Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fCI0tAIkiQL5HcAnpM_uTWcgpNk.roa
File:                     fCI0tAIkiQL5HcAnpM_uTWcgpNk.roa (raw, json)
Hash identifier:          HhWhpHBGL+DC79t3sqtR71bC7HvMNYCgpfn9Ev9ngnc=
Subject key identifier:   7C:22:34:B4:02:24:89:02:F9:1D:C0:27:A4:CF:EE:4D:67:20:A4:D9
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1ED1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fCI0tAIkiQL5HcAnpM_uTWcgpNk.roa
Signing time:             Thu 26 May 2022 03:29:16 +0000
ROA not before:           Thu 26 May 2022 03:29:16 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.194.64.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7889 (0x1ed1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: May 26 03:29:16 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=7C2234B402248902F91DC027A4CFEE4D6720A4D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a4:db:c8:3e:d4:8a:38:01:19:85:74:89:33:
                    46:66:61:1f:a3:d2:f5:79:e6:78:9e:f9:ba:77:c3:
                    03:ab:d6:9d:16:46:51:9b:c2:42:12:35:01:32:68:
                    f1:4c:57:d0:e3:af:05:7b:66:9f:3a:13:c6:db:1f:
                    4e:05:a7:bd:64:32:a9:c8:be:06:23:23:35:96:6a:
                    f4:de:6c:e1:40:f5:8a:f6:1e:0c:a3:24:c8:cf:54:
                    25:86:26:14:4f:f3:d1:c4:9b:e7:f6:1f:68:9a:6a:
                    a3:9f:70:95:57:c9:d0:cc:fd:f7:6c:b3:e2:5f:c9:
                    8d:af:3b:b1:9f:0c:a7:13:77:97:8d:31:e8:6a:31:
                    de:7a:5a:5b:01:08:bf:e8:7e:b6:7f:48:cb:a2:d6:
                    d7:61:69:42:85:ed:6b:6e:78:67:e5:a5:bd:4d:5e:
                    c4:25:55:af:09:a2:ea:7c:bc:07:30:01:7c:ea:aa:
                    89:f9:bc:b7:5b:09:2d:56:61:83:3a:59:73:18:37:
                    d3:f7:47:90:74:37:1d:61:cf:12:bb:22:a0:de:57:
                    07:d9:61:61:58:4e:77:b5:f6:5b:c4:82:59:04:cc:
                    91:a6:5a:67:aa:b9:2e:b0:81:aa:d9:50:f0:78:a8:
                    a1:db:1c:34:bb:de:4d:f7:3f:e9:6c:c3:91:6a:dc:
                    9b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:22:34:B4:02:24:89:02:F9:1D:C0:27:A4:CF:EE:4D:67:20:A4:D9
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fCI0tAIkiQL5HcAnpM_uTWcgpNk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         04:bd:18:3e:96:5f:79:49:a8:66:25:40:65:9a:e9:8e:1d:dd:
         d6:bc:d5:0d:7a:ff:d4:d7:09:df:04:4f:f6:79:fe:e4:98:b7:
         e6:f4:c4:e1:1b:67:cb:86:3c:fb:af:62:d8:60:55:10:b6:4e:
         dd:44:61:09:6b:21:b9:92:53:0a:2f:a3:9d:bf:a4:e3:b6:da:
         aa:9a:03:ad:b5:5c:fe:ca:1f:b7:7b:95:a0:6a:fd:4e:24:5c:
         13:d8:2b:e3:30:f8:3d:2a:8b:29:5e:ae:8e:cb:c0:b5:df:62:
         b5:b1:bd:31:9e:1e:16:ab:e7:2b:86:7a:68:02:e9:20:77:ed:
         bf:04:87:b1:4b:aa:ec:57:9c:0b:34:5d:d3:ba:3d:7b:7b:f8:
         2d:3d:f5:50:a6:8b:ea:8a:20:16:15:57:fc:8b:1b:ed:67:48:
         2f:1a:00:85:5a:32:b9:91:c3:50:1d:ff:34:82:a6:5f:76:0b:
         70:4a:2c:a1:c3:3e:a2:70:05:a2:c1:0c:9e:6c:f7:2d:d1:f8:
         f9:62:32:c4:83:b2:0f:9c:f2:35:35:33:d0:9f:ae:d1:fb:d3:
         6c:75:30:d6:65:69:28:5e:a6:6b:e6:09:1c:d2:7d:af:3f:e3:
         6a:9f:54:e2:a3:e0:4e:ae:ef:91:77:f7:91:00:55:c6:33:5a:
         f9:1d:42:a7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHtEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA1MjYw
MzI5MTZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDdDMjIzNEI0MDIyNDg5
MDJGOTFEQzAyN0E0Q0ZFRTRENjcyMEE0RDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDmpNvIPtSKOAEZhXSJM0ZmYR+j0vV55nie+bp3wwOr1p0WRlGb
wkISNQEyaPFMV9DjrwV7Zp86E8bbH04Fp71kMqnIvgYjIzWWavTebOFA9Yr2Hgyj
JMjPVCWGJhRP89HEm+f2H2iaaqOfcJVXydDM/fdss+JfyY2vO7GfDKcTd5eNMehq
Md56WlsBCL/ofrZ/SMui1tdhaUKF7WtueGflpb1NXsQlVa8Joup8vAcwAXzqqon5
vLdbCS1WYYM6WXMYN9P3R5B0Nx1hzxK7IqDeVwfZYWFYTne19lvEglkEzJGmWmeq
uS6wgarZUPB4qKHbHDS73k33P+lsw5Fq3JuHAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUfCI0tAIkiQL5HcAnpM/uTWcgpNkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2ZDSTB0QUlraVFMNUhjQW5w
TV91VFdjZ3BOay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wkAwDQYJKoZIhvcNAQELBQADggEBAAS9GD6WX3lJqGYlQGWa6Y4d3da81Q16/9TX
Cd8ET/Z5/uSYt+b0xOEbZ8uGPPuvYthgVRC2Tt1EYQlrIbmSUwovo52/pOO22qqa
A621XP7KH7d7laBq/U4kXBPYK+Mw+D0qiylero7LwLXfYrWxvTGeHhar5yuGemgC
6SB37b8Eh7FLquxXnAs0XdO6PXt7+C099VCmi+qKIBYVV/yLG+1nSC8aAIVaMrmR
w1Ad/zSCpl92C3BKLKHDPqJwBaLBDJ5s9y3R+PliMsSDsg+c8jU1M9CfrtH702x1
MNZlaShepmvmCRzSfa8/42qfVOKj4E6u75F395EAVcYzWvkdQqc=
-----END CERTIFICATE-----