Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U3q8IPBmsVGzPZWbJn1EuRoUTNQ.roa
File:                     U3q8IPBmsVGzPZWbJn1EuRoUTNQ.roa (raw, json)
Hash identifier:          So+ojoytX0uH+J0rLLIZw2enJj7sKFMwiT8IodPLtD8=
Subject key identifier:   53:7A:BC:20:F0:66:B1:51:B3:3D:95:9B:26:7D:44:B9:1A:14:4C:D4
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D28
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U3q8IPBmsVGzPZWbJn1EuRoUTNQ.roa
Signing time:             Tue 29 Sep 2020 09:54:16 +0000
ROA not before:           Tue 29 Sep 2020 09:54:16 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.204.128/25 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3368 (0xd28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:16 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=537ABC20F066B151B33D959B267D44B91A144CD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:22:8d:03:87:c6:ad:1f:c2:e6:3c:17:0c:bc:
                    cf:32:f5:c8:2f:a4:c1:17:a4:98:b8:1e:f7:d4:6f:
                    2f:fe:83:87:8d:59:8d:d6:82:ac:39:b1:20:6c:3f:
                    d2:a9:a8:c1:f5:73:a4:3e:9d:d2:57:96:d5:1c:c2:
                    ed:7e:43:e0:bb:4d:0b:52:1f:14:a0:13:4d:c1:15:
                    9d:a4:86:22:4e:d8:41:7e:ab:e0:88:0e:3e:82:c9:
                    43:79:23:29:db:b6:9b:4e:c0:d9:02:35:79:60:48:
                    99:9c:45:35:7a:f5:af:09:c3:b8:ce:14:20:56:ec:
                    f1:26:a5:26:be:99:10:50:8c:68:d5:83:30:ac:74:
                    e1:f9:8e:4d:50:bc:b9:b7:c4:66:4b:4b:2c:8f:b4:
                    e7:1c:19:f6:14:7c:a0:8d:32:94:c3:91:b9:0e:da:
                    74:e9:d4:29:ae:a5:20:7e:07:dd:b5:97:03:a2:5b:
                    f2:dd:55:d5:16:5d:79:43:14:e6:24:cc:ce:c7:00:
                    28:43:ff:69:bd:3c:55:f8:40:23:8a:cd:34:d4:28:
                    1d:37:fd:b1:3e:8b:7a:df:0f:4d:cd:3a:aa:1b:78:
                    b0:55:37:9c:07:5b:b7:3e:ba:55:18:a9:4a:eb:84:
                    0c:78:77:f2:b2:15:a4:e7:ef:f9:d7:61:2b:f0:b6:
                    35:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7A:BC:20:F0:66:B1:51:B3:3D:95:9B:26:7D:44:B9:1A:14:4C:D4
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U3q8IPBmsVGzPZWbJn1EuRoUTNQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.204.128/25

    Signature Algorithm: sha256WithRSAEncryption
         b5:60:97:3d:33:84:02:5b:f5:25:ee:a9:60:01:81:8f:07:a0:
         a9:07:da:01:ad:d2:d8:fb:44:ef:35:d3:a0:4f:bc:ff:3c:a3:
         91:c9:e2:7c:89:16:50:d6:50:dd:48:e4:83:4b:8d:fa:18:d4:
         f4:8e:d6:80:f2:5e:9b:bb:06:32:65:c9:4a:e2:06:a5:bf:5f:
         42:b5:9e:47:98:e9:13:2f:dc:86:79:0f:25:b0:c7:4a:9a:a7:
         fb:47:6e:93:78:69:ca:32:5f:9c:19:0c:22:8e:01:ad:85:bf:
         47:43:40:2a:64:4c:4a:39:e2:ee:41:d7:0a:fe:d1:00:10:fe:
         f3:d2:44:fd:05:0b:e3:a2:bf:75:5b:1f:01:45:de:69:ee:0e:
         e8:58:93:28:05:17:f3:b7:71:46:29:12:d7:02:be:3b:75:cf:
         9e:8a:6d:ca:a7:3e:01:96:77:cb:02:f1:c2:59:49:4c:37:ac:
         b8:81:45:4e:c5:74:fe:b1:45:f6:0a:10:ef:33:e6:56:22:9c:
         d3:48:34:a2:67:76:4e:9a:6b:45:1a:2d:20:52:ae:9d:79:e2:
         02:19:cd:bb:0d:65:8a:9e:22:fb:8d:21:d5:cf:c4:48:7d:74:
         99:6a:2a:98:4c:0c:62:94:d6:2d:5c:25:51:9e:92:f5:a3:c1:
         2e:c0:5b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----