Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VXkYkqlXB9kRJGLOo90l2bUIfuQ.roa
File:                     VXkYkqlXB9kRJGLOo90l2bUIfuQ.roa (raw, json)
Hash identifier:          CesjMr2d7FiZ18ZsX7aJfiCZD64lmTCNEI5rvj6+GMQ=
Subject key identifier:   55:79:18:92:A9:57:07:D9:11:24:62:CE:A3:DD:25:D9:B5:08:7E:E4
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D73
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VXkYkqlXB9kRJGLOo90l2bUIfuQ.roa
Signing time:             Tue 29 Sep 2020 09:54:34 +0000
ROA not before:           Tue 29 Sep 2020 09:54:34 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.224.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3443 (0xd73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:34 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=55791892A95707D9112462CEA3DD25D9B5087EE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:70:97:b3:9e:08:7e:3e:1c:0c:4b:0a:5c:36:
                    9f:ed:26:b6:26:2a:d8:5d:c5:14:a7:68:27:38:0c:
                    0d:a9:c7:2b:29:d6:a5:0a:da:23:3c:73:62:b2:1b:
                    a6:89:bd:d1:a7:ba:39:41:9f:9d:03:95:1b:4a:6c:
                    1b:4a:36:ff:cf:f0:35:23:46:c2:96:8a:8a:9c:94:
                    e4:31:a9:5d:b9:10:23:82:27:d9:04:20:b5:7d:48:
                    80:e3:31:9a:b9:fa:29:7e:55:58:fb:73:ac:e6:3a:
                    05:ad:6c:af:f0:d5:66:8e:04:3b:18:f7:0a:76:f8:
                    22:a1:5f:d7:f5:92:79:9b:2c:43:85:ef:98:15:95:
                    6f:ad:ab:75:33:30:3d:84:07:40:b3:04:b8:22:aa:
                    56:7e:f4:bb:53:a7:20:c0:a6:98:e3:0a:6e:3f:a3:
                    85:b0:f1:b0:dc:8c:f4:12:57:e6:f9:50:c4:b3:ff:
                    0f:c4:03:8a:05:7b:fa:46:eb:d0:6a:ea:fc:bd:03:
                    d0:10:1a:af:9e:98:36:df:90:b5:75:8e:3a:d0:25:
                    96:69:95:33:6e:54:f7:4a:72:88:0d:fc:3c:bd:23:
                    90:2f:58:00:84:05:70:f3:41:3f:24:87:b0:bd:c6:
                    aa:50:cc:74:77:c2:8a:13:64:94:c5:66:7d:f3:02:
                    1a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:79:18:92:A9:57:07:D9:11:24:62:CE:A3:DD:25:D9:B5:08:7E:E4
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VXkYkqlXB9kRJGLOo90l2bUIfuQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:3b:f9:e3:2e:74:a1:db:5f:6d:c1:fd:54:39:c0:47:3f:5f:
         e0:76:2c:bf:a7:6b:6d:d5:f5:58:de:b6:47:39:00:d6:b4:ce:
         de:28:40:71:87:d7:d0:17:89:8d:e7:fd:aa:e8:1d:87:ca:6a:
         7a:53:08:f9:e4:28:64:8a:ee:8c:e7:77:8d:52:af:19:7e:03:
         bf:db:24:6e:d2:b1:1c:29:dc:70:7c:29:99:07:35:35:51:1f:
         61:67:ea:35:10:5e:f8:5f:01:82:71:13:1f:4a:c6:92:9d:97:
         2d:72:26:53:6d:7a:41:14:c8:2f:9c:54:32:2b:a9:45:ac:b6:
         87:36:06:40:50:f3:7b:ba:6c:3a:85:72:09:62:0f:b6:c9:db:
         fc:49:5a:69:d1:67:ab:56:22:df:41:ef:a2:98:36:87:f6:2c:
         07:32:25:3c:09:b3:80:ba:32:6b:c8:ca:57:cb:af:ad:f9:94:
         6b:97:da:93:b1:d4:f3:a7:16:1f:d1:35:ed:40:33:58:f3:0c:
         aa:64:be:eb:68:8a:00:2c:e1:a0:4f:2c:94:ef:51:dd:b9:70:
         4a:5a:e5:0c:be:57:54:9b:6e:e3:39:f8:5f:c9:f3:9a:b5:0e:
         bb:92:02:06:91:fc:f3:6f:a6:1b:3e:8f:20:76:32:2f:62:2b:
         6f:7f:c0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----