Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WOfYYQVJA3YAhllExFHnMu6TU1I.roa
File:                     WOfYYQVJA3YAhllExFHnMu6TU1I.roa (raw, json)
Hash identifier:          +phEbefG8kYb1n7kzZJbG6XOi5YipLEoPFOoJYylsHI=
Subject key identifier:   58:E7:D8:61:05:49:03:76:00:86:59:44:C4:51:E7:32:EE:93:53:52
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F21
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WOfYYQVJA3YAhllExFHnMu6TU1I.roa
Signing time:             Tue 29 Sep 2020 09:56:32 +0000
ROA not before:           Tue 29 Sep 2020 09:56:32 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.193.107.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3873 (0xf21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:32 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=58E7D8610549037600865944C451E732EE935352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:55:c2:ab:52:dd:31:b3:4e:b0:68:85:3d:fb:
                    17:df:b0:92:86:8b:5c:98:51:b3:94:ce:ec:eb:64:
                    e2:77:38:86:aa:53:01:6f:85:6c:b4:24:8c:97:e4:
                    0f:cd:a4:8b:47:e9:57:5f:5b:d5:b5:9b:0e:f3:d6:
                    19:83:0f:96:06:e9:cd:c6:5b:9c:e1:97:a4:6c:3e:
                    55:4f:c3:8f:8b:40:73:0a:46:4f:3b:c0:ab:0c:a3:
                    1e:17:2d:b9:32:aa:04:cf:65:3d:0c:c3:44:0f:9b:
                    c2:8c:3f:73:e9:da:82:79:d9:09:6c:83:9b:7a:8c:
                    6c:df:fd:c6:ed:57:43:b0:72:f9:a9:3a:55:62:1a:
                    fa:d5:a7:7c:e2:65:a8:36:1e:47:bf:c0:f1:eb:eb:
                    ae:e0:0f:9f:42:06:63:5d:cb:3b:67:dc:74:b9:36:
                    48:6d:f2:e3:83:d6:ce:e6:ff:53:6f:80:b9:de:76:
                    49:33:74:f5:b8:3b:a3:cd:1e:12:50:fe:f7:ee:b9:
                    9d:a9:8a:f5:02:5d:d8:63:49:a8:9f:af:4f:81:c0:
                    98:3e:4a:7a:14:25:e7:c7:44:67:70:56:97:a5:55:
                    f6:56:5b:89:f9:b0:e7:8c:67:53:45:53:de:39:27:
                    9b:d8:87:23:cd:64:32:aa:e7:d0:ea:f2:af:84:58:
                    03:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E7:D8:61:05:49:03:76:00:86:59:44:C4:51:E7:32:EE:93:53:52
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WOfYYQVJA3YAhllExFHnMu6TU1I.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:09:bb:0b:a5:38:e3:01:ac:d3:d9:a7:73:ad:dc:80:f2:11:
         d5:cb:49:cf:5f:bb:37:09:d7:06:88:20:17:a8:1b:f3:89:bd:
         a4:2f:d2:48:c5:08:a6:2e:03:80:4e:4b:c3:09:1a:8e:17:c9:
         9b:e5:9e:57:93:fa:69:bb:86:4f:b5:37:b8:3a:7a:26:2a:cc:
         0e:c1:85:a0:d8:17:c9:89:cc:eb:0a:a2:2c:d6:be:ce:1b:23:
         ea:9e:ca:bd:f8:45:fc:c0:f5:51:92:19:4f:b6:40:8a:d4:73:
         de:0e:1f:19:7a:b3:4f:aa:cc:57:0f:bf:5d:bc:f6:4a:ab:c3:
         02:bb:aa:32:32:61:9d:c6:74:e7:15:c9:35:98:02:32:a9:5f:
         86:cb:e7:1a:b4:1c:6b:f0:1c:73:4c:f9:36:a5:c8:49:42:92:
         2d:b4:0e:9f:3e:7e:ed:c3:8f:26:b7:af:c1:c1:6c:72:65:99:
         29:11:9b:99:94:f7:7b:5c:a1:1d:c4:b6:15:bd:a8:d1:e7:6e:
         c7:4d:7f:dd:11:1a:7d:fd:d8:1c:2e:da:89:25:f8:93:3f:c4:
         ce:79:b7:31:86:d9:f6:87:23:b6:ad:f6:b4:c8:87:65:fa:d2:
         cf:de:d6:ae:fd:95:fe:98:4c:9b:17:20:8d:47:9c:6a:86:61:
         73:28:15:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----