Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lcc6v2EAge3DFYTw9D4KKR4vIrs.roa
File:                     lcc6v2EAge3DFYTw9D4KKR4vIrs.roa (raw, json)
Hash identifier:          CrlmtcguxcxI26FMcrRn4zCqdjJcAccrX5gDwd6R0JI=
Subject key identifier:   95:C7:3A:BF:61:00:81:ED:C3:15:84:F0:F4:3E:0A:29:1E:2F:22:BB
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1AD7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lcc6v2EAge3DFYTw9D4KKR4vIrs.roa
Signing time:             Wed 29 Sep 2021 02:45:49 +0000
ROA not before:           Wed 29 Sep 2021 02:45:49 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.194.128.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6871 (0x1ad7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:45:49 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=95C73ABF610081EDC31584F0F43E0A291E2F22BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:56:07:eb:8f:04:30:91:96:09:74:ef:a6:c0:
                    18:68:47:6e:83:f1:2f:9d:40:b2:0a:5a:a2:d5:6b:
                    3a:35:5f:b6:10:55:32:46:11:27:b8:b4:37:e1:13:
                    8a:25:ab:e4:ef:cc:c3:ac:8d:94:44:dc:8a:5e:4d:
                    34:08:b9:7e:48:a5:c0:89:73:f4:cd:b2:4e:73:01:
                    94:a7:24:85:79:9c:6b:28:67:e7:24:09:b6:c7:b0:
                    a1:69:1f:76:f0:81:c7:4a:3d:2a:77:ea:9b:3d:1d:
                    46:d5:c3:5f:ee:96:78:5f:7d:8c:0e:b3:fd:e3:74:
                    33:cc:08:e3:23:84:ae:89:24:42:1b:4b:c2:73:7e:
                    f9:66:da:40:ae:b8:bf:e0:8c:7d:3f:0d:a8:86:45:
                    20:97:98:c3:c0:47:b9:d9:89:93:55:f5:5f:62:41:
                    cd:22:cc:c1:75:ed:dc:c6:d5:d2:db:c0:3f:80:e4:
                    8e:12:b4:b2:11:70:61:4b:22:3b:2e:63:f3:dc:a7:
                    47:29:28:fa:ba:b8:fc:1d:90:22:eb:c5:58:88:ec:
                    fc:39:b4:aa:c2:70:40:65:4d:0f:5d:89:3f:e7:89:
                    97:47:70:1e:67:bc:42:1e:74:f6:9c:9f:57:53:c9:
                    7e:3c:2d:22:ea:ab:6f:f2:2f:3f:8e:74:63:20:d2:
                    1c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C7:3A:BF:61:00:81:ED:C3:15:84:F0:F4:3E:0A:29:1E:2F:22:BB
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lcc6v2EAge3DFYTw9D4KKR4vIrs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1b:2d:79:a8:01:f1:ac:95:2f:84:87:68:2f:6a:77:81:f3:f1:
         88:f5:7f:d4:92:bc:df:23:84:c7:69:39:e8:83:d1:a5:d5:2f:
         48:ee:30:6d:8d:87:a8:c5:04:b8:27:c8:6d:aa:13:13:21:b5:
         11:e2:79:5c:a0:07:63:53:43:0e:d1:b0:a8:fd:2a:16:73:3d:
         df:24:b1:57:fd:93:e1:24:ee:f2:4f:8b:a4:21:9e:36:c8:3b:
         e1:4c:17:31:6d:ec:7a:10:2e:03:71:a3:50:ff:f6:c6:11:96:
         ec:bf:c7:d9:d8:07:55:a8:78:f0:44:28:81:48:88:83:bd:c5:
         0d:7d:83:8b:d5:64:38:5e:76:3d:d8:a8:ef:4f:1f:14:d3:83:
         5e:e3:c7:f9:93:20:8a:2e:b9:1d:5a:c4:30:b0:e7:34:cc:53:
         58:0d:f3:83:50:01:12:d1:ea:1f:f5:76:d5:d5:5d:24:6a:45:
         84:f8:be:c1:d2:4f:25:46:c3:25:b6:77:ae:90:f1:06:86:97:
         3b:a5:88:b0:d3:de:0c:e5:61:93:a9:06:68:64:b0:2e:6f:d2:
         d4:a0:d2:ea:ea:ed:07:23:90:16:49:00:f0:81:11:4f:2a:d9:
         36:bf:7b:f1:76:25:0b:b6:b2:d0:9e:4a:76:46:da:da:06:2a:
         d6:fe:36:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----