Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_KPfm-jpiNtk-Dxz1sGtq5Lcz1Y.roa
File:                     _KPfm-jpiNtk-Dxz1sGtq5Lcz1Y.roa (raw, json)
Hash identifier:          ClLkMYE/5k0JLd3USoGe9UuspB5hKAh/lBU09bTiJls=
Subject key identifier:   FC:A3:DF:9B:E8:E9:88:DB:64:F8:3C:73:D6:C1:AD:AB:92:DC:CF:56
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       18F3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_KPfm-jpiNtk-Dxz1sGtq5Lcz1Y.roa
Signing time:             Sun 07 Feb 2021 12:55:29 +0000
ROA not before:           Sun 07 Feb 2021 12:55:29 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        123.195.28.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6387 (0x18f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:55:29 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=FCA3DF9BE8E988DB64F83C73D6C1ADAB92DCCF56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0f:9f:8e:b7:47:59:cc:4d:cd:eb:f8:e3:e5:
                    82:c1:1a:90:d7:4f:5a:fc:9f:a5:05:60:e1:b6:a1:
                    7d:bf:ed:37:ac:7b:37:cf:30:5b:e3:64:c4:2b:ef:
                    f4:12:c9:eb:cf:f5:d7:9f:85:08:3a:63:03:77:b9:
                    74:ae:df:2c:2d:f7:35:fa:ba:48:0a:d1:fa:cf:56:
                    c0:42:23:00:08:ff:6f:b3:26:57:5f:6f:44:fe:c4:
                    e7:6e:72:ad:94:cc:d3:14:6d:61:bd:91:29:09:81:
                    af:98:82:14:27:92:6c:38:9f:da:db:de:bb:a0:a8:
                    e2:73:e7:1a:c4:5b:7f:6b:36:c7:3d:b5:d6:85:a7:
                    d9:d1:2f:7c:07:c7:dd:84:ec:35:2b:cc:a1:35:0e:
                    8c:1d:38:06:67:62:a6:f7:41:13:5e:28:bc:45:a3:
                    b1:2e:d2:bc:38:5c:16:3d:e1:e7:13:18:e2:04:fb:
                    94:c3:ee:ef:3a:57:34:e9:0a:51:9b:40:81:4c:a3:
                    c5:1a:42:de:27:f6:ee:4b:19:2d:7c:88:44:20:e8:
                    77:a1:96:13:72:33:75:aa:ab:3c:30:e5:69:40:2d:
                    3b:c7:47:cf:42:09:c9:a1:5d:0b:65:73:4e:b8:3b:
                    41:2f:6d:33:d8:39:51:b1:9e:0a:8e:51:f3:3e:ee:
                    61:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A3:DF:9B:E8:E9:88:DB:64:F8:3C:73:D6:C1:AD:AB:92:DC:CF:56
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_KPfm-jpiNtk-Dxz1sGtq5Lcz1Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:e6:1f:b1:fb:6b:d2:af:8f:1e:18:f4:ee:68:65:ca:fc:9c:
         85:17:ea:40:02:de:63:bb:49:17:21:01:23:b1:85:7c:29:7f:
         29:61:f1:16:87:d8:7f:f0:5c:9a:6d:10:3d:9e:c1:03:33:cd:
         3e:ab:ca:2b:bb:7c:12:c5:7e:32:f7:2c:de:54:af:7d:d0:5e:
         0c:4a:53:13:4c:2a:ad:4e:85:b3:0d:c7:77:56:73:20:23:48:
         0f:59:21:e4:b5:66:68:b6:5b:b8:f1:6e:b2:07:f8:68:be:93:
         fd:80:ba:bd:61:11:7d:d7:94:f0:dd:09:4e:6a:4a:cb:38:b2:
         36:4b:d2:94:45:fa:a7:00:88:67:59:13:3d:6b:55:e2:9e:ad:
         7d:69:42:89:14:27:e9:33:9b:73:30:e4:11:27:b5:fc:bb:ed:
         b0:ba:b2:0f:76:e0:94:ee:fe:55:d9:1f:47:93:f7:d1:70:c4:
         4c:8f:0c:d1:a4:c5:0f:3d:02:56:c6:fc:2e:10:38:8b:3e:8b:
         8a:32:fb:a4:a2:9c:b3:61:8b:6c:db:73:56:65:82:54:35:32:
         c4:b7:f0:30:d4:62:24:e7:94:c2:16:1a:5f:aa:b0:9d:eb:36:
         9e:0c:6f:54:38:99:ad:e8:20:c7:81:55:e3:70:89:11:19:d3:
         30:7a:95:79
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGPMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjU1MjlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEZDQTNERjlCRThFOTg4
REI2NEY4M0M3M0Q2QzFBREFCOTJEQ0NGNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDID5+Ot0dZzE3N6/jj5YLBGpDXT1r8n6UFYOG2oX2/7TesezfP
MFvjZMQr7/QSyevP9defhQg6YwN3uXSu3ywt9zX6ukgK0frPVsBCIwAI/2+zJldf
b0T+xOducq2UzNMUbWG9kSkJga+YghQnkmw4n9rb3rugqOJz5xrEW39rNsc9tdaF
p9nRL3wHx92E7DUrzKE1DowdOAZnYqb3QRNeKLxFo7Eu0rw4XBY94ecTGOIE+5TD
7u86VzTpClGbQIFMo8UaQt4n9u5LGS18iEQg6HehlhNyM3Wqqzww5WlALTvHR89C
CcmhXQtlc064O0EvbTPYOVGxngqOUfM+7mGLAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU/KPfm+jpiNtk+Dxz1sGtq5Lcz1YwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL19LUGZtLWpwaU50ay1EeHox
c0d0cTVMY3oxWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wxwwDQYJKoZIhvcNAQELBQADggEBABDmH7H7a9Kvjx4Y9O5oZcr8nIUX6kAC3mO7
SRchASOxhXwpfylh8RaH2H/wXJptED2ewQMzzT6ryiu7fBLFfjL3LN5Ur33QXgxK
UxNMKq1OhbMNx3dWcyAjSA9ZIeS1Zmi2W7jxbrIH+Gi+k/2Aur1hEX3XlPDdCU5q
Sss4sjZL0pRF+qcAiGdZEz1rVeKerX1pQokUJ+kzm3Mw5BEntfy77bC6sg924JTu
/lXZH0eT99FwxEyPDNGkxQ89AlbG/C4QOIs+i4oy+6SinLNhi2zbc1ZlglQ1MsS3
8DDUYiTnlMIWGl+qsJ3rNp4Mb1Q4ma3oIMeBVeNwiREZ0zB6lXk=
-----END CERTIFICATE-----