Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eKG6F-ITDCkEjLOswxcXZgVSW8k.roa
File:                     eKG6F-ITDCkEjLOswxcXZgVSW8k.roa (raw, json)
Hash identifier:          SyrGvvmxa00CMDMY2jlxsKFN7TfCvlFPglR04f5sj3s=
Subject key identifier:   78:A1:BA:17:E2:13:0C:29:04:8C:B3:AC:C3:17:17:66:05:52:5B:C9
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E02
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eKG6F-ITDCkEjLOswxcXZgVSW8k.roa
Signing time:             Tue 29 Sep 2020 09:55:14 +0000
ROA not before:           Tue 29 Sep 2020 09:55:14 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.192.168.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3586 (0xe02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:14 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=78A1BA17E2130C29048CB3ACC317176605525BC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:28:ae:8b:c3:56:4a:b8:cb:80:a3:d7:79:73:
                    18:a5:7b:55:d2:c1:3e:b4:c9:14:48:89:76:a8:f5:
                    96:5e:b0:06:48:54:fa:51:4b:c1:e9:a3:17:7f:1b:
                    41:d8:bb:39:f6:ea:90:4b:31:84:e4:ad:a3:b6:b9:
                    e5:47:ab:d5:2f:b3:32:82:13:ff:ca:61:83:b5:a8:
                    7b:81:e9:a3:4b:43:22:c6:ca:e5:64:84:84:a6:e1:
                    79:d1:0d:0f:f7:9c:1f:c0:99:76:e0:69:06:40:25:
                    d8:26:eb:75:92:82:98:8e:97:9d:ec:f4:07:0d:b1:
                    00:b2:09:0a:df:8d:ad:33:49:94:1c:a6:08:28:5e:
                    2b:60:84:d0:82:96:a1:51:3b:2c:2e:8e:d7:f6:21:
                    ea:07:62:ea:84:3a:e3:0d:0c:e4:9d:d5:5f:41:40:
                    0e:06:a3:64:e0:a3:08:75:c9:fc:4a:4b:40:b0:61:
                    5c:11:28:2e:f4:1a:a9:e8:5e:16:6e:23:54:16:d8:
                    d2:bf:ac:dc:a2:5e:24:83:4b:3a:a3:48:99:0e:7c:
                    5c:43:b5:37:18:12:2a:f1:73:a8:75:f8:41:5b:11:
                    ce:04:84:11:4f:3a:7f:4c:61:42:7c:e2:29:a9:ee:
                    f8:07:de:9f:97:68:3c:da:30:19:ee:3e:fa:b9:2a:
                    22:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A1:BA:17:E2:13:0C:29:04:8C:B3:AC:C3:17:17:66:05:52:5B:C9
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eKG6F-ITDCkEjLOswxcXZgVSW8k.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:3d:e5:ad:f9:aa:80:f6:38:76:70:e9:43:c9:d4:7f:24:b4:
         f6:b0:52:cc:7a:c3:64:b4:bc:12:a5:3e:4b:ef:56:b6:e8:9d:
         f9:08:6e:b7:14:49:2a:70:7d:72:a7:b0:a4:75:38:a3:d9:73:
         91:a1:d6:3f:b6:da:6b:75:e8:0b:57:e8:d0:7a:4e:3d:34:2a:
         17:fc:4b:db:71:ad:94:a9:21:72:f2:dc:2c:d6:22:da:a8:08:
         84:53:e9:33:5f:90:2a:9b:26:e4:3d:18:8a:b7:18:e7:71:77:
         02:66:99:ad:89:0b:17:b8:29:42:a7:19:f9:e4:da:7d:c4:25:
         27:07:d6:54:4e:27:4a:50:d4:24:35:9d:da:cc:71:b9:94:ed:
         5f:19:7d:21:bb:14:8c:e8:be:69:07:ff:5e:99:7c:6d:ca:6e:
         f8:19:01:6b:d9:41:8c:60:93:78:0f:97:3f:b6:74:f2:f1:9d:
         a9:21:0a:5b:73:bb:ac:b5:3c:e8:b4:82:80:42:8a:29:f5:f2:
         69:68:89:0a:2f:5b:62:65:ab:72:72:68:6d:27:3c:56:b6:0b:
         9b:b9:c7:34:d7:80:ff:ce:88:69:4d:32:43:7b:1b:3c:fa:a0:
         70:bd:cb:ba:7e:83:01:ef:5b:4d:be:2d:22:2f:1a:8e:bd:25:
         11:3b:4d:53
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDgIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU1MTRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDc4QTFCQTE3RTIxMzBD
MjkwNDhDQjNBQ0MzMTcxNzY2MDU1MjVCQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4KK6Lw1ZKuMuAo9d5cxile1XSwT60yRRIiXao9ZZesAZIVPpR
S8Hpoxd/G0HYuzn26pBLMYTkraO2ueVHq9UvszKCE//KYYO1qHuB6aNLQyLGyuVk
hISm4XnRDQ/3nB/AmXbgaQZAJdgm63WSgpiOl53s9AcNsQCyCQrfja0zSZQcpggo
XitghNCClqFROywujtf2IeoHYuqEOuMNDOSd1V9BQA4Go2Tgowh1yfxKS0CwYVwR
KC70GqnoXhZuI1QW2NK/rNyiXiSDSzqjSJkOfFxDtTcYEirxc6h1+EFbEc4EhBFP
On9MYUJ84imp7vgH3p+XaDzaMBnuPvq5KiKxAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUeKG6F+ITDCkEjLOswxcXZgVSW8kwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2VLRzZGLUlURENrRWpMT3N3
eGNYWmdWU1c4ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wKgwDQYJKoZIhvcNAQELBQADggEBABk95a35qoD2OHZw6UPJ1H8ktPawUsx6w2S0
vBKlPkvvVrbonfkIbrcUSSpwfXKnsKR1OKPZc5Gh1j+22mt16AtX6NB6Tj00Khf8
S9txrZSpIXLy3CzWItqoCIRT6TNfkCqbJuQ9GIq3GOdxdwJmma2JCxe4KUKnGfnk
2n3EJScH1lROJ0pQ1CQ1ndrMcbmU7V8ZfSG7FIzovmkH/16ZfG3KbvgZAWvZQYxg
k3gPlz+2dPLxnakhCltzu6y1POi0goBCiin18mloiQovW2Jlq3JyaG0nPFa2C5u5
xzTXgP/OiGlNMkN7Gzz6oHC9y7p+gwHvW02+LSIvGo69JRE7TVM=
-----END CERTIFICATE-----