Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/V5kg5hKBmOHNmswFSFG618_A-aI.roa
File:                     V5kg5hKBmOHNmswFSFG618_A-aI.roa (raw, json)
Hash identifier:          y3I6YwfGdHs615B4eUm+dPHDtRCq+z8ZvH7qfDLhDgY=
Subject key identifier:   57:99:20:E6:12:81:98:E1:CD:9A:CC:05:48:51:BA:D7:CF:C0:F9:A2
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1BB7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/V5kg5hKBmOHNmswFSFG618_A-aI.roa
Signing time:             Wed 29 Sep 2021 02:46:54 +0000
ROA not before:           Wed 29 Sep 2021 02:46:54 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.195.9.0/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7095 (0x1bb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:54 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=579920E6128198E1CD9ACC054851BAD7CFC0F9A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4d:79:8b:8d:76:ea:e5:32:1f:86:41:b2:7d:
                    9f:c4:13:81:df:1d:2b:5f:be:e1:7f:eb:9f:8f:b5:
                    f9:e2:65:1a:52:83:e2:fa:a4:11:0e:ac:8b:5b:0a:
                    d0:2f:f0:3d:5c:17:e1:f3:7c:85:ed:7f:6e:36:85:
                    bd:c1:3b:b4:00:49:50:8c:bf:ad:fd:7e:28:16:f6:
                    1d:ac:f8:ad:9e:ab:aa:b5:d6:29:15:22:6a:f7:b9:
                    5d:e0:22:22:6e:80:1f:c9:d1:70:47:c3:32:8c:d9:
                    fc:7a:87:65:87:ab:05:0e:d7:cd:65:73:17:f7:fb:
                    1a:a7:ad:67:8c:98:a9:6d:d6:8e:c7:a4:4b:14:3c:
                    ce:07:e4:c5:dd:4b:50:e5:7a:47:b8:eb:d1:ae:c0:
                    b2:91:9e:e9:45:a1:58:3f:18:93:3a:94:50:8f:8d:
                    45:5b:08:e8:18:d6:14:02:15:a3:a8:fa:c0:96:2a:
                    2a:c9:04:54:40:54:fa:26:e4:cc:ab:8a:ee:0f:8f:
                    6d:3b:cc:a5:9e:3e:b6:44:13:30:27:61:3a:0d:03:
                    d5:d3:c9:1f:37:26:0d:4a:64:6e:59:e2:71:21:97:
                    3c:67:d6:af:eb:12:dc:16:6d:96:b2:85:3f:4d:a4:
                    77:02:e1:a0:78:7d:d4:1e:65:1d:0a:af:6e:56:8f:
                    67:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:99:20:E6:12:81:98:E1:CD:9A:CC:05:48:51:BA:D7:CF:C0:F9:A2
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/V5kg5hKBmOHNmswFSFG618_A-aI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.9.0/26

    Signature Algorithm: sha256WithRSAEncryption
         4c:3f:18:44:1a:b2:a0:9d:2d:7a:50:34:9a:0b:d0:fe:da:39:
         0d:01:9c:c0:4e:75:b5:e1:e4:92:27:9f:82:ee:14:ce:7b:ae:
         34:09:69:b0:7f:99:58:95:33:10:84:f9:4c:ac:75:85:7c:cc:
         5e:16:c6:18:8a:8b:27:e3:17:ed:f7:a0:d5:d4:85:ab:b2:1f:
         21:9e:f3:c2:45:f2:9d:dd:ac:07:33:5f:fe:a8:11:18:73:d5:
         1a:ce:03:5e:28:10:31:33:96:e9:16:8e:7b:c2:7d:44:a8:9f:
         1c:0c:33:66:4c:b3:f8:b4:4c:97:64:86:d0:98:bc:37:86:34:
         42:52:d3:39:d4:e0:bc:53:b7:5a:b7:53:63:9a:0c:c3:8d:4a:
         e5:ed:a5:57:d0:3d:97:d0:41:b2:47:a3:00:6f:72:28:a6:d1:
         4f:ba:7d:d0:bf:2c:5f:dd:40:b2:33:1c:af:c0:55:b5:9e:72:
         e1:84:91:e0:2a:37:af:f9:be:f8:b7:22:87:45:c2:6d:7f:5b:
         d4:3a:43:17:45:9f:ed:a9:12:e0:ae:1b:44:9c:f3:f3:e3:0c:
         29:cc:b8:25:41:72:05:18:cf:89:33:fc:06:a1:cb:03:4c:cc:
         12:e0:0a:1d:58:db:08:04:a6:e0:eb:bc:9a:d1:3e:e0:95:c9:
         d8:5c:fd:27
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICG7cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ2NTRaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDU3OTkyMEU2MTI4MTk4
RTFDRDlBQ0MwNTQ4NTFCQUQ3Q0ZDMEY5QTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCiTXmLjXbq5TIfhkGyfZ/EE4HfHStfvuF/65+PtfniZRpSg+L6
pBEOrItbCtAv8D1cF+HzfIXtf242hb3BO7QASVCMv639figW9h2s+K2eq6q11ikV
Imr3uV3gIiJugB/J0XBHwzKM2fx6h2WHqwUO181lcxf3+xqnrWeMmKlt1o7HpEsU
PM4H5MXdS1Dleke469GuwLKRnulFoVg/GJM6lFCPjUVbCOgY1hQCFaOo+sCWKirJ
BFRAVPom5Myriu4Pj207zKWePrZEEzAnYToNA9XTyR83Jg1KZG5Z4nEhlzxn1q/r
EtwWbZayhT9NpHcC4aB4fdQeZR0Kr25Wj2dbAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUV5kg5hKBmOHNmswFSFG618/A+aIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1Y1a2c1aEtCbU9ITm1zd0ZT
Rkc2MThfQS1hSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQZ7
wwkAMA0GCSqGSIb3DQEBCwUAA4IBAQBMPxhEGrKgnS16UDSaC9D+2jkNAZzATnW1
4eSSJ5+C7hTOe640CWmwf5lYlTMQhPlMrHWFfMxeFsYYiosn4xft96DV1IWrsh8h
nvPCRfKd3awHM1/+qBEYc9UazgNeKBAxM5bpFo57wn1EqJ8cDDNmTLP4tEyXZIbQ
mLw3hjRCUtM51OC8U7dat1NjmgzDjUrl7aVX0D2X0EGyR6MAb3IoptFPun3Qvyxf
3UCyMxyvwFW1nnLhhJHgKjev+b74tyKHRcJtf1vUOkMXRZ/tqRLgrhtEnPPz4wwp
zLglQXIFGM+JM/wGocsDTMwS4AodWNsIBKbg67ya0T7glcnYXP0n
-----END CERTIFICATE-----