Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_OiHvWAaPrGvKs6HssHfXY9pHJ0.roa
File:                     _OiHvWAaPrGvKs6HssHfXY9pHJ0.roa (raw, json)
Hash identifier:          CW7WaNJQSGcJs1JimDd9O5PQ1dkv/aN/aINrFJe6jSw=
Subject key identifier:   FC:E8:87:BD:60:1A:3E:B1:AF:2A:CE:87:B2:C1:DF:5D:8F:69:1C:9D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1A78
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_OiHvWAaPrGvKs6HssHfXY9pHJ0.roa
Signing time:             Wed 29 Sep 2021 02:45:23 +0000
ROA not before:           Wed 29 Sep 2021 02:45:23 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.192.232.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6776 (0x1a78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:45:23 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=FCE887BD601A3EB1AF2ACE87B2C1DF5D8F691C9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:af:8d:e4:aa:ff:b5:a1:4f:7b:08:6f:f0:3e:
                    6a:af:e9:49:57:c8:dc:b8:ea:82:3e:51:0d:1c:91:
                    49:4a:a1:9d:cd:3c:52:0f:17:6b:51:b5:a7:0f:43:
                    00:b0:76:54:b0:d6:23:93:28:7d:80:83:57:9d:e7:
                    7f:75:0b:fd:6d:4d:5f:0c:c4:08:ff:3b:2e:9c:d4:
                    8a:f1:40:d1:08:2b:01:29:59:90:b1:f6:3f:b0:41:
                    0b:b9:d3:e7:b6:f0:93:c1:f9:1c:18:61:73:1c:4f:
                    06:c9:1e:56:fd:3c:ef:56:dc:92:44:b3:d4:e4:cc:
                    ad:15:f0:f3:6c:a7:77:e0:e2:e4:fc:7b:20:c1:af:
                    5c:5f:6a:f3:77:d6:4a:b4:df:6d:c7:d0:55:8a:c5:
                    7f:7b:d2:82:dc:36:8c:4f:58:95:2f:2d:8a:50:85:
                    5b:69:01:82:90:41:4d:1f:3a:2c:2f:a4:f4:80:f5:
                    54:f4:d6:1f:e8:04:1d:e8:6e:1a:26:03:6d:8b:01:
                    cb:a8:80:57:1d:b4:dc:89:e0:6a:40:5d:4a:5f:2b:
                    a3:f2:89:81:d9:33:44:81:87:fe:81:78:3e:4a:89:
                    ec:dd:8d:6d:a5:ba:b2:8b:f2:a5:92:55:57:13:82:
                    53:f4:e7:cb:34:05:94:a6:b6:00:01:7a:c0:f3:86:
                    0a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E8:87:BD:60:1A:3E:B1:AF:2A:CE:87:B2:C1:DF:5D:8F:69:1C:9D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_OiHvWAaPrGvKs6HssHfXY9pHJ0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:5c:cd:f1:8f:bb:03:12:df:f0:6f:bc:f1:57:92:1d:d5:fc:
         65:ee:6b:84:30:de:ce:e5:91:2b:09:d6:02:30:ef:00:48:0b:
         fd:97:86:74:fe:09:3d:44:02:5c:84:71:44:c3:23:c8:2b:30:
         dd:b5:08:be:89:29:33:54:7f:c6:b4:e4:ac:18:50:14:61:13:
         05:4d:af:c8:1a:25:8e:49:c4:95:18:c3:f8:12:16:c7:59:d8:
         15:3f:24:e2:59:68:c2:8d:9a:90:8f:de:aa:76:dc:ad:d8:cf:
         0f:73:b2:ea:3b:09:1d:c1:32:7e:ea:cf:61:8b:cb:22:d2:3b:
         a5:12:83:60:5e:0a:c4:15:2a:ee:fa:6b:2d:eb:d6:7f:65:31:
         1a:57:5c:15:24:09:3e:b3:22:3f:06:9c:83:a1:2c:3d:fa:37:
         19:18:d2:aa:c7:7d:de:9e:a7:be:31:b9:e4:c4:a3:da:3c:2e:
         0a:5a:04:20:f1:91:e1:c1:87:63:57:92:14:a8:01:78:ec:63:
         56:a3:4a:cf:ab:44:bf:9b:5c:b4:a3:32:26:c8:2e:89:21:05:
         67:da:37:6f:d7:66:60:81:3f:4d:3a:61:5c:99:41:18:72:ad:
         2e:fe:cb:f3:35:af:3c:44:cf:59:b7:92:7e:21:1b:2e:53:c2:
         59:48:06:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----