Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a7jFJrXQUf1jJqKTE7giuiLG1sE.roa
File:                     a7jFJrXQUf1jJqKTE7giuiLG1sE.roa (raw, json)
Hash identifier:          WjN6JETiU3MZM7L3RomCJgdmK+AzvfnZCBnUZ/RL/FY=
Subject key identifier:   6B:B8:C5:26:B5:D0:51:FD:63:26:A2:93:13:B8:22:BA:22:C6:D6:C1
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D60
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a7jFJrXQUf1jJqKTE7giuiLG1sE.roa
Signing time:             Wed 29 Sep 2021 02:48:55 +0000
ROA not before:           Wed 29 Sep 2021 02:48:55 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.194.120.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7520 (0x1d60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:55 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=6BB8C526B5D051FD6326A29313B822BA22C6D6C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1e:67:87:08:b0:18:58:cd:1c:fd:15:6f:c9:
                    58:6a:d7:7b:58:0c:4d:d8:e0:b2:f1:24:9e:ce:43:
                    8e:fe:34:47:2d:7b:bc:ee:a3:9b:e4:6c:fb:e3:2e:
                    12:76:55:c5:f0:13:3d:2f:92:12:28:29:02:5a:71:
                    02:0c:9f:5a:9f:ed:f5:41:6b:6c:1e:56:54:a5:66:
                    0f:54:7a:5c:ac:a6:ef:e6:7f:b5:41:b4:bb:5e:a2:
                    b3:bc:ad:a5:61:f4:03:86:48:b4:ac:14:ab:07:8c:
                    6c:d9:f5:52:b9:15:c0:49:e1:f7:d9:1c:44:e0:88:
                    b5:17:33:39:92:f5:ac:92:2d:ea:4d:67:a8:b7:6b:
                    fc:1f:42:b9:14:7c:b7:ca:6f:07:78:59:fc:71:08:
                    8d:f7:cf:67:b0:7a:9f:a6:5d:6c:4f:21:d0:0b:3f:
                    d1:38:98:84:f8:40:8e:76:98:7c:ec:75:4f:f8:e6:
                    85:b5:fb:31:ab:aa:d2:3c:40:cf:a2:71:90:32:1f:
                    74:62:a8:81:bf:bf:de:11:f8:99:7c:31:df:0a:88:
                    6b:74:59:c0:45:78:b8:d2:3b:05:d5:52:5b:73:ba:
                    5d:a1:81:db:24:21:61:93:1b:18:c9:09:77:fd:9e:
                    80:8f:bb:5a:de:ac:2d:65:68:9f:84:73:cb:46:a5:
                    74:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B8:C5:26:B5:D0:51:FD:63:26:A2:93:13:B8:22:BA:22:C6:D6:C1
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a7jFJrXQUf1jJqKTE7giuiLG1sE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0c:42:fa:06:f9:66:08:47:05:44:bf:c6:75:85:d8:ea:b5:09:
         b4:9b:03:14:58:15:15:84:5b:de:a8:f4:05:c5:ce:31:3a:0e:
         56:ea:8c:bd:fc:84:1f:53:45:16:d6:6c:3a:51:bc:a0:65:54:
         bd:00:76:b1:f0:9b:6d:0e:f7:a5:69:12:b6:81:19:87:58:09:
         a1:4b:79:3c:db:79:a9:a7:06:ac:01:60:e5:2f:e5:b5:40:37:
         fa:14:a1:c7:3c:5c:b4:0c:0d:62:13:ae:22:a8:c1:9e:af:c5:
         e2:b5:5d:1c:3a:f9:2f:ad:89:6e:b5:7f:b3:a2:bc:cb:1c:88:
         2d:3d:87:a0:12:bf:21:52:9f:cc:0e:52:17:95:21:5a:88:30:
         b9:80:e7:85:07:26:03:e6:a3:87:47:72:2f:30:9a:95:ef:1e:
         69:00:77:23:68:f7:3d:fc:5d:e1:dc:21:67:ac:28:37:b3:ce:
         9f:72:3c:ba:d5:57:95:86:bb:97:d4:ef:c7:ee:c2:bf:ee:a6:
         e7:1d:de:3b:da:ca:0b:c8:76:56:40:83:89:fd:ea:ea:01:10:
         28:12:5c:b7:93:47:61:38:bf:75:96:47:18:25:3d:b6:b9:96:
         87:89:38:aa:8e:6f:d6:2b:3c:d7:6c:99:42:d5:cd:51:d5:48:
         e0:fe:e1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----