Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jYBJxNozpGmr2f19NUdV4E6GZP4.roa
File:                     jYBJxNozpGmr2f19NUdV4E6GZP4.roa (raw, json)
Hash identifier:          780aJeX2DbeXvFjq50hltq1+XqVqj/lNRQuknqt6w1M=
Subject key identifier:   8D:80:49:C4:DA:33:A4:69:AB:D9:FD:7D:35:47:55:E0:4E:86:64:FE
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       186F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jYBJxNozpGmr2f19NUdV4E6GZP4.roa
Signing time:             Sun 07 Feb 2021 12:29:20 +0000
ROA not before:           Sun 07 Feb 2021 12:29:20 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.205.128/28 maxlen: 28

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6255 (0x186f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:29:20 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=8D8049C4DA33A469ABD9FD7D354755E04E8664FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:62:f9:d7:52:13:c8:55:de:cb:74:dd:b6:db:
                    b4:5a:17:f4:8b:0f:ac:95:10:48:17:3b:88:6d:0f:
                    34:6c:4d:d2:6b:77:bf:30:6e:e4:82:d0:f2:b8:b3:
                    91:95:7d:d2:89:ed:eb:4e:8a:ff:e6:0b:b3:6b:81:
                    27:c1:5c:67:8e:0c:46:c1:13:11:1b:9b:5d:f9:4b:
                    63:49:61:c6:b2:8e:26:54:2f:d5:14:1c:84:74:06:
                    27:90:a2:dd:25:f2:fd:8a:59:1b:4f:8a:a1:a9:8e:
                    a4:56:25:91:f5:60:dd:c1:1b:4c:bf:be:16:13:51:
                    7a:13:17:77:d1:55:05:c9:0d:03:1d:4b:ca:50:37:
                    06:1a:43:3a:c3:c8:b5:9e:2f:a5:9f:a5:3d:a3:a8:
                    56:05:0f:72:2e:11:61:a6:f9:24:ae:57:f2:b7:4a:
                    e9:0c:72:71:93:9a:93:62:cf:47:5b:f8:5a:c8:a6:
                    f3:37:30:52:03:2e:4c:0b:1e:cf:49:e5:63:f0:ed:
                    14:48:55:14:45:f0:ce:9f:46:86:d4:f4:e7:bd:10:
                    38:9c:f7:48:70:da:29:d0:d8:99:54:20:e1:8c:ac:
                    bc:99:6b:18:b9:d6:b4:fa:53:dc:a7:2d:76:45:e1:
                    35:3b:31:1e:97:82:49:f3:63:c4:3b:e1:bf:63:91:
                    61:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:80:49:C4:DA:33:A4:69:AB:D9:FD:7D:35:47:55:E0:4E:86:64:FE
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jYBJxNozpGmr2f19NUdV4E6GZP4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.205.128/28

    Signature Algorithm: sha256WithRSAEncryption
         9b:c9:35:a6:30:33:c4:08:93:7a:67:f1:ef:71:41:76:16:ba:
         51:48:ba:6a:61:34:cb:bb:c0:4e:31:58:12:c0:2a:5d:f8:6b:
         bf:c5:57:0d:0d:02:80:d7:cc:de:87:44:52:53:ab:12:7d:33:
         44:f3:07:65:63:59:56:05:66:3d:eb:d6:78:57:19:14:2f:a7:
         f8:c2:79:04:90:31:84:c4:83:9d:d9:a3:e2:6b:a1:82:fb:24:
         08:79:d6:5c:7e:d7:eb:c8:c4:f4:5b:fc:24:15:a7:52:f0:1c:
         11:81:bb:79:d8:23:56:45:4f:cb:55:75:c3:25:6f:76:4b:5d:
         da:f8:ca:06:c0:2d:0d:6e:eb:ee:da:3c:a5:fa:05:65:0b:d8:
         6e:37:57:bd:32:6a:80:d8:c9:3a:28:0e:0c:29:7d:84:f4:a4:
         c2:eb:58:2a:3d:41:71:f2:ce:08:91:ae:49:05:93:f0:8b:7f:
         29:e6:1f:09:64:36:83:3f:6e:3b:ad:e5:f3:64:8d:0b:b9:4d:
         09:ac:1d:2e:31:ae:8a:00:0e:e5:da:d3:f7:75:dc:60:bd:12:
         6e:fa:cf:90:71:0c:2a:75:a5:42:ed:f0:cd:c6:9d:94:12:82:
         e6:c1:47:36:51:90:98:25:53:5d:7e:38:3b:1d:bc:f2:30:89:
         1c:11:7a:7d
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICGG8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjI5MjBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDhEODA0OUM0REEzM0E0
NjlBQkQ5RkQ3RDM1NDc1NUUwNEU4NjY0RkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTYvnXUhPIVd7LdN2227RaF/SLD6yVEEgXO4htDzRsTdJrd78w
buSC0PK4s5GVfdKJ7etOiv/mC7NrgSfBXGeODEbBExEbm135S2NJYcayjiZUL9UU
HIR0BieQot0l8v2KWRtPiqGpjqRWJZH1YN3BG0y/vhYTUXoTF3fRVQXJDQMdS8pQ
NwYaQzrDyLWeL6WfpT2jqFYFD3IuEWGm+SSuV/K3SukMcnGTmpNiz0db+FrIpvM3
MFIDLkwLHs9J5WPw7RRIVRRF8M6fRobU9Oe9EDic90hw2inQ2JlUIOGMrLyZaxi5
1rT6U9ynLXZF4TU7MR6XgknzY8Q74b9jkWGRAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUjYBJxNozpGmr2f19NUdV4E6GZP4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2pZQkp4Tm96cEdtcjJmMTlO
VWRWNEU2R1pQNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQR7
ws2AMA0GCSqGSIb3DQEBCwUAA4IBAQCbyTWmMDPECJN6Z/HvcUF2FrpRSLpqYTTL
u8BOMVgSwCpd+Gu/xVcNDQKA18zeh0RSU6sSfTNE8wdlY1lWBWY969Z4VxkUL6f4
wnkEkDGExIOd2aPia6GC+yQIedZcftfryMT0W/wkFadS8BwRgbt52CNWRU/LVXXD
JW92S13a+MoGwC0Nbuvu2jyl+gVlC9huN1e9MmqA2Mk6KA4MKX2E9KTC61gqPUFx
8s4Ika5JBZPwi38p5h8JZDaDP247reXzZI0LuU0JrB0uMa6KAA7l2tP3ddxgvRJu
+s+QcQwqdaVC7fDNxp2UEoLmwUc2UZCYJVNdfjg7HbzyMIkcEXp9
-----END CERTIFICATE-----