Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/amOycmmyZupB4qsnKMo6-p2UBgQ.roa
File:                     amOycmmyZupB4qsnKMo6-p2UBgQ.roa (raw, json)
Hash identifier:          ZuOssGvYTLsbJPawKA5jzteLfBQJlai5UGQcCXyqbrE=
Subject key identifier:   6A:63:B2:72:69:B2:66:EA:41:E2:AB:27:28:CA:3A:FA:9D:94:06:04
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E1B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/amOycmmyZupB4qsnKMo6-p2UBgQ.roa
Signing time:             Tue 29 Sep 2020 09:55:21 +0000
ROA not before:           Tue 29 Sep 2020 09:55:21 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.16.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3611 (0xe1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:21 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6A63B27269B266EA41E2AB2728CA3AFA9D940604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6b:05:e5:5a:93:c7:f6:37:ba:a0:e8:e7:9f:
                    36:c2:1a:2e:24:a3:39:6e:24:6a:36:16:a7:2a:56:
                    c3:bf:3f:9c:ed:a3:68:46:3f:4a:2f:1b:18:27:a9:
                    75:59:61:17:c2:e0:69:53:81:26:41:98:aa:35:63:
                    6f:6a:82:61:e6:8f:81:93:72:d1:4d:2e:46:4c:ae:
                    78:3b:a0:45:82:54:c6:4d:64:e7:46:ff:3d:fe:74:
                    1b:ed:9f:6b:76:37:0c:0f:33:d0:e1:59:05:ff:bf:
                    fd:b9:b2:b4:97:ed:9d:1f:c4:29:af:c7:f6:7d:cb:
                    e3:dd:47:5e:93:85:42:dd:a5:20:0a:73:c5:0d:f5:
                    f7:e0:70:19:58:84:ed:c2:db:1c:44:59:84:7d:2d:
                    59:47:22:50:72:ba:9e:38:5f:66:19:fc:9a:6e:1d:
                    72:cf:f6:77:22:18:2d:44:22:09:c8:16:f8:13:d4:
                    ea:54:b1:49:5e:9c:16:b2:c0:82:cb:9c:8b:04:f5:
                    6d:3f:c6:00:5a:7d:25:8e:e3:c3:21:03:96:4a:91:
                    3a:0d:41:49:f8:e3:98:cf:cd:27:34:42:e5:0c:88:
                    df:7a:c2:8c:53:ee:aa:e2:38:33:59:8b:42:fb:03:
                    a4:24:c6:b1:b9:dd:7e:71:f3:17:90:98:2c:2c:8c:
                    68:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:63:B2:72:69:B2:66:EA:41:E2:AB:27:28:CA:3A:FA:9D:94:06:04
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/amOycmmyZupB4qsnKMo6-p2UBgQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:67:cd:b5:19:08:2b:c9:8d:12:56:35:2b:48:4d:02:22:3a:
         9a:6f:a3:7d:35:e3:e7:57:ec:d7:d5:5e:47:0b:8a:bc:42:1c:
         9e:c2:3b:f0:96:bd:d4:c7:82:74:6a:03:70:97:ba:97:63:37:
         be:3e:34:b7:4a:52:52:0f:55:3c:6a:fb:44:b8:27:a6:37:83:
         3b:c6:5a:8e:85:5d:3b:17:d8:c5:3a:74:a1:c0:a8:97:93:19:
         55:4e:bd:a8:b8:2d:8f:fa:1d:14:6c:7e:49:50:4b:b2:81:05:
         df:bb:64:e9:41:09:f5:26:64:51:7f:30:a4:3c:da:1e:5f:32:
         0b:47:35:a3:40:74:d9:66:57:6d:40:fd:82:8a:b3:a2:a4:b3:
         dd:21:19:2a:02:56:e3:8f:c6:17:76:1c:2d:82:f4:16:3f:aa:
         b7:d8:10:3d:0b:95:62:4b:d2:a6:8e:ea:f2:36:6c:40:29:82:
         1f:98:83:52:3d:3f:84:db:41:4c:8d:50:45:29:5e:78:c7:08:
         3a:8d:9c:24:5b:cc:63:df:eb:90:72:80:50:f9:24:69:bb:e8:
         f4:0e:b4:fe:e2:88:25:68:57:8a:e7:b0:2a:c0:f2:71:3b:92:
         f1:48:87:6a:51:24:8d:9f:0d:32:64:88:1e:2a:cd:c2:26:60:
         2d:84:b0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----