b3:85:1d:86:4a:c2:dc:e5:e6:07:3f:d2:78:41:d5:
         04:5d:da:a8:a0:a6:8e:bf:3f:1e:60:1f:89:97:15:30:33:e6:
         4c:2b:82:5e:1c:eb:26:97:4b:99:e8:c7:9c:be:cd:d6:13:6b:
         24:3c:b3:46:c3:e9:d9:c8:8c:22:d1:63:4a:da:17:89:87:ee:
         ae:0e:e6:c1:13:89:f0:4c:b1:8e:fc:d6:67:46:0e:11:23:f4:
         90:17:2e:87:04:6d:8a:5f:02:c0:e8:77:ef:dc:8a:aa:53:63:
         fb:da:d1:b7:58:81:5a:c7:d2:88:11:cc:72:d8:17:75:75:69:
         4f:74:a9:d2:99:bb:7a:c0:9c:f7:78:20:3f:9e:af:fe:db:6c:
         9f:24:07:18:47:2c:91:64:8a:6e:fd:db:a0:3f:3d:ce:5f:a9:
         7f:d0:ff:0e:71:f1:12:eb:c0:b1:c9:50:6c:ad:25:6d:cb:fb:
         d0:18:3a:b5:46:ae:7b:1e:43:a5:23:f3:95:1e:61:17:c0:e8:
         08:57:3d:da:bd:49:36:f2:1d:df:4b:51:43:8d:94:cf:52:ee:
         b6:e0:70:04:da:79:2b:39:a7:66:db:57:60:cf:7f:a5:a0:20:
         9f:fb:e3:b1:d3:7c:b3:f3:71:a2:22:64:f8:af:8a:2e:d0:74:
         46:8a:cf:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----