Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b7z1iCBw21tIaVkds9KWfQ5jo5M.roa
File:                     b7z1iCBw21tIaVkds9KWfQ5jo5M.roa (raw, json)
Hash identifier:          IpeMRWXPJkvg57aYSFROUQbf20XTfzrXQfWP8qpVu/4=
Subject key identifier:   6F:BC:F5:88:20:70:DB:5B:48:69:59:1D:B3:D2:96:7D:0E:63:A3:93
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D3F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b7z1iCBw21tIaVkds9KWfQ5jo5M.roa
Signing time:             Tue 29 Sep 2020 09:54:21 +0000
ROA not before:           Tue 29 Sep 2020 09:54:21 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.112.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3391 (0xd3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:21 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6FBCF5882070DB5B4869591DB3D2967D0E63A393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e5:e1:d5:cd:ba:38:7c:25:62:9d:c8:f2:c1:
                    60:91:0c:75:31:9f:a8:c9:f1:45:e8:a5:02:8b:4e:
                    98:2b:1c:b4:80:93:e4:25:b8:d7:70:80:bd:67:57:
                    74:39:eb:8d:9b:c8:cf:62:11:41:57:9b:e9:ff:48:
                    bc:d7:82:85:42:7f:f1:6b:27:fa:2e:a7:41:b5:fd:
                    a1:fa:74:cb:c0:8d:2e:35:64:2e:f3:bb:17:86:89:
                    39:89:f3:2d:12:92:c5:db:78:d8:a3:7d:ca:5d:4d:
                    7a:89:0d:fd:8a:4a:8a:ba:7f:33:c6:f5:a5:19:64:
                    07:6f:71:52:11:f5:40:b0:a5:7a:ae:16:06:c1:43:
                    8c:0a:7f:0c:ab:ce:5b:f4:2a:7f:67:f5:cc:aa:b8:
                    bd:20:e0:de:df:7c:2d:6a:d7:35:69:e4:2f:7f:81:
                    17:33:57:f7:18:d7:a7:33:1a:fc:98:81:f5:42:92:
                    ac:73:43:b8:46:6d:11:ca:ea:b6:14:de:b9:ec:4e:
                    8b:03:56:5e:20:2a:f8:c9:8d:19:e1:06:84:24:a9:
                    b9:5c:ab:6c:d8:d1:7f:75:8a:d6:3d:c2:1a:a9:1f:
                    ca:eb:4a:a1:b4:23:bd:25:4e:ef:63:76:c8:02:21:
                    b4:ee:e5:d5:71:8f:39:11:cd:e8:e5:41:fe:1f:4c:
                    97:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BC:F5:88:20:70:DB:5B:48:69:59:1D:B3:D2:96:7D:0E:63:A3:93
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b7z1iCBw21tIaVkds9KWfQ5jo5M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         92:d2:09:54:28:0b:4e:56:96:33:28:67:71:1f:4b:b5:47:1e:
         f9:f6:9c:1b:b1:af:b0:c9:22:a8:19:56:ca:d9:84:12:33:09:
         a6:df:1c:a1:4a:1b:fc:b6:25:f2:c5:0a:55:88:ed:ba:1b:5b:
         24:0f:d4:8f:5f:5a:35:e6:1f:d6:69:4d:42:f3:81:72:6b:b0:
         da:4d:ef:67:53:19:83:6d:10:be:20:61:f5:fa:30:10:13:26:
         0a:88:bd:d5:38:5d:96:9d:7d:4a:bf:d5:0e:1e:1a:60:28:91:
         44:53:c8:7a:9b:d5:16:42:20:89:b6:3e:e9:ea:c9:15:d2:49:
         04:61:e2:ff:44:2e:ef:be:9b:02:a7:91:3e:d4:26:a3:6d:3f:
         c2:ec:61:f0:1a:24:f8:29:55:83:c9:c1:c7:54:ff:8d:81:b3:
         1d:f0:a7:b6:53:69:67:fd:4c:5d:ec:15:68:4a:68:0b:ad:0d:
         10:a2:76:37:20:0d:46:53:2e:a5:44:0e:f8:58:f1:15:ee:6f:
         2d:56:dc:99:8c:a0:53:5d:13:59:3a:3d:26:1a:05:b5:bc:96:
         cb:6f:87:b3:5c:68:a3:89:65:f5:09:6b:3a:b4:72:97:c0:7f:
         47:58:1d:8f:85:d3:ac:65:c0:38:32:3c:12:e8:d6:1d:0f:8c:
         3a:3a:20:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----