Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nOS_23ejhxme_ALlnBj8Vtfnp0E.roa
File:                     nOS_23ejhxme_ALlnBj8Vtfnp0E.roa (raw, json)
Hash identifier:          RcjAeOWTdOuvoswygR9pjUlHBh/Ee6XOsO7SlViDnjQ=
Subject key identifier:   9C:E4:BF:DB:77:A3:87:19:9E:FC:02:E5:9C:18:FC:56:D7:E7:A7:41
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0DE7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nOS_23ejhxme_ALlnBj8Vtfnp0E.roa
Signing time:             Tue 29 Sep 2020 09:55:07 +0000
ROA not before:           Tue 29 Sep 2020 09:55:07 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.196.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3559 (0xde7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:07 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=9CE4BFDB77A387199EFC02E59C18FC56D7E7A741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2c:6a:31:d1:98:08:3d:56:e2:5b:5c:5d:de:
                    62:3c:66:ab:ab:8f:75:40:83:52:87:9f:88:7c:a1:
                    8d:59:5d:d2:5c:89:71:93:76:2b:04:13:de:f2:dc:
                    55:cc:f3:d8:5e:58:07:dc:23:52:e0:18:13:a8:aa:
                    f1:bb:4e:d4:7b:47:b9:78:10:0f:1e:50:b1:09:89:
                    b9:64:e3:b9:20:0d:43:c6:d8:fe:32:58:f2:10:fb:
                    c1:68:56:85:c5:61:0a:42:56:e3:d5:9e:f3:91:cf:
                    60:8e:fa:ca:69:23:59:f8:f0:6b:6d:46:17:53:3a:
                    18:74:a4:a7:38:ca:8d:5e:89:59:96:e2:15:7d:57:
                    68:17:6d:8b:86:e9:09:ed:35:84:6a:b0:bd:0f:d6:
                    ef:30:06:f7:a8:ab:81:cf:6d:05:4d:e2:49:fc:05:
                    6c:25:b9:0d:ad:c6:d1:eb:3b:2f:bc:b5:8c:75:2d:
                    de:07:64:32:a8:02:cf:ff:91:8a:cf:22:24:47:25:
                    11:2c:2f:a8:39:7a:23:41:8a:61:7b:ec:8a:86:eb:
                    c7:91:55:86:39:57:3d:bd:32:4e:b5:1a:55:e1:e8:
                    51:9e:88:ba:a4:1c:22:5d:34:27:08:33:9d:1c:25:
                    72:7f:b7:33:bb:90:3e:54:fb:8b:24:0b:6c:01:44:
                    30:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E4:BF:DB:77:A3:87:19:9E:FC:02:E5:9C:18:FC:56:D7:E7:A7:41
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nOS_23ejhxme_ALlnBj8Vtfnp0E.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:70:fd:d8:28:e4:bf:72:ee:b7:cb:89:09:1e:ef:87:70:72:
         11:79:49:83:0f:6c:1a:ed:c5:f9:03:24:77:7e:c3:09:66:d4:
         63:84:2c:9f:01:d3:ae:aa:d5:09:b0:09:07:b3:ac:a9:c6:85:
         e1:41:eb:47:82:f2:fe:0b:41:e0:01:8b:26:0b:71:65:4e:e0:
         42:74:7e:20:bf:b8:af:68:a4:49:c9:47:f2:d1:72:5e:e5:3a:
         d4:e0:4e:56:91:f8:9d:3a:a2:e6:60:9d:83:d4:26:86:76:b3:
         79:36:3f:e3:ec:6c:40:a1:36:89:3b:c4:1a:25:ed:98:db:54:
         1f:24:e6:13:bb:64:84:5f:c8:a1:24:9a:86:4e:ab:e3:99:e2:
         80:90:a5:f1:ee:6f:9d:50:8e:16:b4:f1:b8:4e:43:4c:43:9a:
         a0:3f:4e:e8:4a:0e:41:f5:30:bd:31:47:76:16:87:5e:8d:4c:
         fd:33:4f:b4:3c:e6:02:d1:3f:ba:25:4f:c3:52:73:e7:a3:1e:
         49:bf:f5:d8:3b:08:6c:79:10:fb:47:59:5e:f4:ff:e0:44:e6:
         5e:59:34:b4:8f:a8:36:86:fe:48:84:14:74:26:a8:5c:63:6f:
         f1:94:c0:b3:1b:de:ce:07:ed:54:a1:a3:c9:6d:ef:36:42:99:
         9d:87:6e:78
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDecwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU1MDdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDlDRTRCRkRCNzdBMzg3
MTk5RUZDMDJFNTlDMThGQzU2RDdFN0E3NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWLGox0ZgIPVbiW1xd3mI8Zqurj3VAg1KHn4h8oY1ZXdJciXGT
disEE97y3FXM89heWAfcI1LgGBOoqvG7TtR7R7l4EA8eULEJiblk47kgDUPG2P4y
WPIQ+8FoVoXFYQpCVuPVnvORz2CO+sppI1n48GttRhdTOhh0pKc4yo1eiVmW4hV9
V2gXbYuG6QntNYRqsL0P1u8wBveoq4HPbQVN4kn8BWwluQ2txtHrOy+8tYx1Ld4H
ZDKoAs//kYrPIiRHJREsL6g5eiNBimF77IqG68eRVYY5Vz29Mk61GlXh6FGeiLqk
HCJdNCcIM50cJXJ/tzO7kD5U+4skC2wBRDD7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUnOS/23ejhxme/ALlnBj8Vtfnp0EwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL25PU18yM2VqaHhtZV9BTGxu
Qmo4VnRmbnAwRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wsQwDQYJKoZIhvcNAQELBQADggEBAClw/dgo5L9y7rfLiQke74dwchF5SYMPbBrt
xfkDJHd+wwlm1GOELJ8B066q1QmwCQezrKnGheFB60eC8v4LQeABiyYLcWVO4EJ0
fiC/uK9opEnJR/LRcl7lOtTgTlaR+J06ouZgnYPUJoZ2s3k2P+PsbEChNok7xBol
7ZjbVB8k5hO7ZIRfyKEkmoZOq+OZ4oCQpfHub51Qjha08bhOQ0xDmqA/TuhKDkH1
ML0xR3YWh16NTP0zT7Q85gLRP7olT8NSc+ejHkm/9dg7CGx5EPtHWV70/+BE5l5Z
NLSPqDaG/kiEFHQmqFxjb/GUwLMb3s4H7VSho8lt7zZCmZ2Hbng=
-----END CERTIFICATE-----