Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hpNW0e1qCquOv7VY65htRv8bRTA.roa
File:                     hpNW0e1qCquOv7VY65htRv8bRTA.roa (raw, json)
Hash identifier:          DtqS5UoXYDiuyJPrY7aYoHavW3UA//Zd+WmAvn0UDhQ=
Subject key identifier:   86:93:56:D1:ED:6A:0A:AB:8E:BF:B5:58:EB:98:6D:46:FF:1B:45:30
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0DCE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hpNW0e1qCquOv7VY65htRv8bRTA.roa
Signing time:             Tue 29 Sep 2020 09:55:00 +0000
ROA not before:           Tue 29 Sep 2020 09:55:00 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.233.28.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3534 (0xdce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:00 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=869356D1ED6A0AAB8EBFB558EB986D46FF1B4530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:dc:de:64:0a:ce:60:5d:95:41:61:96:1f:7d:
                    eb:96:64:2f:01:a9:29:58:3a:5c:69:72:c9:26:33:
                    22:6e:88:9c:23:a3:e0:1f:ce:00:da:19:33:de:61:
                    94:5c:93:5a:bf:05:fe:ff:d5:7e:f2:d6:07:62:10:
                    51:41:b9:fa:e7:07:d1:c7:1a:52:52:f0:4a:e5:62:
                    01:73:1d:95:fd:fb:b6:d9:83:30:d5:0b:8f:68:53:
                    63:02:3f:3d:1f:4b:fe:a6:94:fc:24:11:11:bc:be:
                    09:e3:2b:8f:d2:5a:66:88:0b:a9:aa:cf:14:55:b9:
                    9f:5f:cc:29:ac:4c:a4:2e:01:01:bf:f1:86:15:6e:
                    d5:58:9c:ba:3e:d2:bd:87:89:53:d9:b4:28:24:ca:
                    3f:a1:ab:68:a8:5c:da:cb:ed:9b:57:6d:1a:c0:38:
                    b0:e1:80:f9:61:9c:e6:2c:00:7a:4c:b2:6a:f6:9a:
                    29:d1:8c:0c:a8:12:a4:58:f2:13:1b:a5:18:5b:35:
                    32:68:7b:af:3c:4a:ef:74:54:b7:7e:99:45:8b:53:
                    74:5e:ce:91:fd:d4:f4:17:8a:55:91:1f:52:59:11:
                    1a:50:07:f9:78:4b:ad:30:b0:2b:7d:e5:45:27:eb:
                    ec:05:10:11:97:68:16:37:3b:2f:aa:ff:31:48:bb:
                    da:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:93:56:D1:ED:6A:0A:AB:8E:BF:B5:58:EB:98:6D:46:FF:1B:45:30
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hpNW0e1qCquOv7VY65htRv8bRTA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:86:1f:2f:dc:2a:5e:de:65:1c:33:32:9b:2e:71:64:ee:e2:
         a0:1c:74:0b:f0:c3:e1:7f:06:64:c7:c7:16:78:71:e7:6e:e4:
         be:6c:9e:5a:06:a4:09:f6:8e:de:12:4a:18:c0:3f:e5:b3:51:
         27:78:e6:e2:e3:d0:5c:3e:3b:41:c7:e1:ac:38:7c:4b:d9:02:
         ea:e1:7a:58:16:9a:f7:3b:34:77:82:8c:33:fb:61:80:25:a0:
         18:de:47:7f:bd:07:b9:b6:2c:d0:48:09:8a:68:77:c0:1f:cc:
         40:bc:12:f7:84:be:91:ea:cc:57:cf:32:b2:ba:d9:6a:23:e0:
         57:fa:f6:3e:13:f3:e0:8b:d6:1d:63:8c:e8:e4:b6:25:1b:ed:
         cc:b0:50:3c:f9:c8:9c:bc:cb:ec:97:7a:67:7f:58:6b:f8:4e:
         5a:fe:fb:bd:d3:25:ea:82:af:31:de:b0:69:c2:c8:da:f2:2c:
         62:71:da:b3:a9:ed:48:73:3c:b1:1e:9e:21:d0:0e:d7:f5:11:
         82:88:53:79:cd:9f:4e:65:1a:4f:8c:a7:bc:41:43:9f:9f:a4:
         b0:ad:7a:3b:08:4a:38:11:a0:95:fa:6e:26:df:84:06:af:fa:
         dd:53:fe:c1:f8:80:8a:cd:4c:a3:d4:c8:44:c7:83:df:6a:ff:
         dd:44:12:48
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDc4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU1MDBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDg2OTM1NkQxRUQ2QTBB
QUI4RUJGQjU1OEVCOTg2RDQ2RkYxQjQ1MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCT3N5kCs5gXZVBYZYffeuWZC8BqSlYOlxpcskmMyJuiJwjo+Af
zgDaGTPeYZRck1q/Bf7/1X7y1gdiEFFBufrnB9HHGlJS8ErlYgFzHZX9+7bZgzDV
C49oU2MCPz0fS/6mlPwkERG8vgnjK4/SWmaIC6mqzxRVuZ9fzCmsTKQuAQG/8YYV
btVYnLo+0r2HiVPZtCgkyj+hq2ioXNrL7ZtXbRrAOLDhgPlhnOYsAHpMsmr2minR
jAyoEqRY8hMbpRhbNTJoe688Su90VLd+mUWLU3RezpH91PQXilWRH1JZERpQB/l4
S60wsCt95UUn6+wFEBGXaBY3Oy+q/zFIu9plAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUhpNW0e1qCquOv7VY65htRv8bRTAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2hwTlcwZTFxQ3F1T3Y3Vlk2
NWh0UnY4YlJUQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6RwwDQYJKoZIhvcNAQELBQADggEBAAWGHy/cKl7eZRwzMpsucWTu4qAcdAvww+F/
BmTHxxZ4cedu5L5snloGpAn2jt4SShjAP+WzUSd45uLj0Fw+O0HH4aw4fEvZAurh
elgWmvc7NHeCjDP7YYAloBjeR3+9B7m2LNBICYpod8AfzEC8EveEvpHqzFfPMrK6
2Woj4Ff69j4T8+CL1h1jjOjktiUb7cywUDz5yJy8y+yXemd/WGv4Tlr++73TJeqC
rzHesGnCyNryLGJx2rOp7UhzPLEeniHQDtf1EYKIU3nNn05lGk+Mp7xBQ5+fpLCt
ejsISjgRoJX6bibfhAav+t1T/sH4gIrNTKPUyETHg99q/91EEkg=
-----END CERTIFICATE-----