Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kJTrcfUkqlE7Gn_K_R7DfsBF4m0.roa
File:                     kJTrcfUkqlE7Gn_K_R7DfsBF4m0.roa (raw, json)
Hash identifier:          J6EGAWaZejsRDXSJvQS1F7GMr1XETj2UrMRdUFAlcMs=
Subject key identifier:   90:94:EB:71:F5:24:AA:51:3B:1A:7F:CA:FD:1E:C3:7E:C0:45:E2:6D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D49
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kJTrcfUkqlE7Gn_K_R7DfsBF4m0.roa
Signing time:             Wed 29 Sep 2021 02:48:50 +0000
ROA not before:           Wed 29 Sep 2021 02:48:50 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        123.195.192.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7497 (0x1d49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:50 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=9094EB71F524AA513B1A7FCAFD1EC37EC045E26D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:54:b4:ba:23:af:6c:e4:53:98:17:98:90:27:
                    c5:e5:0d:54:79:35:ed:7f:c2:8b:81:ba:bb:c8:0e:
                    b4:16:bc:8b:0d:7e:bc:89:36:32:32:79:39:5d:44:
                    85:71:d5:01:60:06:7b:8f:43:4f:40:d9:6a:22:ab:
                    10:94:9d:cb:ae:16:ab:80:03:d5:fb:59:53:98:d4:
                    9d:08:49:40:9b:4b:f0:38:c6:84:d6:c0:eb:ca:dc:
                    2a:f7:31:04:de:a1:d6:1f:c4:3f:16:70:ec:88:d7:
                    d7:81:aa:71:bf:53:e6:59:af:83:30:86:db:d0:46:
                    65:44:4e:27:34:e3:5d:af:92:4a:d8:86:52:d6:25:
                    4a:19:fb:52:b4:f9:c8:eb:be:c4:e3:2e:74:c8:59:
                    61:7f:b2:9c:37:6a:94:09:39:a9:a3:2e:62:85:e7:
                    95:ac:65:42:bf:79:57:2f:17:af:d1:5f:8f:30:b3:
                    dc:5e:a6:bb:cc:73:ec:94:a1:1a:01:2b:28:17:1f:
                    03:dc:ca:0f:e4:57:f7:cf:7f:f0:27:12:1b:fd:ac:
                    a8:e6:12:17:3a:f5:c3:d7:5b:24:17:5a:e1:2d:7b:
                    6a:77:47:a0:a5:62:ea:a6:6f:f4:3b:8d:92:9a:e0:
                    ba:6c:f3:5d:a1:bb:40:fb:3b:32:56:0d:61:9e:06:
                    48:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:94:EB:71:F5:24:AA:51:3B:1A:7F:CA:FD:1E:C3:7E:C0:45:E2:6D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kJTrcfUkqlE7Gn_K_R7DfsBF4m0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         75:38:49:fd:62:7c:3b:d3:cb:a4:40:13:41:38:6f:fb:2e:c0:
         9c:0d:27:86:e5:e0:95:db:3f:0a:2c:47:2a:9c:98:f3:c2:ac:
         b6:41:c6:63:78:24:f6:42:2e:7f:23:64:ae:53:d0:d2:bc:8f:
         36:14:73:9a:81:83:f5:c9:74:8f:4d:ee:f8:ea:e9:1d:92:43:
         0d:81:82:84:66:be:b3:68:43:6c:10:94:fc:e0:d6:68:d3:71:
         7e:2d:d5:e1:68:10:88:28:6c:81:98:d8:b4:65:2a:5e:70:65:
         b9:11:1c:5a:f9:e7:6e:1e:a0:a8:e5:b7:21:43:b7:f5:b7:f5:
         74:77:d0:02:28:bf:53:0f:a6:6b:a0:63:60:76:a8:6a:ca:45:
         c9:d5:84:91:28:0a:61:7d:ee:5b:18:d1:c8:34:f3:9c:bb:f1:
         cb:b1:be:d2:81:fc:d7:7f:e6:17:20:6b:b9:45:6c:45:ba:8d:
         83:ca:2d:3a:a3:8a:88:06:3b:43:6d:61:d4:46:d3:ff:76:a6:
         3c:e5:f2:37:34:eb:c8:a8:cd:ae:fe:cd:f5:e0:30:4e:1f:d8:
         e4:d4:2a:e6:3b:f2:00:e8:c4:d9:60:e4:29:24:0a:f8:14:ef:
         fd:cc:cd:0d:65:d4:c0:ec:a1:f7:9a:87:52:ec:51:26:cb:c1:
         7b:2b:4f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----