Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/orEW7mw-iIYnp8JZqSP3FeS9sow.roa
File:                     orEW7mw-iIYnp8JZqSP3FeS9sow.roa (raw, json)
Hash identifier:          xVR5XkEkOfI+2/Zdwtbclau8wGxsKanAOhbU3g9UScw=
Subject key identifier:   A2:B1:16:EE:6C:3E:88:86:27:A7:C2:59:A9:23:F7:15:E4:BD:B2:8C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D4A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/orEW7mw-iIYnp8JZqSP3FeS9sow.roa
Signing time:             Wed 29 Sep 2021 02:48:50 +0000
ROA not before:           Wed 29 Sep 2021 02:48:50 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        123.195.192.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7498 (0x1d4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:50 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=A2B116EE6C3E888627A7C259A923F715E4BDB28C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:50:32:5d:55:9e:9c:0f:dc:16:b3:ea:6d:80:
                    3a:2a:04:0a:90:7a:93:2c:ca:fd:83:97:2e:68:52:
                    99:ab:cb:6b:3f:cc:81:e3:8f:ca:39:83:6a:09:67:
                    df:7f:c3:ba:2c:69:e6:7a:2a:f1:81:b5:c7:4a:05:
                    0d:1c:a9:98:ab:e8:ec:29:15:f4:77:4d:21:9a:fb:
                    2a:1f:61:57:3a:bd:be:7b:0e:9a:b5:ca:86:59:7d:
                    50:32:31:27:dd:a0:53:e4:fd:aa:4b:ed:66:32:e8:
                    cf:27:e3:43:cd:56:f7:74:0f:4e:53:48:fa:0b:13:
                    95:6b:f1:64:52:0d:67:b8:c4:6a:6e:d4:d7:48:49:
                    96:42:df:9b:01:dc:13:0e:e9:fe:d3:88:11:5d:ab:
                    93:e6:e2:bc:83:fa:d1:ad:70:0f:9a:ed:db:20:e5:
                    69:74:2c:23:6d:6e:ba:f1:6d:d2:6a:64:24:3f:20:
                    10:3b:1c:32:66:f1:bc:04:cb:26:4f:03:be:6a:b0:
                    4e:95:a6:ac:de:76:d3:5d:21:af:58:6e:9f:df:18:
                    2d:42:86:6e:6f:7b:b1:38:37:f9:85:09:bc:bb:b0:
                    b2:f9:81:88:44:31:79:f8:92:c2:d1:12:35:3f:e7:
                    55:54:b1:83:f2:70:54:70:3c:dc:60:eb:a9:00:89:
                    bd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B1:16:EE:6C:3E:88:86:27:A7:C2:59:A9:23:F7:15:E4:BD:B2:8C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/orEW7mw-iIYnp8JZqSP3FeS9sow.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7a:e5:cd:14:85:ce:f3:82:c3:59:4e:cc:d6:53:db:9d:ef:f3:
         8a:5d:16:d9:34:33:a6:a2:8e:e2:17:55:33:71:86:f6:cc:31:
         e2:e3:7e:9f:05:91:fc:24:55:49:32:47:90:2e:06:b7:2f:9d:
         5f:0d:e0:7d:5f:a4:a8:ff:b9:45:fe:ed:6d:46:32:9d:29:18:
         82:7e:79:89:a3:5c:7a:c9:c2:7c:9b:74:b2:d4:dc:67:f6:fd:
         57:11:8f:7e:df:4d:c2:b6:b9:49:b1:b8:2c:77:76:39:b0:75:
         0c:3f:50:d6:09:4c:df:06:d2:c1:a9:cf:94:26:f2:19:b6:57:
         72:b6:f7:aa:91:5f:db:51:7c:67:c9:11:ee:87:23:82:f9:7a:
         b8:11:b6:ac:38:fa:72:a2:cb:30:9d:23:c4:19:4c:4d:12:87:
         a2:7a:25:f4:90:7e:a3:00:88:25:a7:c2:fe:24:88:75:53:24:
         8a:37:62:bd:57:31:0e:2e:4c:bc:f1:1f:23:4d:d9:13:94:fc:
         8b:3b:2b:e1:97:45:5a:50:2e:9c:bb:61:9b:85:6a:77:d7:79:
         4e:07:5f:57:a7:40:73:62:f4:80:eb:9b:7b:e6:53:4a:f0:63:
         a2:26:1c:46:ec:04:b4:2f:96:16:37:03:fa:1d:a0:5e:40:81:
         c0:d4:e9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----