Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hgiQq97br4fJSKQRnmfmchM-nvY.roa
File:                     hgiQq97br4fJSKQRnmfmchM-nvY.roa (raw, json)
Hash identifier:          o5UB1Xwkb68yYu97p5oCCepz9I3L5iw9mDlO1n4HBNI=
Subject key identifier:   86:08:90:AB:DE:DB:AF:87:C9:48:A4:11:9E:67:E6:72:13:3E:9E:F6
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E23
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hgiQq97br4fJSKQRnmfmchM-nvY.roa
Signing time:             Tue 29 Sep 2020 09:55:23 +0000
ROA not before:           Tue 29 Sep 2020 09:55:23 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.205.32/27 maxlen: 27

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3619 (0xe23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:23 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=860890ABDEDBAF87C948A4119E67E672133E9EF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:80:0f:94:d5:30:8e:b5:b9:49:fe:b4:59:ab:
                    e6:3c:7c:be:3b:4d:5e:45:13:bd:c0:b8:96:a4:82:
                    67:0b:99:c5:33:52:44:e0:6d:4e:20:31:3d:e7:8c:
                    2c:f3:d5:cd:1f:bd:e3:57:e7:88:33:53:5f:dd:79:
                    98:7a:96:6a:32:62:84:1e:c2:04:7f:d6:fc:11:4f:
                    c7:a6:70:c5:91:58:21:77:21:48:5d:13:88:9a:ac:
                    07:bc:09:af:70:cc:c5:0e:cd:eb:52:49:30:81:af:
                    1a:fc:49:d2:9f:d9:f7:c0:6b:76:da:f7:c0:4c:01:
                    19:0b:2d:bf:51:bd:ad:fc:55:6d:7b:c7:6b:84:84:
                    b4:41:fd:c8:ab:74:e0:5c:5c:0f:38:e8:78:25:70:
                    24:19:fb:be:a4:1e:06:d9:e5:2d:cd:ff:2e:d1:1c:
                    ab:3f:2c:46:21:62:24:19:b4:9b:81:ad:97:65:7e:
                    98:01:f5:d7:86:7f:08:32:a4:96:d3:eb:84:0d:01:
                    8b:c5:bc:ca:63:f9:39:d9:8c:ca:36:21:68:6f:f8:
                    33:34:33:ad:83:fc:ef:94:d5:17:97:a0:c5:05:84:
                    b3:50:1d:45:f3:77:6a:e1:97:4e:79:8c:6a:b6:c6:
                    6e:ca:80:12:3f:27:5a:b3:e7:de:40:c8:84:17:1a:
                    be:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:08:90:AB:DE:DB:AF:87:C9:48:A4:11:9E:67:E6:72:13:3E:9E:F6
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hgiQq97br4fJSKQRnmfmchM-nvY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.205.32/27

    Signature Algorithm: sha256WithRSAEncryption
         81:3c:3b:03:99:0c:f9:e5:a1:6a:5a:11:c9:84:1d:c8:39:aa:
         6c:5a:4d:06:c8:5d:37:a9:5c:c8:8f:94:91:a2:dc:37:50:77:
         c9:45:33:de:58:1d:96:ee:d2:17:09:cf:e3:12:62:d4:49:57:
         d9:e2:bc:2d:6a:6d:29:69:35:ef:5c:97:6b:33:cf:da:dd:40:
         6c:ab:d5:2b:02:7a:d9:45:d3:b6:a8:9d:29:d0:fd:0f:a9:6c:
         d1:5e:9c:23:3c:d3:9b:8c:c5:c8:56:a7:8b:ce:cf:9b:db:10:
         9f:7e:24:86:ee:c3:bf:57:98:0a:02:53:5a:e0:67:f4:09:9a:
         77:60:c7:43:b2:3b:5d:1f:5f:73:34:49:ab:9b:3f:68:7c:98:
         fd:6a:70:a6:dc:33:c1:b7:dd:a7:64:9c:37:05:9f:c7:c5:af:
         e6:6a:25:86:f8:09:04:8d:f6:2f:5b:7e:a3:36:47:be:a3:6d:
         02:cc:1a:cc:ad:20:93:6a:26:a3:c0:ce:d6:59:d8:dd:d6:ef:
         a9:8c:41:2c:f6:4e:66:27:2f:01:26:d5:43:a3:62:68:54:74:
         a4:03:68:af:de:b3:86:43:61:51:92:48:d1:7a:fe:6d:b3:96:
         a8:42:a9:8b:f0:7c:74:b3:2c:8c:cf:fb:0c:c0:30:a1:49:08:
         b8:26:b2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----