Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VzanwQC3cFh66AbKYP5PAsUUPiM.roa
File:                     VzanwQC3cFh66AbKYP5PAsUUPiM.roa (raw, json)
Hash identifier:          lderf9b40tOVW08m9iwJvFBtyTIdQfeMuZEHetKZUnU=
Subject key identifier:   57:36:A7:C1:00:B7:70:58:7A:E8:06:CA:60:FE:4F:02:C5:14:3E:23
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0ECD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VzanwQC3cFh66AbKYP5PAsUUPiM.roa
Signing time:             Tue 29 Sep 2020 09:56:09 +0000
ROA not before:           Tue 29 Sep 2020 09:56:09 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.193.232.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3789 (0xecd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:09 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5736A7C100B770587AE806CA60FE4F02C5143E23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ee:99:d5:2b:68:c1:46:36:6e:3b:9d:c3:d7:
                    ef:5d:0b:c2:6b:ea:4d:46:ce:e5:03:1a:bd:e4:11:
                    46:25:7a:fc:e3:57:6b:8e:16:46:56:19:71:0e:f0:
                    0f:9f:c7:56:d7:b6:9c:3d:13:c0:a4:87:04:81:9b:
                    78:f1:fd:c7:42:30:81:56:26:52:38:88:62:0f:bf:
                    dd:7c:73:64:7f:7c:a5:67:8e:97:8a:38:a2:90:b9:
                    86:33:9f:71:b4:3f:ae:76:d9:a9:94:cf:35:a9:99:
                    04:37:dd:51:3f:e5:1c:02:cb:05:81:af:d4:a1:b5:
                    c3:3b:9a:3e:6d:07:a4:42:a2:99:cb:bb:de:dc:71:
                    9e:8d:a1:04:f0:2a:0f:2e:cb:d0:8f:bd:3f:f1:98:
                    8e:45:9e:94:15:60:b4:8a:e6:0b:be:cb:c3:e5:06:
                    ee:16:97:21:5c:9c:e8:ec:3b:16:62:fc:bc:95:44:
                    3d:f5:93:a3:37:e0:3e:bd:66:8d:d4:9c:94:65:16:
                    a0:4c:9f:34:be:1e:d2:04:c5:51:3a:f8:a7:d3:57:
                    d3:3a:c3:33:d5:ba:56:a3:6a:96:4a:6f:c9:b1:f0:
                    38:e1:7f:80:de:2b:a4:38:0a:ee:3a:c0:53:fb:14:
                    43:ee:bd:17:6d:d7:e0:0e:bd:75:c4:9a:98:31:4c:
                    ef:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:36:A7:C1:00:B7:70:58:7A:E8:06:CA:60:FE:4F:02:C5:14:3E:23
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VzanwQC3cFh66AbKYP5PAsUUPiM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         26:4b:7e:a6:74:c4:93:7b:d4:69:c8:8c:21:fe:44:14:38:89:
         69:0a:ae:03:5e:c6:e9:19:c7:f0:51:1b:42:3b:b1:23:79:b3:
         47:9b:38:27:cb:45:d7:6a:92:f5:78:8a:35:0d:a3:79:8d:83:
         eb:0c:c3:78:df:a4:ea:5f:e7:bc:30:4f:fa:73:bb:68:99:6b:
         56:af:6f:47:25:94:12:46:41:bd:03:a0:12:63:b3:35:ad:74:
         5d:3d:8f:d8:ed:60:9f:2f:71:ac:f7:50:be:dc:43:5f:d0:11:
         6f:34:3b:c7:ae:9c:16:72:15:dc:85:e9:1a:0e:aa:ac:fd:7d:
         12:04:1c:01:c7:94:6e:31:37:d5:81:0b:89:19:57:40:1a:30:
         c5:27:bc:c9:37:71:ed:c9:c2:76:13:9f:25:96:5b:e9:54:7e:
         c3:43:61:68:ea:87:36:ba:65:09:d3:1e:df:c6:92:cb:cc:39:
         28:6e:58:5d:3b:58:0c:89:a5:6c:ab:31:be:36:f7:36:95:df:
         9a:ba:d9:e1:4d:9a:e2:7b:51:a4:37:e2:86:69:95:95:ab:e0:
         39:39:6e:99:d5:99:24:74:29:fb:64:57:12:6b:63:ed:b5:4e:
         93:94:e8:a9:95:12:bb:ef:7e:f7:dc:51:c6:da:08:d3:c8:b9:
         d5:e3:38:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----