Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fsOQfTtG_igKArz5aSDrXX6nApA.roa
File:                     fsOQfTtG_igKArz5aSDrXX6nApA.roa (raw, json)
Hash identifier:          C7IGrFWwmE4t22d+NQr9EHHdAJR3lzUy/lpaTipRKq8=
Subject key identifier:   7E:C3:90:7D:3B:46:FE:28:0A:02:BC:F9:69:20:EB:5D:7E:A7:02:90
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0ED7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fsOQfTtG_igKArz5aSDrXX6nApA.roa
Signing time:             Tue 29 Sep 2020 09:56:12 +0000
ROA not before:           Tue 29 Sep 2020 09:56:12 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.152.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3799 (0xed7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:12 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=7EC3907D3B46FE280A02BCF96920EB5D7EA70290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a3:6a:06:fe:53:d6:32:d2:39:b3:8f:93:cc:
                    04:b3:d7:a3:ac:70:52:09:12:41:ec:42:ab:46:da:
                    b1:dc:b5:30:7f:80:0e:1d:0f:14:39:23:44:fb:95:
                    cd:1b:5d:46:f1:22:58:26:0e:75:8e:6a:63:46:e6:
                    0b:2b:4c:cd:13:ac:32:e9:15:6a:14:5e:20:6d:85:
                    81:ef:10:bc:5b:4d:1a:70:a8:a2:82:ee:a8:1d:24:
                    f0:35:c8:af:33:76:04:05:1b:8c:2c:94:89:7c:a8:
                    03:5d:e8:3c:38:f3:f5:5d:3c:0b:cc:5e:76:cb:c2:
                    bb:8e:ff:e4:48:83:a5:30:d2:0d:4b:1d:1b:fc:2b:
                    1c:48:ac:14:59:f8:3f:a9:ed:f7:8a:dc:ad:30:f3:
                    64:58:c4:02:12:b7:10:c5:8b:2b:18:d3:26:ad:aa:
                    57:77:06:f1:e6:56:04:ee:1b:8f:22:8c:31:5e:fd:
                    dd:73:06:8b:5a:18:d3:78:fe:6b:71:fa:4c:b4:a4:
                    4c:45:01:83:6d:d0:9f:c5:60:2d:34:99:6f:59:5a:
                    de:c8:c7:1b:9c:a0:72:71:dd:83:6c:95:c9:65:1f:
                    36:25:98:d8:23:21:4e:df:57:2f:8f:d0:37:48:90:
                    c7:86:aa:92:6d:c4:2c:d3:09:8c:b7:27:9d:6c:d3:
                    8b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C3:90:7D:3B:46:FE:28:0A:02:BC:F9:69:20:EB:5D:7E:A7:02:90
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fsOQfTtG_igKArz5aSDrXX6nApA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:92:a7:f5:4a:f5:c2:d1:2a:f1:fe:88:0d:63:aa:fc:a5:73:
         e0:58:f6:4a:0c:a1:81:68:e0:3d:05:a1:97:af:57:27:fe:5b:
         7d:87:06:c4:bd:d9:a9:7b:0e:42:5c:04:70:97:bf:39:ca:07:
         40:f9:8c:a9:c3:69:99:9d:17:2f:82:6b:d3:3b:a3:8b:53:06:
         c9:e1:7f:14:bd:6e:f3:b2:ac:93:17:0d:92:3b:99:3a:27:79:
         aa:aa:25:9b:ea:ab:9b:75:9f:01:64:79:74:86:0e:70:7a:53:
         b9:44:f3:bf:17:c6:01:7a:e2:d6:62:39:b2:08:b8:7d:ad:3f:
         64:7e:b5:1f:ba:e3:d1:25:95:8a:71:2d:82:cd:2a:26:0c:07:
         7f:56:44:2b:cc:8d:da:54:d6:63:7a:5c:7f:79:25:a8:e6:26:
         67:c7:3e:2c:e6:33:af:25:fb:bd:c2:58:8e:ee:71:7e:c1:b5:
         0a:29:b0:ef:63:ba:b4:fe:01:b1:8c:ff:8e:78:68:c5:57:0a:
         84:b2:9b:ae:ad:14:ed:8d:98:58:b7:f6:07:1e:2a:4e:60:26:
         52:a0:ed:8a:bd:e2:84:12:1a:da:a1:33:d5:e0:29:21:8b:40:
         4d:d1:bb:ec:da:3a:79:55:c5:1a:c2:8d:1e:84:42:4e:24:90:
         f6:e3:39:88
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDtcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU2MTJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDdFQzM5MDdEM0I0NkZF
MjgwQTAyQkNGOTY5MjBFQjVEN0VBNzAyOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoo2oG/lPWMtI5s4+TzASz16OscFIJEkHsQqtG2rHctTB/gA4d
DxQ5I0T7lc0bXUbxIlgmDnWOamNG5gsrTM0TrDLpFWoUXiBthYHvELxbTRpwqKKC
7qgdJPA1yK8zdgQFG4wslIl8qANd6Dw48/VdPAvMXnbLwruO/+RIg6Uw0g1LHRv8
KxxIrBRZ+D+p7feK3K0w82RYxAIStxDFiysY0yatqld3BvHmVgTuG48ijDFe/d1z
BotaGNN4/mtx+ky0pExFAYNt0J/FYC00mW9ZWt7IxxucoHJx3YNslcllHzYlmNgj
IU7fVy+P0DdIkMeGqpJtxCzTCYy3J51s04t9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUfsOQfTtG/igKArz5aSDrXX6nApAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2ZzT1FmVHRHX2lnS0FyejVh
U0RyWFg2bkFwQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wpgwDQYJKoZIhvcNAQELBQADggEBAAeSp/VK9cLRKvH+iA1jqvylc+BY9koMoYFo
4D0FoZevVyf+W32HBsS92al7DkJcBHCXvznKB0D5jKnDaZmdFy+Ca9M7o4tTBsnh
fxS9bvOyrJMXDZI7mToneaqqJZvqq5t1nwFkeXSGDnB6U7lE878XxgF64tZiObII
uH2tP2R+tR+649EllYpxLYLNKiYMB39WRCvMjdpU1mN6XH95JajmJmfHPizmM68l
+73CWI7ucX7BtQopsO9jurT+AbGM/454aMVXCoSym66tFO2NmFi39gceKk5gJlKg
7Yq94oQSGtqhM9XgKSGLQE3Ru+zaOnlVxRrCjR6EQk4kkPbjOYg=
-----END CERTIFICATE-----