Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qYhISdeprNiCLBXO-6jVx8Xc_sI.roa
File:                     qYhISdeprNiCLBXO-6jVx8Xc_sI.roa (raw, json)
Hash identifier:          doPeVF/KXlkjsIUbhT/QafE2K26D0xwVWIG3N4l3uJg=
Subject key identifier:   A9:88:48:49:D7:A9:AC:D8:82:2C:15:CE:FB:A8:D5:C7:C5:DC:FE:C2
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B40
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qYhISdeprNiCLBXO-6jVx8Xc_sI.roa
Signing time:             Wed 29 Sep 2021 02:46:21 +0000
ROA not before:           Wed 29 Sep 2021 02:46:21 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.194.200.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6976 (0x1b40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:21 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=A9884849D7A9ACD8822C15CEFBA8D5C7C5DCFEC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1b:5c:5c:69:5e:e6:0a:5d:d1:b6:20:43:a4:
                    97:55:0c:e2:b6:d2:d4:d6:49:26:1c:7c:ad:2f:31:
                    be:cf:1d:39:5b:91:b6:7e:62:b5:0d:a3:49:2b:89:
                    e3:1a:42:a8:b7:8d:9a:58:6b:8d:43:46:41:90:db:
                    9a:2b:8e:9c:bd:8d:9a:68:c3:7e:30:24:8d:09:97:
                    4e:ac:5a:29:89:07:0b:8d:8c:96:4e:8a:23:87:f8:
                    30:fb:77:97:70:cf:4f:8d:8c:79:f8:87:cd:e1:29:
                    7f:e2:57:28:82:91:58:a7:c6:09:1d:98:cb:27:d2:
                    34:1a:a9:e6:a7:b9:5f:5a:e5:5f:43:ca:6f:91:58:
                    01:3b:19:a6:c7:8b:40:37:f6:03:8f:97:6e:a3:91:
                    f9:f1:2b:6f:7b:48:e7:9c:21:00:48:3f:80:f3:52:
                    a7:83:d5:a5:47:4c:a9:46:ef:5c:61:61:ac:06:16:
                    bf:6e:6d:b3:eb:09:c7:d1:7f:28:44:37:72:29:71:
                    3a:ae:e1:15:87:91:f8:2c:b2:1b:3e:dd:75:0d:ed:
                    a2:a5:4a:aa:89:20:bd:66:3e:65:4e:3e:10:24:02:
                    79:39:a4:68:51:e0:18:18:80:6e:45:5e:25:2a:1d:
                    52:64:5c:a5:ed:66:51:6c:0c:ab:4d:bf:8a:7c:d5:
                    9f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:88:48:49:D7:A9:AC:D8:82:2C:15:CE:FB:A8:D5:C7:C5:DC:FE:C2
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qYhISdeprNiCLBXO-6jVx8Xc_sI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:f1:16:d7:49:83:a7:ce:07:af:62:51:a4:d6:93:34:f3:57:
         19:36:fb:f4:b6:a2:c4:2f:15:69:90:a5:27:37:9c:75:f7:07:
         ab:0d:17:db:c0:84:cb:ab:29:c9:a5:71:06:19:9a:65:d9:46:
         77:f5:85:af:d6:22:96:79:57:63:15:da:b3:02:45:c5:38:97:
         77:c2:00:1f:fa:29:c1:63:8a:7d:7b:3b:3e:ae:74:06:43:c3:
         be:7b:82:a3:9e:7f:b8:79:b9:1c:7c:21:68:56:11:4c:a1:4a:
         9c:42:a5:b7:79:3a:1a:51:1c:ee:f3:24:bb:f7:23:ca:af:a4:
         3c:81:00:da:28:6a:d6:58:61:3f:8b:18:1c:d8:31:47:2d:58:
         f0:72:50:88:01:88:36:4e:0d:8d:19:89:a1:5d:fc:11:92:62:
         3a:44:ef:0b:15:70:7e:0e:a3:9f:f2:ce:c6:d4:4c:f3:70:66:
         58:cd:45:74:15:94:b9:1c:bd:ad:1d:52:7b:fc:c5:4f:9a:3b:
         f0:34:f3:88:0a:34:e4:15:35:73:53:f5:ce:27:29:2e:53:f2:
         f8:64:a2:56:c1:d2:26:f1:34:05:e7:ee:9d:b7:11:8b:63:89:
         b3:21:84:d9:94:52:da:87:68:8d:91:f8:35:49:29:08:91:8e:
         71:e6:f5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----