Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eKyl8D-PH-0Stw03baNXYmv9oRk.roa
File:                     eKyl8D-PH-0Stw03baNXYmv9oRk.roa (raw, json)
Hash identifier:          PVBS3W/ti2OiB9E1FP5KJ8hKbececb81/Py/F/BX96I=
Subject key identifier:   78:AC:A5:F0:3F:8F:1F:ED:12:B7:0D:37:6D:A3:57:62:6B:FD:A1:19
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C3C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eKyl8D-PH-0Stw03baNXYmv9oRk.roa
Signing time:             Wed 29 Sep 2021 02:47:30 +0000
ROA not before:           Wed 29 Sep 2021 02:47:30 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.194.40.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7228 (0x1c3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:30 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=78ACA5F03F8F1FED12B70D376DA357626BFDA119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2c:dc:53:7c:95:14:9e:e8:a1:df:03:d0:0c:
                    63:cb:e3:99:ca:7d:50:5c:48:d0:5e:be:48:78:53:
                    5c:71:ec:0f:c0:eb:dd:d0:44:a2:75:c5:14:23:eb:
                    1f:fa:79:cb:46:ba:13:41:93:cd:52:fa:84:ba:cc:
                    00:bd:ed:29:d7:89:e5:52:35:64:4b:f5:e7:d5:52:
                    a2:ee:b7:eb:af:e3:c7:a2:18:00:58:02:54:f3:ed:
                    6e:79:51:37:05:f2:29:00:03:a7:b2:bb:7f:d4:e7:
                    d9:f7:ae:8b:6b:33:6a:88:43:82:80:a9:6b:85:c3:
                    c7:8e:55:7b:bf:48:f8:cd:38:0f:61:52:e2:84:da:
                    f4:de:9f:53:57:36:2c:7a:17:1f:53:b2:48:83:43:
                    9c:bc:f7:c1:65:bb:b8:4c:98:15:23:a7:bd:ec:5d:
                    85:3d:38:d7:ad:58:c7:21:50:bc:ca:40:6f:69:20:
                    28:95:90:85:30:95:1b:85:94:8f:66:0d:e6:c3:46:
                    74:7f:f8:7f:4d:5a:df:29:ec:b1:c6:e7:6a:c5:56:
                    2a:3f:9e:5f:8c:ae:9d:4e:3c:65:30:6c:e0:bb:17:
                    74:3b:23:5f:16:f1:90:42:3b:4a:79:d0:64:ff:94:
                    46:ea:4d:61:fd:0d:2c:1c:0a:12:5b:92:da:f0:08:
                    1b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:AC:A5:F0:3F:8F:1F:ED:12:B7:0D:37:6D:A3:57:62:6B:FD:A1:19
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eKyl8D-PH-0Stw03baNXYmv9oRk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:53:14:26:8f:e4:73:b3:d1:65:42:67:c9:21:65:f9:7c:a4:
         d3:76:d7:bc:6a:41:10:0a:e6:65:04:46:9c:6d:d0:03:ab:09:
         8e:da:b3:61:8a:3a:2f:1e:9e:3d:11:20:82:5b:4e:2b:54:be:
         a9:24:ac:17:69:cd:93:92:a3:ca:9f:de:70:12:74:3e:fe:3e:
         8d:2d:5a:52:9e:67:05:d3:2f:be:79:80:07:bd:ad:be:87:39:
         4f:8c:cc:1f:1b:70:b5:9f:84:de:55:18:61:96:93:a8:71:94:
         20:de:48:8d:60:72:3b:7a:c0:1f:1c:2e:4e:17:f1:56:c9:db:
         08:5d:62:b9:a7:ee:b4:9d:af:e2:41:50:69:69:7e:b9:69:53:
         05:d9:48:ca:69:62:30:a9:e3:3f:0f:1d:3f:37:54:31:4e:66:
         2e:98:af:f9:5c:0f:6d:89:30:0b:a7:d6:dc:77:dd:af:35:42:
         58:ef:81:1b:a9:3b:9c:60:37:98:b0:d7:28:df:43:98:d9:eb:
         d2:08:41:71:da:43:33:cc:df:76:61:de:51:f2:09:06:7f:e1:
         97:8b:83:6a:94:cc:fe:7d:0c:5b:d9:17:21:fe:55:f5:ab:91:
         70:bf:18:a5:ee:1c:30:8d:9e:9d:de:d3:db:1e:42:c6:f4:d8:
         0c:10:ae:3f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHDwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ3MzBaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDc4QUNBNUYwM0Y4RjFG
RUQxMkI3MEQzNzZEQTM1NzYyNkJGREExMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzLNxTfJUUnuih3wPQDGPL45nKfVBcSNBevkh4U1xx7A/A693Q
RKJ1xRQj6x/6ectGuhNBk81S+oS6zAC97SnXieVSNWRL9efVUqLut+uv48eiGABY
AlTz7W55UTcF8ikAA6eyu3/U59n3rotrM2qIQ4KAqWuFw8eOVXu/SPjNOA9hUuKE
2vTen1NXNix6Fx9TskiDQ5y898Flu7hMmBUjp73sXYU9ONetWMchULzKQG9pICiV
kIUwlRuFlI9mDebDRnR/+H9NWt8p7LHG52rFVio/nl+Mrp1OPGUwbOC7F3Q7I18W
8ZBCO0p50GT/lEbqTWH9DSwcChJbktrwCBt1AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUeKyl8D+PH+0Stw03baNXYmv9oRkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2VLeWw4RC1QSC0wU3R3MDNi
YU5YWW12OW9Say5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wigwDQYJKoZIhvcNAQELBQADggEBAChTFCaP5HOz0WVCZ8khZfl8pNN217xqQRAK
5mUERpxt0AOrCY7as2GKOi8enj0RIIJbTitUvqkkrBdpzZOSo8qf3nASdD7+Po0t
WlKeZwXTL755gAe9rb6HOU+MzB8bcLWfhN5VGGGWk6hxlCDeSI1gcjt6wB8cLk4X
8VbJ2whdYrmn7rSdr+JBUGlpfrlpUwXZSMppYjCp4z8PHT83VDFOZi6Yr/lcD22J
MAun1tx33a81QljvgRupO5xgN5iw1yjfQ5jZ69IIQXHaQzPM33Zh3lHyCQZ/4ZeL
g2qUzP59DFvZFyH+VfWrkXC/GKXuHDCNnp3e09seQsb02AwQrj8=
-----END CERTIFICATE-----