Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kbU0TdWDO3v7lEg6oBlPw3-ly24.roa
File:                     kbU0TdWDO3v7lEg6oBlPw3-ly24.roa (raw, json)
Hash identifier:          7jZrDsmGVfKrtOziA5+NR+aIfO88BjNLMF5QrbqerWw=
Subject key identifier:   91:B5:34:4D:D5:83:3B:7B:FB:94:48:3A:A0:19:4F:C3:7F:A5:CB:6E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F8C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kbU0TdWDO3v7lEg6oBlPw3-ly24.roa
Signing time:             Tue 29 Sep 2020 09:57:05 +0000
ROA not before:           Tue 29 Sep 2020 09:57:05 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.192.4.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3980 (0xf8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:57:05 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=91B5344DD5833B7BFB94483AA0194FC37FA5CB6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0e:95:ed:4b:1f:07:67:fe:42:4c:b0:b6:9f:
                    fe:aa:e6:e2:ee:73:3a:dd:5c:4d:29:14:1c:1d:b0:
                    3d:d1:7d:6d:4f:56:14:36:7e:0e:de:0c:6a:f3:17:
                    6d:b1:d2:98:8f:98:eb:c8:25:53:e4:6e:6c:d0:2c:
                    e0:de:1c:d9:ee:de:4f:77:6f:fd:bb:ea:ed:c8:e5:
                    9b:7a:cc:af:9e:de:f2:1c:62:2f:62:c3:fb:9c:24:
                    be:5f:a1:5a:2c:9a:f8:17:0a:ae:4e:25:78:3a:6b:
                    e0:1e:05:7a:30:4e:fa:ce:89:ee:c4:78:f1:06:ca:
                    3b:26:9f:23:b6:28:05:3d:c3:d7:c5:fc:19:71:7b:
                    ac:6f:97:af:4e:a3:96:7a:2c:dd:de:23:3b:73:c3:
                    02:04:c0:55:66:47:b6:bf:bf:9d:8e:bc:d5:27:2a:
                    13:42:a1:54:c5:93:69:b9:66:cd:0d:60:6c:55:0a:
                    9b:70:99:0a:d6:6d:38:89:c8:c6:c2:07:38:ea:24:
                    d2:84:ed:d5:2f:f0:a6:61:30:05:6f:15:d0:67:3f:
                    8e:26:6d:9c:cc:fa:67:ce:4e:31:0f:eb:00:f6:1d:
                    61:c2:19:8a:45:b4:a5:c1:e3:1f:45:ef:05:c3:09:
                    b2:dd:e1:43:5e:c5:75:0c:e4:82:bf:37:a9:c8:f8:
                    ae:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B5:34:4D:D5:83:3B:7B:FB:94:48:3A:A0:19:4F:C3:7F:A5:CB:6E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kbU0TdWDO3v7lEg6oBlPw3-ly24.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:00:ff:59:d9:90:ee:3b:7a:3f:6d:fc:c2:8e:48:e0:cf:6d:
         05:7b:f3:ee:34:ac:d4:ba:80:13:66:e6:f2:7d:36:4f:8a:1f:
         ac:b8:0d:c5:ad:a9:44:5b:57:6b:9d:8a:40:8c:7c:a5:58:b8:
         e8:8d:88:98:22:2c:5c:79:80:1e:44:6d:24:32:81:56:41:b7:
         dc:63:fb:c5:8a:16:c4:3f:7c:dc:8b:70:dd:21:9e:c4:90:a3:
         8d:f9:5f:26:9e:da:ac:b9:c1:45:d1:45:0a:3b:fb:15:10:96:
         65:3d:b5:24:2b:0f:1e:ea:d7:7b:5e:6a:3e:ff:25:92:bd:db:
         e7:c4:3c:61:13:81:43:63:69:e4:eb:16:02:0d:0b:c6:4b:30:
         e8:59:c5:ca:31:6b:1c:6b:d5:d9:a8:14:b8:39:99:ac:49:0d:
         e1:1d:f5:fc:20:21:c2:16:f9:02:d8:ff:8e:b1:25:46:6f:e7:
         13:9e:79:b4:4d:0d:27:c2:fb:75:90:49:69:80:27:a3:28:06:
         96:d7:3f:ff:cb:08:c2:2b:e3:ac:d4:35:71:e6:66:c2:12:e0:
         d2:3c:22:99:63:f8:ce:cf:56:05:67:d8:41:b6:67:09:25:f8:
         7f:16:20:44:f2:7d:e9:7a:67:51:58:00:90:d4:ea:73:a6:00:
         d5:70:e0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----