Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z8-mC71Pl1jdoS4eMU-r3fV52m4.roa
File:                     Z8-mC71Pl1jdoS4eMU-r3fV52m4.roa (raw, json)
Hash identifier:          JCNCTzcr79qAIT2UzUUKk/vwf8Ayc0Viiosi3bRz9vE=
Subject key identifier:   67:CF:A6:0B:BD:4F:97:58:DD:A1:2E:1E:31:4F:AB:DD:F5:79:DA:6E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1949
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z8-mC71Pl1jdoS4eMU-r3fV52m4.roa
Signing time:             Sun 07 Feb 2021 13:07:31 +0000
ROA not before:           Sun 07 Feb 2021 13:07:31 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        123.193.160.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6473 (0x1949)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 13:07:31 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=67CFA60BBD4F9758DDA12E1E314FABDDF579DA6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:81:e5:bd:38:33:5d:6d:e4:10:05:bc:b0:0b:
                    d6:9c:f3:db:7c:8e:a1:90:9a:c4:d7:1c:4f:af:8e:
                    f5:5a:5e:7e:54:22:f5:5d:00:b9:aa:e0:a0:3a:87:
                    57:28:33:46:21:81:59:fb:a2:74:ab:b6:44:bf:ac:
                    06:b3:82:5b:c1:80:87:4d:dc:58:45:e1:f3:73:22:
                    10:6e:b7:83:7e:3e:21:2a:92:16:6b:e0:46:05:ac:
                    a7:fe:23:ac:1a:53:e7:e4:14:20:8a:95:36:2b:e9:
                    eb:3f:a0:f7:3f:b0:7d:ab:63:69:cb:37:26:82:e3:
                    e3:2c:98:c2:f8:32:89:e0:02:7c:ca:e7:5d:b4:49:
                    09:b7:cb:7d:69:56:31:28:77:10:ea:4a:01:c8:0d:
                    78:3e:a5:4a:52:5f:9a:e6:f0:62:92:fb:47:33:c3:
                    12:20:c6:a6:3b:ce:fb:55:1b:2b:ca:09:4f:9d:26:
                    ad:43:f0:d8:41:27:e1:1f:e0:d4:3a:92:2f:72:30:
                    8a:14:f3:0d:b1:e7:8e:c9:47:a4:62:3a:36:b5:2f:
                    e8:d2:d0:75:f9:b3:37:ce:eb:15:b7:f1:1b:f4:eb:
                    54:be:93:11:5a:58:63:70:bb:20:26:ce:c8:02:35:
                    7a:39:dd:ac:87:e4:66:02:96:ce:78:f2:de:1b:e4:
                    63:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CF:A6:0B:BD:4F:97:58:DD:A1:2E:1E:31:4F:AB:DD:F5:79:DA:6E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z8-mC71Pl1jdoS4eMU-r3fV52m4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3a:f6:bd:43:f2:d7:11:57:50:3f:4d:07:fb:af:61:34:53:44:
         2c:42:7d:c9:5f:7d:6b:7a:42:65:a0:ae:ee:64:7b:3d:c7:8a:
         73:f4:0e:52:19:11:12:47:df:12:44:c1:9c:67:d3:2c:c1:a1:
         17:95:cc:a6:f1:67:7a:30:b6:5a:bb:95:db:3d:63:5a:57:bc:
         a1:e8:67:82:92:41:e8:ad:94:61:fb:70:df:c3:01:86:7f:1f:
         c2:e2:76:e2:32:fd:99:4b:75:f2:39:9c:4f:05:d5:07:e5:c5:
         15:91:5f:6d:07:d6:d3:13:31:fb:8b:dc:25:b6:b5:46:53:65:
         82:1d:46:5c:f3:33:66:c5:eb:75:18:c9:78:2a:2b:77:da:dc:
         7d:23:0a:3a:46:f5:4d:68:29:4d:f1:b9:62:98:ed:a9:ba:e5:
         99:62:a7:c8:d4:c1:3a:da:34:f9:f8:e9:a9:ab:fa:1b:7e:60:
         f9:3f:7c:55:9b:b6:01:64:48:96:8e:86:c1:12:ed:42:91:03:
         59:be:4a:ce:18:fc:04:3b:0f:8d:44:cf:35:8a:cc:b7:05:d0:
         9c:7d:d8:f4:62:54:dc:05:26:19:ad:f1:83:b3:00:c2:a4:55:
         89:9e:8b:1a:59:3d:c0:56:06:80:01:19:f5:83:f4:be:11:bf:
         8d:2c:08:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----