Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rcNJabLfPBc5T-xt34R35ANAc1M.roa
File:                     rcNJabLfPBc5T-xt34R35ANAc1M.roa (raw, json)
Hash identifier:          KJf6yqarMdwZLN6hDHWupaYK6BQc05f31aBJxRp9v6w=
Subject key identifier:   AD:C3:49:69:B2:DF:3C:17:39:4F:EC:6D:DF:84:77:E4:03:40:73:53
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D2D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rcNJabLfPBc5T-xt34R35ANAc1M.roa
Signing time:             Tue 29 Sep 2020 09:54:16 +0000
ROA not before:           Tue 29 Sep 2020 09:54:16 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.16.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3373 (0xd2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:16 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=ADC34969B2DF3C17394FEC6DDF8477E403407353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:63:3a:79:fd:5b:2d:b0:c0:db:62:b2:ad:bf:
                    bc:bb:46:ae:6a:9f:5e:cc:13:12:82:9d:3d:d7:29:
                    54:8e:32:7c:5f:3b:4d:b9:45:e6:a5:76:48:df:d4:
                    d2:0e:89:2c:3f:39:66:ac:d0:8a:9b:fb:63:95:52:
                    fb:13:38:81:31:09:f5:13:2f:b6:b7:f9:f0:27:30:
                    c2:c6:dc:5c:02:ed:c3:6f:6d:ae:a2:2c:b0:63:f1:
                    a6:27:16:c7:2f:42:57:a9:04:02:49:8a:5c:8b:50:
                    dc:d2:8f:d8:e7:e7:bd:38:85:ee:77:5a:b6:a3:15:
                    ec:87:d9:a7:00:41:f2:69:7b:fc:bd:d6:a8:f0:be:
                    73:f2:0c:a1:d2:77:87:3e:56:ef:08:41:10:2a:14:
                    79:a1:5f:eb:a0:c1:b6:6d:79:c7:1a:ec:48:df:4c:
                    44:34:10:59:57:dd:1e:31:5a:5b:17:1b:d0:00:58:
                    7f:31:30:17:79:0d:2d:6a:67:48:df:2a:b7:a1:f1:
                    20:7d:06:ab:b5:53:8b:5c:64:c2:a4:fa:ab:18:a8:
                    43:72:aa:72:97:2f:a4:2b:21:63:18:75:74:df:38:
                    a5:a1:c7:d9:c7:e3:20:3d:a8:0e:be:57:ab:6c:98:
                    75:27:ad:be:95:79:d2:54:29:a2:59:2f:19:c9:18:
                    49:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C3:49:69:B2:DF:3C:17:39:4F:EC:6D:DF:84:77:E4:03:40:73:53
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rcNJabLfPBc5T-xt34R35ANAc1M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:0e:00:40:67:bd:34:be:2d:cd:1a:b4:03:ac:cd:29:97:28:
         cb:ce:06:66:16:b9:3d:af:5f:00:19:16:41:7f:1b:b2:a8:98:
         32:f5:e0:37:66:af:6f:65:e8:c0:f5:37:f2:13:c1:9f:18:39:
         de:c3:99:e4:db:de:b7:df:0d:80:32:12:21:cd:30:0b:e1:40:
         d7:f2:2e:96:67:84:ab:82:6c:b4:77:e3:8c:bb:60:24:fc:cf:
         95:03:78:41:10:28:06:6a:63:74:6e:3a:c3:92:8c:a4:db:48:
         d3:26:20:ae:ce:40:e5:13:26:8a:dc:7a:56:59:7c:06:8b:56:
         60:63:a5:32:fd:9a:b8:21:3a:e7:2c:af:4f:bd:d3:d8:08:35:
         e0:1a:d9:db:8a:5f:09:82:7e:cc:98:d9:56:02:a1:e7:38:45:
         81:05:b3:ae:07:22:24:42:81:37:ad:81:49:dc:7d:a0:0b:08:
         b2:04:31:99:7a:57:ba:02:e2:1f:63:24:db:26:7d:3c:e4:7c:
         9a:db:43:63:df:22:13:2d:d5:98:cf:52:d4:e5:f1:6d:75:bb:
         fa:5e:12:4a:59:71:8b:b5:dc:b5:3d:72:b0:77:17:cb:4b:7a:
         8c:29:a2:16:4d:cb:e4:4b:d2:8b:92:7d:5a:f0:62:ca:50:89:
         00:c2:61:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----