Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e_bOubho0ZmChnyY00lFyQzy9Eo.roa
File:                     e_bOubho0ZmChnyY00lFyQzy9Eo.roa (raw, json)
Hash identifier:          tbqwbvmZ3+8FuB4WJHjHbZfPpqyXrcGWss8CuQNiEQI=
Subject key identifier:   7B:F6:CE:B9:B8:68:D1:99:82:86:7C:98:D3:49:45:C9:0C:F2:F4:4A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1CC7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e_bOubho0ZmChnyY00lFyQzy9Eo.roa
Signing time:             Wed 29 Sep 2021 02:48:11 +0000
ROA not before:           Wed 29 Sep 2021 02:48:11 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        118.232.78.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7367 (0x1cc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:11 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=7BF6CEB9B868D19982867C98D34945C90CF2F44A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:90:f1:bd:27:bf:26:b3:22:09:32:9d:52:6b:
                    61:bd:92:fe:20:5d:f5:17:51:25:24:9f:2c:cd:41:
                    5b:15:fb:cc:db:27:13:cc:b9:aa:9c:57:f1:33:4b:
                    ac:9b:9b:20:f0:50:b0:04:11:af:54:c2:ce:ad:e1:
                    be:c6:cd:74:fe:6f:59:3e:bc:fa:8b:f6:6a:8e:94:
                    53:ea:14:be:37:68:e7:18:0e:28:b7:20:dd:a2:e0:
                    c6:7d:d0:1e:c3:ea:8b:2b:31:db:63:d8:f5:40:2b:
                    3f:88:6c:02:66:18:ee:73:ac:0f:5c:6a:a4:f9:1a:
                    61:f5:cb:11:aa:9f:78:ee:c8:90:ad:dd:09:c0:7a:
                    fd:bf:f6:da:91:41:b3:b4:77:b4:de:2d:d2:4e:5d:
                    2a:59:eb:b1:12:7f:2a:c7:c0:f9:3a:79:8c:05:51:
                    b0:81:a6:1d:c3:73:3a:2b:6f:1e:20:45:d4:54:04:
                    25:36:a7:33:a6:43:ba:00:74:54:04:ce:1b:d5:e3:
                    01:4e:79:89:49:0c:cf:89:37:27:f8:ad:74:76:a5:
                    0c:64:1b:54:7f:1c:af:e0:77:f1:d7:ea:96:8c:9d:
                    36:cf:ba:ac:8a:ec:7b:26:af:73:0b:dc:32:07:1e:
                    b4:d0:bf:50:2e:2a:ca:45:a2:61:7e:be:a0:d6:99:
                    16:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F6:CE:B9:B8:68:D1:99:82:86:7C:98:D3:49:45:C9:0C:F2:F4:4A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e_bOubho0ZmChnyY00lFyQzy9Eo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:f3:78:1b:e5:ef:fc:1a:0f:df:c1:c6:f1:69:88:bb:ca:be:
         e5:c0:11:c2:36:ab:8c:a3:1a:d9:e2:13:7e:33:6e:a1:c2:6c:
         a9:7b:4f:18:eb:6a:e7:52:b5:83:98:34:a4:9a:18:83:0b:e5:
         de:76:28:9e:b3:a9:3f:87:31:0d:2e:c2:99:f8:b9:75:2b:20:
         9a:cb:e7:79:00:92:df:11:ff:4b:3f:14:d7:26:32:a8:a2:dd:
         f4:94:f8:bb:29:63:0c:7b:39:1e:d2:ab:0d:d1:65:51:d1:5f:
         23:be:bc:9e:45:91:e1:dd:16:60:2c:ca:65:f8:53:37:84:e3:
         56:c7:68:5c:b0:ae:00:a6:1c:65:17:22:19:9d:2b:bd:84:f2:
         d3:20:87:27:38:16:fd:bd:5d:37:7c:a0:38:f2:d6:e6:fb:16:
         9e:fa:54:25:75:8c:90:d6:4b:54:ff:63:e8:83:6e:9c:ea:10:
         39:9c:c4:63:ea:9d:63:97:7b:35:c7:99:b0:95:16:9f:6c:ba:
         b7:d4:64:67:17:c1:ae:2b:a5:a3:f8:85:e4:79:36:ea:0d:fe:
         ff:ea:be:fd:f2:bd:11:ab:ec:a2:be:aa:0e:fd:8e:2d:2d:2d:
         37:9e:e8:bb:0a:47:1a:2d:9c:12:32:69:f3:df:88:bf:0a:7f:
         fc:ab:f5:0c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHMcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ4MTFaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDdCRjZDRUI5Qjg2OEQx
OTk4Mjg2N0M5OEQzNDk0NUM5MENGMkY0NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSkPG9J78msyIJMp1Sa2G9kv4gXfUXUSUknyzNQVsV+8zbJxPM
uaqcV/EzS6ybmyDwULAEEa9Uws6t4b7GzXT+b1k+vPqL9mqOlFPqFL43aOcYDii3
IN2i4MZ90B7D6osrMdtj2PVAKz+IbAJmGO5zrA9caqT5GmH1yxGqn3juyJCt3QnA
ev2/9tqRQbO0d7TeLdJOXSpZ67ESfyrHwPk6eYwFUbCBph3Dczorbx4gRdRUBCU2
pzOmQ7oAdFQEzhvV4wFOeYlJDM+JNyf4rXR2pQxkG1R/HK/gd/HX6paMnTbPuqyK
7Hsmr3ML3DIHHrTQv1AuKspFomF+vqDWmRYPAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUe/bOubho0ZmChnyY00lFyQzy9EowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2VfYk91YmhvMFptQ2hueVkw
MGxGeVF6eTlFby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB2
6E4wDQYJKoZIhvcNAQELBQADggEBABDzeBvl7/waD9/BxvFpiLvKvuXAEcI2q4yj
GtniE34zbqHCbKl7TxjraudStYOYNKSaGIML5d52KJ6zqT+HMQ0uwpn4uXUrIJrL
53kAkt8R/0s/FNcmMqii3fSU+LspYwx7OR7Sqw3RZVHRXyO+vJ5FkeHdFmAsymX4
UzeE41bHaFywrgCmHGUXIhmdK72E8tMghyc4Fv29XTd8oDjy1ub7Fp76VCV1jJDW
S1T/Y+iDbpzqEDmcxGPqnWOXezXHmbCVFp9surfUZGcXwa4rpaP4heR5NuoN/v/q
vv3yvRGr7KK+qg79ji0tLTee6LsKRxotnBIyafPfiL8Kf/yr9Qw=
-----END CERTIFICATE-----