Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YP3MBkm4KRiMRpxb84E-eWsTwF8.roa
File:                     YP3MBkm4KRiMRpxb84E-eWsTwF8.roa (raw, json)
Hash identifier:          CT/2SSVnG2iS2GRRvESkPcSFjYh2ojPDpdK3eDloeRs=
Subject key identifier:   60:FD:CC:06:49:B8:29:18:8C:46:9C:5B:F3:81:3E:79:6B:13:C0:5F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       14AB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YP3MBkm4KRiMRpxb84E-eWsTwF8.roa
Signing time:             Sun 07 Feb 2021 11:59:34 +0000
ROA not before:           Sun 07 Feb 2021 11:59:34 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.192.144.128/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5291 (0x14ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 11:59:34 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=60FDCC0649B829188C469C5BF3813E796B13C05F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:41:6e:63:df:a9:6b:2e:2f:df:85:36:af:57:
                    d1:46:81:00:17:2c:0d:16:f7:d1:f6:6b:74:46:ce:
                    f1:4e:ed:67:d8:bb:70:7c:ec:a6:be:9f:29:04:c7:
                    18:f6:ed:ba:6f:1d:5d:28:ff:98:6b:c9:f7:12:d8:
                    ea:3a:84:59:bf:b9:50:99:a9:ad:59:20:c0:d9:12:
                    51:be:44:73:4f:7d:a6:79:10:1f:79:ec:c8:23:c1:
                    c1:ea:29:3f:c1:93:e2:db:e6:fb:6b:d1:14:d8:33:
                    0e:5b:51:a4:5f:4c:59:28:10:0c:3f:d2:ce:47:48:
                    39:ab:d5:26:21:95:dc:42:7f:03:4d:5a:cc:e2:1c:
                    95:84:84:01:6e:68:88:a9:9d:b6:31:53:e8:05:1b:
                    10:89:3c:cc:ae:ba:eb:7c:3e:8f:9f:91:83:c9:be:
                    0f:00:02:97:d5:3d:a9:99:50:fd:d3:ff:a1:df:b0:
                    df:39:46:d1:be:f7:55:a4:76:62:6e:c7:b9:1c:e5:
                    ea:84:16:bd:8a:1d:3b:bc:a1:6f:d3:0f:79:62:3c:
                    37:9a:10:fd:4f:30:b2:17:73:fa:49:63:4b:32:60:
                    d8:6d:fb:8d:0c:58:3f:a1:4e:a9:d0:34:2b:b8:7c:
                    24:2a:e4:80:ef:02:a9:8a:93:fb:37:f1:c0:c3:c0:
                    fe:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:FD:CC:06:49:B8:29:18:8C:46:9C:5B:F3:81:3E:79:6B:13:C0:5F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YP3MBkm4KRiMRpxb84E-eWsTwF8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.144.128/26

    Signature Algorithm: sha256WithRSAEncryption
         25:77:30:77:d1:61:f9:73:f8:54:e0:48:21:c9:5a:d6:ca:ec:
         61:82:7b:c4:f2:c2:1f:2c:6a:9b:8f:82:27:22:55:cb:3e:6b:
         2b:23:f5:82:69:a1:50:05:7b:91:05:05:39:17:aa:e5:13:5e:
         2b:cc:c3:26:47:d9:96:1e:f2:06:e1:7d:75:5b:6f:39:d6:f9:
         02:c1:90:5c:40:65:47:bb:61:8b:b3:35:5c:59:7e:0b:8f:0b:
         05:00:c3:66:c7:d7:c0:e6:59:3f:d7:dc:29:67:20:8b:93:8c:
         03:a9:51:e7:6b:88:fd:d1:61:de:ed:b7:bc:38:cb:e7:c3:e1:
         08:40:7c:2f:52:11:72:05:f3:33:4c:ac:72:cd:55:99:29:2d:
         c1:8f:df:30:87:c6:2f:33:05:c1:a5:07:9e:52:9b:b4:db:2d:
         7a:f2:b8:dd:56:80:ee:6a:82:0a:d9:dd:ff:af:40:5e:80:f9:
         62:b3:49:2a:95:70:fe:c4:57:9e:c4:d5:9c:1b:be:62:8e:14:
         28:c4:73:74:f1:80:b2:9a:3d:71:eb:ae:71:7b:0e:b2:fc:74:
         d8:d5:4d:b4:da:e2:7f:74:a0:03:61:7a:89:4d:f4:13:d1:d1:
         f1:26:37:3b:f2:20:bf:ae:db:df:b8:47:af:10:1a:07:a5:f9:
         9b:c3:40:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----