Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p0t-QqabqRysYDNTcKIdlHE30Lg.roa
File:                     p0t-QqabqRysYDNTcKIdlHE30Lg.roa (raw, json)
Hash identifier:          28GJo24UZa3Xn/Sq2Mm0sfABfWnagu9MyDGawYJcGFE=
Subject key identifier:   A7:4B:7E:42:A6:9B:A9:1C:AC:60:33:53:70:A2:1D:94:71:37:D0:B8
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D65
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p0t-QqabqRysYDNTcKIdlHE30Lg.roa
Signing time:             Wed 29 Sep 2021 02:48:58 +0000
ROA not before:           Wed 29 Sep 2021 02:48:58 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.194.232.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7525 (0x1d65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:58 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=A74B7E42A69BA91CAC60335370A21D947137D0B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:11:7a:68:11:07:e9:11:55:b3:e6:c4:32:e7:
                    4c:38:a2:77:81:7f:1b:c3:01:82:bc:94:08:2d:a6:
                    e1:af:a4:c1:98:e1:05:fb:ea:8c:f8:ae:f2:ac:72:
                    a4:48:25:f1:f7:d2:3f:57:c9:84:7a:16:f1:c0:68:
                    38:21:f0:d9:95:cc:ba:41:69:37:c1:c9:d1:6b:23:
                    64:50:a1:85:8e:d0:72:4b:68:97:91:e5:4a:34:d7:
                    52:51:ae:58:3f:2a:fc:39:d4:33:d9:84:a5:0e:05:
                    ec:41:f0:3b:87:88:7a:cb:6e:56:4b:76:d9:d5:84:
                    3f:c1:82:b6:8a:ee:87:69:51:5f:21:4f:53:7a:94:
                    51:6c:95:22:43:78:81:af:9e:53:8d:56:be:87:a0:
                    7a:2e:7c:af:b2:c9:dd:be:37:16:4f:36:94:c7:26:
                    a9:eb:a7:bb:33:d0:01:7a:a9:f5:ee:eb:a0:26:31:
                    e5:92:ab:8c:61:fe:98:9c:3a:a8:a6:6a:48:33:c0:
                    8c:28:4c:40:da:e1:95:15:ba:96:88:32:92:b3:e4:
                    eb:c8:b0:94:2b:34:fb:3b:5a:b9:c8:ae:fd:31:06:
                    24:79:97:27:96:dd:39:9b:62:b3:a7:04:d6:11:79:
                    0c:4d:f5:d5:af:1e:f9:79:41:01:43:9c:23:26:a2:
                    9e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:4B:7E:42:A6:9B:A9:1C:AC:60:33:53:70:A2:1D:94:71:37:D0:B8
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p0t-QqabqRysYDNTcKIdlHE30Lg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:29:4c:56:99:c0:6a:2d:03:d0:0e:85:09:e2:4b:c0:70:4b:
         ad:74:a0:7d:47:6c:66:20:05:6e:26:91:80:73:d9:aa:33:e3:
         07:89:da:6a:34:70:5d:bf:48:ff:f1:56:bd:6e:cc:40:62:db:
         30:6b:96:60:71:6e:b9:8c:a2:b9:0b:23:19:01:d9:1c:0b:5b:
         8b:e2:4f:88:a5:64:5e:9f:c1:03:fb:7f:71:f5:8d:d1:02:fc:
         7f:65:87:2c:c9:57:88:17:a6:85:32:bd:24:0e:59:45:03:74:
         1d:26:b0:1c:53:e7:23:30:45:d4:09:fc:78:62:bc:f1:9d:89:
         84:2c:74:05:90:81:f2:54:a2:fa:90:7c:e3:14:41:88:da:e4:
         fd:ed:ee:b9:34:c8:a9:bc:a9:4c:47:3c:2b:b0:6c:54:27:6d:
         65:77:c8:0b:fa:dc:e7:fa:31:57:67:23:3d:b0:66:6e:0c:92:
         3b:78:6d:b8:b1:9d:51:20:3a:d7:8d:ff:14:cd:a6:da:16:ce:
         cd:09:1f:6e:47:00:3b:4c:ec:c0:a8:fa:51:d3:58:a5:a2:b8:
         c6:f2:a7:11:a0:32:ea:75:a2:65:a5:d0:37:45:d5:10:ae:ae:
         bf:a3:47:c9:b9:03:8e:52:1f:bc:22:c5:9b:93:20:c5:a9:6c:
         96:ca:d2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----