Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k-IrxiDUBrypOpyuHsIILNvqDKM.roa
File:                     k-IrxiDUBrypOpyuHsIILNvqDKM.roa (raw, json)
Hash identifier:          gJqQpQgq/P1aW0V6TQZxfihMpejq+n37fz9SVHlL8fU=
Subject key identifier:   93:E2:2B:C6:20:D4:06:BC:A9:3A:9C:AE:1E:C2:08:2C:DB:EA:0C:A3
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       10ED
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k-IrxiDUBrypOpyuHsIILNvqDKM.roa
Signing time:             Wed 27 Jan 2021 07:03:54 +0000
ROA not before:           Wed 27 Jan 2021 07:03:54 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.164.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4333 (0x10ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Jan 27 07:03:54 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=93E22BC620D406BCA93A9CAE1EC2082CDBEA0CA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:79:cb:f3:76:e7:a3:93:9a:1f:e2:a8:c7:05:
                    fe:5f:a0:e7:e5:3c:0c:a4:08:e0:f1:32:ab:8e:64:
                    65:1f:af:62:0d:01:a2:e1:94:70:3a:75:35:ac:5a:
                    0a:46:92:eb:3a:b4:6c:f2:5e:9c:73:b7:49:97:12:
                    a6:2e:e4:ae:15:64:08:ed:f3:8c:52:cd:a5:17:8c:
                    68:b4:43:a6:c4:1a:f2:1a:4a:a5:0b:db:7d:f0:d7:
                    8c:34:4f:e4:ae:6c:81:93:f8:1f:49:2c:d3:eb:57:
                    19:41:fd:8c:40:52:bd:d9:49:72:dd:39:df:00:ea:
                    f9:db:7d:f1:2b:93:e3:74:39:c1:9e:4d:5a:b9:fe:
                    b8:64:65:43:e6:e2:9b:d1:db:a3:48:d5:78:b5:00:
                    9b:f7:e5:1e:90:3f:b1:75:cd:2a:20:2b:e2:1e:b9:
                    82:44:f2:f7:0e:a2:04:56:76:1c:3c:db:c8:81:91:
                    09:77:ac:38:38:be:f0:e4:49:d6:53:9f:6e:74:f4:
                    08:ae:27:e9:2c:5b:17:8b:91:c1:f5:a6:52:80:c9:
                    d2:d4:88:1a:11:17:2c:bd:12:88:84:99:3c:8f:44:
                    72:d4:21:08:7f:4b:fb:55:8d:7d:ce:34:fb:30:6a:
                    0f:23:76:f0:1e:cb:cf:e6:83:04:e4:82:0b:29:ce:
                    d1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E2:2B:C6:20:D4:06:BC:A9:3A:9C:AE:1E:C2:08:2C:DB:EA:0C:A3
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k-IrxiDUBrypOpyuHsIILNvqDKM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:27:a2:b7:a8:63:b1:09:c6:e1:3f:24:8c:60:42:37:84:f6:
         f4:53:05:18:bb:92:45:02:2a:51:cf:7c:1a:c3:19:bd:8c:44:
         72:de:48:62:d9:01:27:dc:20:cf:b8:d6:5e:32:bf:04:c6:86:
         08:55:c8:38:7f:47:a2:c7:39:31:0e:64:43:a6:fa:38:c3:be:
         70:3d:90:13:ce:4f:d1:20:0a:82:86:94:d3:78:7f:b1:05:ae:
         40:b5:ea:f2:a4:48:cd:e4:59:d1:e9:5d:5d:03:87:d9:bc:1f:
         cf:35:b3:04:66:2b:51:32:7d:cd:a1:aa:7a:f0:76:e0:7e:14:
         b9:b9:df:50:a7:ee:54:65:b5:94:73:14:aa:1c:6f:54:9a:02:
         5b:04:82:6d:fa:25:51:d9:b9:3c:2d:f4:fa:67:d5:c1:40:1a:
         40:b4:6a:cf:40:b6:c9:bf:6d:0a:58:00:b0:68:74:5a:96:77:
         71:22:b3:4a:01:62:cb:ec:08:fc:6c:9c:ef:e5:cd:db:51:de:
         42:5a:8d:e0:41:27:2c:f5:7f:f6:fb:da:cf:7e:5e:d0:73:bc:
         47:cf:5d:3b:62:28:95:a2:57:f3:2d:55:10:3d:44:a9:ac:d2:
         61:af:70:e7:3c:d3:ee:33:98:58:1c:00:bd:7b:f8:1c:6e:55:
         74:bb:9f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----