Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b5JmcP5oqRVedY1TX3sKUeBRWPY.roa
File:                     b5JmcP5oqRVedY1TX3sKUeBRWPY.roa (raw, json)
Hash identifier:          dqqDCGqQQsk7cXDEyb1nrKzJFPIr0tcLk3l9ScdakgA=
Subject key identifier:   6F:92:66:70:FE:68:A9:15:5E:75:8D:53:5F:7B:0A:51:E0:51:58:F6
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1BAA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b5JmcP5oqRVedY1TX3sKUeBRWPY.roa
Signing time:             Wed 29 Sep 2021 02:46:51 +0000
ROA not before:           Wed 29 Sep 2021 02:46:51 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.195.216.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7082 (0x1baa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:51 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=6F926670FE68A9155E758D535F7B0A51E05158F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fe:97:c7:86:70:90:a4:11:a9:7c:86:4d:b0:
                    38:50:2f:c1:d6:ba:3b:7c:0c:3b:b8:0e:70:3b:bf:
                    be:27:7a:34:e0:98:6d:b6:09:6c:01:04:60:58:5b:
                    6b:72:48:77:6b:dc:2d:59:7a:27:cd:d6:b5:b9:2e:
                    5e:62:be:6b:79:b2:fa:c0:a3:2e:56:42:6c:21:df:
                    02:93:53:d3:23:52:5d:c2:14:da:a4:82:43:65:ed:
                    4a:11:78:e4:39:de:d2:1c:94:25:ad:25:19:49:33:
                    0a:12:97:dd:29:21:20:a0:dd:f2:c3:7a:5f:b7:e9:
                    87:ac:67:14:4f:1a:01:c5:d7:7a:a9:8f:2c:fd:06:
                    cb:a4:88:63:ac:0d:f6:12:bf:ac:ec:84:d3:1b:db:
                    16:52:70:df:ed:92:d0:f3:a2:42:16:6a:45:c6:2e:
                    89:bd:3d:79:f7:74:b0:f4:88:77:01:21:37:e3:36:
                    1d:b7:55:2e:cb:81:5a:e1:b3:35:b5:7d:68:1e:73:
                    8c:2b:97:03:f6:60:2d:3d:ec:52:d7:5c:17:55:4e:
                    c7:28:90:f8:42:7b:bf:6d:ea:0f:b1:cf:ec:17:83:
                    1e:b8:08:c4:ba:54:bf:d8:8b:14:82:72:d4:48:78:
                    6b:df:8a:2a:5d:b3:5d:20:a4:7e:26:e4:a7:46:83:
                    ca:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:92:66:70:FE:68:A9:15:5E:75:8D:53:5F:7B:0A:51:E0:51:58:F6
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b5JmcP5oqRVedY1TX3sKUeBRWPY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         74:7d:a8:9c:c2:72:3d:2f:e3:b5:fd:b1:40:71:16:d5:3f:32:
         f7:1e:11:a5:7c:9b:aa:94:7e:a8:30:68:38:6a:a0:c3:02:4f:
         1e:93:33:97:91:7c:89:03:51:0d:54:41:c1:13:93:e2:d5:7f:
         7e:78:b2:3f:e3:fd:5d:4f:ef:b9:d8:15:d1:24:3b:2b:c5:d7:
         f1:af:3b:9f:72:9d:df:92:d0:ee:70:8a:47:c5:27:13:87:a6:
         32:e6:4c:fc:03:ba:b2:6c:7e:1b:b2:46:70:50:93:90:28:a2:
         03:f6:14:52:2f:0d:a9:11:9a:10:4b:58:1a:62:10:6f:b9:1d:
         b0:04:a4:4c:c5:28:f5:d6:8a:9d:b5:43:97:19:c4:8b:ae:f6:
         20:a5:79:e1:4a:e2:d2:de:85:62:df:6c:3f:21:91:3a:a8:56:
         f5:aa:02:e2:07:60:24:e0:a3:48:0c:55:07:31:89:98:f2:80:
         13:ee:aa:20:89:e1:25:1e:13:d3:5a:b9:8e:70:ed:76:91:dc:
         6b:0f:e7:59:ab:6a:1c:e8:85:69:e1:43:54:f1:45:26:eb:55:
         dc:c2:85:a8:72:2f:df:8e:09:e8:4f:db:26:53:a0:41:6c:0c:
         87:9b:2e:3c:33:ed:86:09:e0:4d:9f:06:b3:fe:67:5a:25:88:
         ad:fa:03:8e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICG6owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ2NTFaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDZGOTI2NjcwRkU2OEE5
MTU1RTc1OEQ1MzVGN0IwQTUxRTA1MTU4RjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDG/pfHhnCQpBGpfIZNsDhQL8HWujt8DDu4DnA7v74nejTgmG22
CWwBBGBYW2tySHdr3C1ZeifN1rW5Ll5ivmt5svrAoy5WQmwh3wKTU9MjUl3CFNqk
gkNl7UoReOQ53tIclCWtJRlJMwoSl90pISCg3fLDel+36YesZxRPGgHF13qpjyz9
BsukiGOsDfYSv6zshNMb2xZScN/tktDzokIWakXGLom9PXn3dLD0iHcBITfjNh23
VS7LgVrhszW1fWgec4wrlwP2YC097FLXXBdVTscokPhCe79t6g+xz+wXgx64CMS6
VL/YixSCctRIeGvfiipds10gpH4m5KdGg8oHAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUb5JmcP5oqRVedY1TX3sKUeBRWPYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2I1Sm1jUDVvcVJWZWRZMVRY
M3NLVWVCUldQWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
w9gwDQYJKoZIhvcNAQELBQADggEBAHR9qJzCcj0v47X9sUBxFtU/MvceEaV8m6qU
fqgwaDhqoMMCTx6TM5eRfIkDUQ1UQcETk+LVf354sj/j/V1P77nYFdEkOyvF1/Gv
O59ynd+S0O5wikfFJxOHpjLmTPwDurJsfhuyRnBQk5AoogP2FFIvDakRmhBLWBpi
EG+5HbAEpEzFKPXWip21Q5cZxIuu9iCleeFK4tLehWLfbD8hkTqoVvWqAuIHYCTg
o0gMVQcxiZjygBPuqiCJ4SUeE9NauY5w7XaR3GsP51mrahzohWnhQ1TxRSbrVdzC
hahyL9+OCehP2yZToEFsDIebLjwz7YYJ4E2fBrP+Z1oliK36A44=
-----END CERTIFICATE-----