Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b887vvw3g6o-3lxNPPEKVn9j6RI.roa
File:                     b887vvw3g6o-3lxNPPEKVn9j6RI.roa (raw, json)
Hash identifier:          58r7/Esi71bzPU7m2N1WcJ0KTA7LilMG+x/PS2em5XY=
Subject key identifier:   6F:CF:3B:BE:FC:37:83:AA:3E:DE:5C:4D:3C:F1:0A:56:7F:63:E9:12
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D63
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b887vvw3g6o-3lxNPPEKVn9j6RI.roa
Signing time:             Tue 29 Sep 2020 09:54:30 +0000
ROA not before:           Tue 29 Sep 2020 09:54:30 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.192.108.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3427 (0xd63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:30 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6FCF3BBEFC3783AA3EDE5C4D3CF10A567F63E912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:41:85:3e:c7:32:00:fc:80:d4:c3:dd:13:5b:
                    58:5c:f7:3e:9f:0c:12:97:16:a2:08:27:48:cb:fc:
                    88:f0:e6:8d:0f:ac:00:d4:35:87:ee:15:40:ac:60:
                    58:f4:ab:c9:17:b3:93:d3:2e:69:b1:ed:17:78:5d:
                    3a:13:00:98:c5:7e:3a:c1:d7:a9:09:c7:a2:4a:01:
                    18:a0:20:07:ae:6f:50:8f:f8:e7:f2:9d:67:3c:81:
                    cb:ab:ae:75:5b:51:4d:15:bb:14:40:85:98:c7:23:
                    f7:a3:ba:a1:80:14:f8:19:21:e5:a1:83:9f:d7:1c:
                    20:f4:94:88:7b:64:76:f7:84:c5:a6:fe:95:8a:9f:
                    39:69:cd:6a:a2:43:91:24:32:7b:18:1f:5e:29:06:
                    df:33:5c:29:e1:d1:36:e0:20:7f:4d:65:4f:94:0d:
                    08:5b:97:86:0f:6f:ca:30:8c:84:e6:0f:3a:ef:19:
                    76:8e:11:c7:ae:32:11:66:a6:ce:dd:96:d5:cb:75:
                    9b:de:d6:8c:ea:87:dd:50:ad:33:c8:2c:05:1f:7d:
                    5d:4a:84:9d:02:53:87:65:da:a8:28:3e:b9:3d:7e:
                    67:c2:53:b1:c4:c1:90:59:02:8f:e5:af:0a:69:a7:
                    57:3f:8c:ac:a4:72:6e:c3:59:8e:f5:46:93:8e:cb:
                    64:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:CF:3B:BE:FC:37:83:AA:3E:DE:5C:4D:3C:F1:0A:56:7F:63:E9:12
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b887vvw3g6o-3lxNPPEKVn9j6RI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:09:35:d1:ca:a1:83:c5:0f:db:8b:8a:7e:05:a1:54:56:04:
         eb:de:b7:de:b3:6f:41:0b:9f:4c:3f:cc:65:91:88:dd:59:56:
         44:9d:f9:75:79:36:94:3b:79:93:c7:f8:6a:b8:c3:a8:80:f5:
         d3:de:bd:2f:a6:61:bd:2b:f5:3f:94:3c:24:fb:9e:8d:b9:d9:
         b4:3e:64:4f:86:4d:61:42:a3:11:a8:08:e0:b2:c8:a2:a6:77:
         e2:4c:e0:a7:3e:23:91:d2:5f:d4:4b:bd:98:87:16:9c:77:78:
         97:5f:45:2f:18:cb:67:37:cb:a2:16:a9:1b:f9:f3:53:64:f7:
         6b:89:08:d4:fa:39:3e:24:dd:17:b6:e4:76:70:07:42:8f:11:
         ba:f2:fa:7c:95:a9:45:6d:26:54:bd:f4:1b:8b:b1:c8:9f:12:
         cb:c6:5b:2c:e4:44:37:e4:24:50:d9:22:74:ea:38:8c:44:10:
         bc:fd:1f:90:82:a4:12:68:a7:ea:e9:26:75:f2:d1:6d:59:0a:
         27:a5:e0:6f:70:95:02:4a:d7:8f:60:6c:8b:80:cb:97:11:d9:
         e7:32:c9:bf:70:34:cb:ac:15:1e:90:e5:8f:63:c3:80:c5:62:
         36:b1:5a:e4:16:14:9f:3d:3b:4f:44:9b:d3:cb:0b:53:2c:54:
         cd:a8:53:c7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDWMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU0MzBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDZGQ0YzQkJFRkMzNzgz
QUEzRURFNUM0RDNDRjEwQTU2N0Y2M0U5MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/QYU+xzIA/IDUw90TW1hc9z6fDBKXFqIIJ0jL/Ijw5o0PrADU
NYfuFUCsYFj0q8kXs5PTLmmx7Rd4XToTAJjFfjrB16kJx6JKARigIAeub1CP+Ofy
nWc8gcurrnVbUU0VuxRAhZjHI/ejuqGAFPgZIeWhg5/XHCD0lIh7ZHb3hMWm/pWK
nzlpzWqiQ5EkMnsYH14pBt8zXCnh0TbgIH9NZU+UDQhbl4YPb8owjITmDzrvGXaO
EceuMhFmps7dltXLdZve1ozqh91QrTPILAUffV1KhJ0CU4dl2qgoPrk9fmfCU7HE
wZBZAo/lrwppp1c/jKykcm7DWY71RpOOy2QZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUb887vvw3g6o+3lxNPPEKVn9j6RIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2I4ODd2dnczZzZvLTNseE5Q
UEVLVm45ajZSSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wGwwDQYJKoZIhvcNAQELBQADggEBAIoJNdHKoYPFD9uLin4FoVRWBOvet96zb0EL
n0w/zGWRiN1ZVkSd+XV5NpQ7eZPH+Gq4w6iA9dPevS+mYb0r9T+UPCT7no252bQ+
ZE+GTWFCoxGoCOCyyKKmd+JM4Kc+I5HSX9RLvZiHFpx3eJdfRS8Yy2c3y6IWqRv5
81Nk92uJCNT6OT4k3Re25HZwB0KPEbry+nyVqUVtJlS99BuLscifEsvGWyzkRDfk
JFDZInTqOIxEELz9H5CCpBJop+rpJnXy0W1ZCiel4G9wlQJK149gbIuAy5cR2ecy
yb9wNMusFR6Q5Y9jw4DFYjaxWuQWFJ89O09Em9PLC1MsVM2oU8c=
-----END CERTIFICATE-----