Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W_AfTd4Z8UztKMmmhTTxzp7XLg8.roa
File:                     W_AfTd4Z8UztKMmmhTTxzp7XLg8.roa (raw, json)
Hash identifier:          Cd4NEXSX8KtbwHMea6NDx+No6nMnpPnFIHE2P2J/EBM=
Subject key identifier:   5B:F0:1F:4D:DE:19:F1:4C:ED:28:C9:A6:85:34:F1:CE:9E:D7:2E:0F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       10B8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W_AfTd4Z8UztKMmmhTTxzp7XLg8.roa
Signing time:             Wed 25 Nov 2020 04:20:56 +0000
ROA not before:           Wed 25 Nov 2020 04:20:56 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        123.194.232.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4280 (0x10b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:20:56 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5BF01F4DDE19F14CED28C9A68534F1CE9ED72E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4a:a2:48:98:f1:db:b8:51:f3:dc:a1:37:81:
                    18:46:bd:08:e8:de:76:4a:92:73:8b:34:68:7a:29:
                    50:d5:31:30:da:3a:c8:78:58:39:32:88:4c:cf:9b:
                    6c:57:46:e8:af:39:c8:33:82:16:a7:d8:48:28:82:
                    f9:0c:01:ba:97:c9:b2:7b:c3:2b:b3:91:17:79:31:
                    4a:cc:8a:1c:d3:36:77:ce:93:8b:56:79:a3:99:db:
                    29:6a:c3:5c:79:f6:4a:23:02:a6:9d:0a:03:7d:63:
                    72:21:1d:88:f4:33:12:4d:98:3c:78:be:1c:77:a7:
                    f8:09:47:22:b0:ee:88:2f:9e:b7:ae:99:4f:5f:c8:
                    25:4c:43:d8:7c:f5:b1:ff:ea:08:10:da:6c:25:a6:
                    d1:d6:46:2b:63:4e:be:9e:73:3b:72:da:b7:5c:56:
                    e7:f1:fc:d5:c7:db:d2:7b:1d:d1:22:b4:ec:74:1f:
                    37:8c:5c:83:08:4a:92:e5:b3:48:91:7d:2a:87:1b:
                    c6:8c:57:9f:15:48:0c:aa:90:4b:f3:88:e1:27:ba:
                    98:a3:ae:50:13:f8:99:cf:54:1a:07:1b:b4:c0:10:
                    3d:be:61:3a:62:8c:41:a9:0e:74:9e:6a:52:41:46:
                    47:bf:03:f7:bc:af:aa:e8:55:eb:7f:6f:4b:41:7e:
                    b9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F0:1F:4D:DE:19:F1:4C:ED:28:C9:A6:85:34:F1:CE:9E:D7:2E:0F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W_AfTd4Z8UztKMmmhTTxzp7XLg8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:69:45:88:9d:35:e6:0c:dd:f9:35:2d:cb:70:7b:ea:42:0a:
         bc:29:e0:1e:26:49:03:49:9e:70:9b:ef:3a:52:50:71:37:6b:
         d7:31:3b:3c:be:60:96:13:51:71:fe:0b:6e:f5:d5:69:d0:f6:
         6a:34:56:5b:ed:72:8d:f2:38:af:64:94:1f:ed:2c:c9:8a:e6:
         fd:b4:17:c3:5c:cb:dc:08:c4:f4:a8:72:41:fa:af:a0:2a:bc:
         2a:98:91:13:7c:95:45:0b:c8:bb:ce:de:0b:74:7c:22:a5:dd:
         de:ed:b9:3b:9c:0c:f0:4d:de:fa:e6:b9:94:18:1a:83:5d:22:
         4a:f8:cc:87:25:60:8e:2e:17:46:1e:0e:15:77:2e:75:a9:f6:
         d7:61:b2:4a:32:b5:00:44:24:e2:03:1f:a2:11:34:8e:76:0c:
         49:96:55:b7:a1:f0:43:c7:7f:b9:31:7a:71:eb:8e:68:fb:80:
         a0:7e:00:cc:51:8a:1e:b9:04:c8:58:ee:3c:28:b8:96:f3:4b:
         26:ae:55:c2:e2:98:70:7c:00:72:da:42:c7:ee:ba:78:1c:21:
         38:b4:47:cb:7b:6b:0e:89:c1:2d:d3:e7:35:a0:b1:b3:2c:a0:
         05:ca:69:83:47:c1:e7:58:fe:e7:0f:e8:7e:67:96:c3:c1:05:
         b7:62:bc:eb
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICELgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDExMjUw
NDIwNTZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDVCRjAxRjREREUxOUYx
NENFRDI4QzlBNjg1MzRGMUNFOUVENzJFMEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQSqJImPHbuFHz3KE3gRhGvQjo3nZKknOLNGh6KVDVMTDaOsh4
WDkyiEzPm2xXRuivOcgzghan2EgogvkMAbqXybJ7wyuzkRd5MUrMihzTNnfOk4tW
eaOZ2ylqw1x59kojAqadCgN9Y3IhHYj0MxJNmDx4vhx3p/gJRyKw7ogvnreumU9f
yCVMQ9h89bH/6ggQ2mwlptHWRitjTr6eczty2rdcVufx/NXH29J7HdEitOx0HzeM
XIMISpLls0iRfSqHG8aMV58VSAyqkEvziOEnupijrlAT+JnPVBoHG7TAED2+YTpi
jEGpDnSealJBRke/A/e8r6roVet/b0tBfrlVAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUW/AfTd4Z8UztKMmmhTTxzp7XLg8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1dfQWZUZDRaOFV6dEtNbW1o
VFR4enA3WExnOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wugwDQYJKoZIhvcNAQELBQADggEBAKxpRYidNeYM3fk1Lctwe+pCCrwp4B4mSQNJ
nnCb7zpSUHE3a9cxOzy+YJYTUXH+C2711WnQ9mo0Vlvtco3yOK9klB/tLMmK5v20
F8Ncy9wIxPSockH6r6AqvCqYkRN8lUULyLvO3gt0fCKl3d7tuTucDPBN3vrmuZQY
GoNdIkr4zIclYI4uF0YeDhV3LnWp9tdhskoytQBEJOIDH6IRNI52DEmWVbeh8EPH
f7kxenHrjmj7gKB+AMxRih65BMhY7jwouJbzSyauVcLimHB8AHLaQsfuungcITi0
R8t7aw6JwS3T5zWgsbMsoAXKaYNHwedY/ucP6H5nlsPBBbdivOs=
-----END CERTIFICATE-----