Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rVoxxWQpz5i2mCeZGA64aTeYHrg.roa
File:                     rVoxxWQpz5i2mCeZGA64aTeYHrg.roa (raw, json)
Hash identifier:          hq9xOTctRCWzG3rw3Wq1PGP3fK3eHcqMSKeA6d4WzRc=
Subject key identifier:   AD:5A:31:C5:64:29:CF:98:B6:98:27:99:18:0E:B8:69:37:98:1E:B8
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       15FF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rVoxxWQpz5i2mCeZGA64aTeYHrg.roa
Signing time:             Sun 07 Feb 2021 12:07:43 +0000
ROA not before:           Sun 07 Feb 2021 12:07:43 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.12.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5631 (0x15ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:07:43 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=AD5A31C56429CF98B6982799180EB86937981EB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:70:fe:21:81:be:36:30:aa:93:fd:8d:47:e1:
                    1e:13:3e:59:91:bc:84:f9:a5:82:be:87:5f:cd:7f:
                    68:c2:02:fa:e1:e1:2f:14:e6:8f:6c:08:a7:39:ab:
                    b0:fd:31:8c:bb:8f:40:43:46:69:4f:04:b5:74:fa:
                    bc:07:7b:24:df:61:71:1a:00:09:96:46:6e:a6:7a:
                    ec:70:d6:f6:ef:49:0c:fa:bf:e0:51:b9:43:a8:8f:
                    63:86:25:ee:e9:17:b3:ac:c0:db:8e:53:9b:6b:cc:
                    57:d4:c9:18:f2:a8:02:ee:7b:6a:eb:35:30:10:b4:
                    47:8a:5e:ad:b0:07:13:06:35:4c:d0:8c:cb:25:41:
                    98:e7:89:59:be:89:a0:b7:cf:bc:83:75:fc:db:be:
                    63:ee:0f:ea:81:a2:49:6e:bb:e6:02:ef:68:71:12:
                    38:47:46:4f:77:4d:24:db:c9:4e:2a:2e:2a:3d:b9:
                    fa:b3:4d:20:cc:d8:29:aa:65:7a:34:dc:f6:75:dd:
                    19:05:30:4d:90:f2:d5:72:4f:a2:55:2b:bb:fd:07:
                    52:ae:0d:30:a7:0d:b4:06:ef:95:76:7c:d1:fa:71:
                    99:a4:ab:87:20:1d:9c:47:9f:b3:46:42:e1:fe:7c:
                    a4:13:ab:a7:79:74:59:c5:54:69:29:57:bf:ef:a0:
                    a5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:5A:31:C5:64:29:CF:98:B6:98:27:99:18:0E:B8:69:37:98:1E:B8
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rVoxxWQpz5i2mCeZGA64aTeYHrg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:0f:a5:bf:e8:2a:00:25:a0:45:7a:ba:72:5b:98:73:9c:90:
         c8:6c:eb:07:a7:14:3f:a3:22:26:90:e4:c5:10:12:63:e3:d8:
         0a:f0:47:4f:e7:50:81:11:e6:b0:03:6e:0e:94:49:27:b1:54:
         d9:c9:7b:2f:ad:f5:af:ad:13:53:18:d1:64:d0:90:9e:50:ae:
         9c:2a:0a:91:27:16:e1:5f:65:d0:cd:20:9f:b9:0c:eb:5c:a0:
         8a:2c:03:f8:00:0b:ee:3e:b8:29:eb:cc:c5:28:88:fa:54:d0:
         13:b1:a7:57:18:e7:a6:18:c2:f2:cd:72:d5:d6:7b:54:b7:77:
         b5:46:99:0d:28:4b:5a:aa:aa:da:ec:f3:21:c8:5a:00:3a:0c:
         f8:d5:05:19:d2:9a:9f:99:eb:f2:48:0b:af:3f:0f:79:fe:14:
         a7:24:7d:b9:60:87:30:5c:f4:1d:8c:f0:5f:75:e5:12:7f:6c:
         d9:b1:96:38:73:8d:19:3a:0a:db:92:28:e4:53:a7:d9:cb:18:
         54:fb:2d:5d:ce:4c:fb:2a:2d:db:d1:d0:2d:44:17:3e:bc:a2:
         20:05:77:38:b2:12:b5:07:7b:6d:37:7f:e2:74:43:47:ab:b5:
         60:e4:55:f4:2f:08:0d:df:8e:d4:d4:90:43:34:20:40:9e:a0:
         13:a2:d2:8f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFf8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjA3NDNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEFENUEzMUM1NjQyOUNG
OThCNjk4Mjc5OTE4MEVCODY5Mzc5ODFFQjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKcP4hgb42MKqT/Y1H4R4TPlmRvIT5pYK+h1/Nf2jCAvrh4S8U
5o9sCKc5q7D9MYy7j0BDRmlPBLV0+rwHeyTfYXEaAAmWRm6meuxw1vbvSQz6v+BR
uUOoj2OGJe7pF7OswNuOU5trzFfUyRjyqALue2rrNTAQtEeKXq2wBxMGNUzQjMsl
QZjniVm+iaC3z7yDdfzbvmPuD+qBokluu+YC72hxEjhHRk93TSTbyU4qLio9ufqz
TSDM2CmqZXo03PZ13RkFME2Q8tVyT6JVK7v9B1KuDTCnDbQG75V2fNH6cZmkq4cg
HZxHn7NGQuH+fKQTq6d5dFnFVGkpV7/voKXnAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUrVoxxWQpz5i2mCeZGA64aTeYHrgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3JWb3h4V1FwejVpMm1DZVpH
QTY0YVRlWUhyZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wwwwDQYJKoZIhvcNAQELBQADggEBAHkPpb/oKgAloEV6unJbmHOckMhs6wenFD+j
IiaQ5MUQEmPj2ArwR0/nUIER5rADbg6USSexVNnJey+t9a+tE1MY0WTQkJ5Qrpwq
CpEnFuFfZdDNIJ+5DOtcoIosA/gAC+4+uCnrzMUoiPpU0BOxp1cY56YYwvLNctXW
e1S3d7VGmQ0oS1qqqtrs8yHIWgA6DPjVBRnSmp+Z6/JIC68/D3n+FKckfblghzBc
9B2M8F915RJ/bNmxljhzjRk6CtuSKORTp9nLGFT7LV3OTPsqLdvR0C1EFz68oiAF
dziyErUHe203f+J0Q0ertWDkVfQvCA3fjtTUkEM0IECeoBOi0o8=
-----END CERTIFICATE-----