Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k9FcyQ8Uap8KkRi0jonAUgnjoJw.roa
File:                     k9FcyQ8Uap8KkRi0jonAUgnjoJw.roa (raw, json)
Hash identifier:          KT9iaNaX9L6vULZByvfXMWPMI/gWI3x9PsJQTsUp8MM=
Subject key identifier:   93:D1:5C:C9:0F:14:6A:9F:0A:91:18:B4:8E:89:C0:52:09:E3:A0:9C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E8E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k9FcyQ8Uap8KkRi0jonAUgnjoJw.roa
Signing time:             Tue 29 Sep 2020 09:55:52 +0000
ROA not before:           Tue 29 Sep 2020 09:55:52 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.224.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3726 (0xe8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:52 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=93D15CC90F146A9F0A9118B48E89C05209E3A09C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:89:c1:e3:cd:a5:5c:49:2b:d6:f1:e7:6e:a4:
                    c1:7c:9f:e1:e6:79:e7:51:55:de:8e:c8:00:f2:55:
                    f2:cf:0a:95:bc:cf:dc:9f:97:ba:e3:a8:84:59:c7:
                    16:0f:09:4d:52:e9:59:42:9b:5f:f0:5e:f1:af:e5:
                    11:9f:4e:f6:ed:a8:35:cd:0b:fc:81:2b:ef:33:e3:
                    9d:86:4c:09:0f:f1:7f:d8:e2:04:7c:84:3f:78:9a:
                    7b:9b:31:6b:a2:03:ea:40:3b:6b:84:34:e2:e4:ba:
                    3f:3a:07:2a:b0:cb:b1:1a:29:7c:89:1a:1f:56:e2:
                    81:53:ff:c6:26:5a:7c:6e:da:42:33:32:52:0a:1f:
                    fc:3c:59:27:d1:d1:8b:2b:f6:30:47:5d:78:51:e5:
                    9f:4b:6f:17:c2:d1:c0:ad:fb:0e:29:94:4d:c1:4c:
                    ea:0e:a7:4b:a4:bd:31:00:76:89:53:38:f1:4b:2c:
                    41:bb:71:b6:ce:77:cd:38:99:f6:75:68:17:21:96:
                    53:5d:d1:dc:5a:5a:ce:84:c5:3d:46:42:d4:22:6a:
                    14:b9:19:0e:ac:7c:d8:ab:e3:3e:f3:3f:61:ac:76:
                    73:59:94:7e:71:5c:d5:1a:fa:13:bd:77:38:be:dd:
                    ab:06:c5:2d:fe:e3:cd:e8:c3:1e:0e:7f:6e:10:33:
                    33:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D1:5C:C9:0F:14:6A:9F:0A:91:18:B4:8E:89:C0:52:09:E3:A0:9C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k9FcyQ8Uap8KkRi0jonAUgnjoJw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:8d:45:b8:90:f8:79:e3:4c:b1:f3:c6:43:88:8a:1d:e1:d8:
         b6:d7:40:ab:63:be:24:67:8a:66:4f:08:5d:c1:03:68:43:8c:
         f3:78:31:7d:1f:e5:e1:5a:dc:39:8f:99:e4:fe:87:90:75:9a:
         9d:94:21:85:be:29:3b:01:fd:55:02:c1:f6:83:88:ae:0a:b1:
         9a:09:21:de:76:73:7d:1d:ee:95:ea:af:4f:1c:eb:7b:b7:20:
         6e:fb:67:9b:f7:b0:62:2e:81:bd:ff:98:d4:9e:57:b2:92:d1:
         59:bb:52:67:51:65:e6:bf:95:33:30:a0:1e:35:dd:59:21:f5:
         9c:79:00:4d:be:e2:bd:65:32:91:98:67:8d:3e:97:c3:4a:aa:
         78:ed:6f:38:eb:36:f9:12:4d:46:8f:80:5c:78:8c:9b:7d:06:
         a2:64:e0:bb:e2:7e:dc:9d:1b:6f:17:c0:1b:00:8e:df:15:14:
         d8:00:93:1a:3e:ef:58:00:d4:ec:2b:5b:33:bb:03:90:c4:4d:
         05:a8:8e:8c:48:7f:99:a7:c1:7f:a2:45:0c:b5:d5:3f:89:19:
         c9:6f:f5:4e:84:4c:11:ce:96:3c:05:f5:bf:29:a2:ad:3b:21:
         ca:db:51:2e:ff:7c:3e:eb:e3:c6:41:d8:0b:e3:61:32:65:1e:
         44:ce:7c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----