Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/awX0CTZ4EiwE5K4TgOEqoJ4RvVM.roa
File:                     awX0CTZ4EiwE5K4TgOEqoJ4RvVM.roa (raw, json)
Hash identifier:          8kq3V5N5ceEAJXSw4tTOpjiSgVtpxU3rzC0v0ymjV5k=
Subject key identifier:   6B:05:F4:09:36:78:12:2C:04:E4:AE:13:80:E1:2A:A0:9E:11:BD:53
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C66
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/awX0CTZ4EiwE5K4TgOEqoJ4RvVM.roa
Signing time:             Wed 29 Sep 2021 02:47:43 +0000
ROA not before:           Wed 29 Sep 2021 02:47:43 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.195.64.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7270 (0x1c66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:43 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=6B05F4093678122C04E4AE1380E12AA09E11BD53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d0:b9:8a:89:5e:8d:18:ea:5c:73:cf:59:bb:
                    b6:87:86:78:e6:59:1b:a3:af:05:32:d4:e1:6b:57:
                    e9:da:9d:fd:4f:38:3f:bc:77:3f:81:0b:ca:ad:c3:
                    aa:79:68:e1:07:ec:49:d5:bc:53:b8:5e:2a:7b:24:
                    a4:1a:00:84:44:7e:51:90:1a:92:0d:d3:9a:66:63:
                    6b:47:e0:f5:72:4a:4d:c1:e5:06:92:19:ff:40:c8:
                    89:4c:ac:f5:e9:72:5e:c5:eb:f0:40:88:a3:33:03:
                    9d:f4:ee:60:29:ab:70:59:83:9e:e5:88:db:b6:45:
                    4b:15:00:9b:4d:23:a8:17:15:50:2a:cb:64:85:39:
                    81:b1:ef:5f:9e:4e:02:28:25:0b:2a:42:89:ee:96:
                    db:3e:b0:e6:36:0d:41:b0:9c:99:15:f5:bf:08:b0:
                    b9:b1:0c:0c:ca:d9:3f:8f:c5:9e:17:fd:32:f3:3f:
                    be:16:f9:6e:ed:e1:81:e0:d2:0f:14:2f:f4:2b:da:
                    83:51:ce:99:00:d2:4b:32:d0:84:f8:c4:19:0e:c6:
                    20:94:24:fe:1d:40:42:2e:62:b9:80:f8:f5:54:68:
                    0b:ab:80:b4:99:d3:5a:d5:ae:e2:a1:d7:66:e4:90:
                    43:c1:21:aa:b6:59:ea:4f:b9:fb:cc:bb:4b:10:00:
                    9b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:05:F4:09:36:78:12:2C:04:E4:AE:13:80:E1:2A:A0:9E:11:BD:53
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/awX0CTZ4EiwE5K4TgOEqoJ4RvVM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         66:e2:57:58:a5:b4:03:05:26:a5:8a:9a:21:4a:86:fb:f6:d7:
         ab:c6:70:2b:ff:23:af:cf:1e:cc:0d:60:3b:72:28:83:aa:ac:
         5d:0b:4f:c1:aa:a2:a9:55:6c:c1:42:90:29:6e:d4:7c:5d:61:
         cf:4e:18:d0:0d:80:83:77:aa:09:1d:cc:a5:1a:57:f1:1d:6d:
         3b:e5:34:d5:8f:90:ae:b4:01:2d:25:0a:ba:04:a3:6f:04:1f:
         2a:27:d1:b9:31:da:2d:8f:c6:3b:27:0d:32:40:d4:94:2a:a8:
         f4:0f:ef:0d:0c:b2:c6:6f:d4:92:c8:7e:ba:a6:31:35:01:74:
         8f:34:70:bc:70:2c:fc:ca:e3:35:6f:7b:17:c7:05:bd:14:e2:
         2f:7f:a2:49:bd:0c:38:74:18:a7:1f:b7:8c:35:34:e5:f7:9e:
         9f:93:38:e1:19:fe:ed:9c:b7:6c:b5:fb:49:b2:56:83:72:3f:
         ed:60:fb:fa:0c:ca:91:f5:ac:a9:9b:6e:b0:bf:fb:d0:c2:fb:
         3b:9b:93:2f:a3:d9:7a:0d:f0:cf:53:df:9f:89:aa:4c:fe:f7:
         6f:00:9e:ae:b7:d4:b6:d8:04:13:1b:de:1a:00:42:92:56:68:
         f7:7a:02:ba:67:f5:35:1b:c1:fb:6a:00:37:4e:54:e2:b8:62:
         f1:c9:99:5c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHGYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ3NDNaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDZCMDVGNDA5MzY3ODEy
MkMwNEU0QUUxMzgwRTEyQUEwOUUxMUJENTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCd0LmKiV6NGOpcc89Zu7aHhnjmWRujrwUy1OFrV+nanf1POD+8
dz+BC8qtw6p5aOEH7EnVvFO4Xip7JKQaAIREflGQGpIN05pmY2tH4PVySk3B5QaS
Gf9AyIlMrPXpcl7F6/BAiKMzA5307mApq3BZg57liNu2RUsVAJtNI6gXFVAqy2SF
OYGx71+eTgIoJQsqQonults+sOY2DUGwnJkV9b8IsLmxDAzK2T+PxZ4X/TLzP74W
+W7t4YHg0g8UL/Qr2oNRzpkA0ksy0IT4xBkOxiCUJP4dQEIuYrmA+PVUaAurgLSZ
01rVruKh12bkkEPBIaq2WepPufvMu0sQAJvdAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUawX0CTZ4EiwE5K4TgOEqoJ4RvVMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2F3WDBDVFo0RWl3RTVLNFRn
T0Vxb0o0UnZWTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
w0AwDQYJKoZIhvcNAQELBQADggEBAGbiV1iltAMFJqWKmiFKhvv216vGcCv/I6/P
HswNYDtyKIOqrF0LT8GqoqlVbMFCkClu1HxdYc9OGNANgIN3qgkdzKUaV/EdbTvl
NNWPkK60AS0lCroEo28EHyon0bkx2i2PxjsnDTJA1JQqqPQP7w0MssZv1JLIfrqm
MTUBdI80cLxwLPzK4zVvexfHBb0U4i9/okm9DDh0GKcft4w1NOX3np+TOOEZ/u2c
t2y1+0myVoNyP+1g+/oMypH1rKmbbrC/+9DC+zubky+j2XoN8M9T35+Jqkz+928A
nq631LbYBBMb3hoAQpJWaPd6Arpn9TUbwftqADdOVOK4YvHJmVw=
-----END CERTIFICATE-----