Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sadg5Y8sN9H5qLJ586JdCOxHJMQ.roa
File:                     sadg5Y8sN9H5qLJ586JdCOxHJMQ.roa (raw, json)
Hash identifier:          cxU+1iZc7G+nRMV+nDZVJb39vlrbuj41Bc+ASLIcNic=
Subject key identifier:   B1:A7:60:E5:8F:2C:37:D1:F9:A8:B2:79:F3:A2:5D:08:EC:47:24:C4
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0DCB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sadg5Y8sN9H5qLJ586JdCOxHJMQ.roa
Signing time:             Tue 29 Sep 2020 09:55:00 +0000
ROA not before:           Tue 29 Sep 2020 09:55:00 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.192.144.192/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3531 (0xdcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:00 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B1A760E58F2C37D1F9A8B279F3A25D08EC4724C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:fb:f8:41:e0:e3:4a:e2:2d:ac:bf:88:30:58:
                    88:18:00:10:b2:89:96:78:0b:45:9b:ef:cd:eb:3b:
                    37:09:02:83:4f:38:ea:01:d9:44:77:fd:85:4e:02:
                    eb:8c:97:47:64:c4:b3:fd:f6:8c:de:8e:1e:e7:75:
                    00:74:1d:8e:cd:ee:12:b8:6c:32:cc:71:b0:2a:8f:
                    a3:24:ee:ef:af:08:b7:69:ca:00:d0:ed:e2:46:41:
                    49:15:d3:df:4e:5c:fc:31:57:40:76:1e:fc:37:ef:
                    68:ad:1f:e3:57:da:9e:b1:aa:36:c1:15:e7:63:d3:
                    82:a6:55:80:be:c9:17:2d:35:60:f8:d0:1e:0f:f8:
                    57:26:94:d2:e4:66:77:f5:34:c1:0d:1b:08:79:d9:
                    73:6f:da:3d:ae:43:43:d1:a9:6a:2b:bd:1a:c7:e0:
                    68:5f:a9:d3:b4:14:6b:13:1f:6d:ca:a7:c2:c3:2d:
                    e2:6a:9f:bc:f2:d7:3a:55:78:cd:27:af:b1:26:8b:
                    89:64:68:8a:d2:5a:38:a1:40:42:11:d7:ef:1e:89:
                    cb:a6:ac:6a:d6:95:1c:f3:6c:83:d1:5e:e2:44:a3:
                    06:05:9f:5c:9f:0f:97:f9:e3:47:a2:6f:1c:e1:fa:
                    cd:8d:05:bd:70:63:2a:e4:cd:1e:97:82:49:d3:31:
                    e4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A7:60:E5:8F:2C:37:D1:F9:A8:B2:79:F3:A2:5D:08:EC:47:24:C4
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sadg5Y8sN9H5qLJ586JdCOxHJMQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.144.192/26

    Signature Algorithm: sha256WithRSAEncryption
         87:0d:91:f4:2a:dc:79:5a:5f:ab:d2:ad:33:e8:2f:5f:c7:ef:
         32:6f:c2:7b:9e:57:11:cc:79:f2:77:8d:31:80:89:69:f4:5a:
         d0:db:b5:a4:64:b3:a1:60:ad:d5:36:95:69:4a:df:83:de:36:
         55:a0:bf:e8:46:fe:13:5f:83:c7:11:a8:8e:bf:e7:9a:5a:5d:
         90:58:af:b0:b5:e7:7b:e0:97:e4:24:da:0b:8e:65:ec:b1:4c:
         52:e1:66:6e:03:6c:f4:86:43:4b:0e:6c:0f:51:f3:e6:93:21:
         28:c7:11:9e:81:05:35:34:ba:85:4f:ea:42:76:0b:8e:ae:d5:
         ca:76:9e:5a:05:f9:c1:e0:85:b6:5f:53:fb:d6:47:ae:a7:dc:
         4e:dd:24:67:bc:d0:fb:00:7a:09:90:e2:09:95:2d:8c:e0:36:
         bd:5e:25:37:cf:2d:11:ef:fc:20:2d:46:c7:08:ef:17:78:a7:
         ff:fb:40:27:27:7a:00:1c:93:b4:0d:c7:47:10:5d:10:ac:c5:
         9a:f3:ab:4a:0c:c4:85:1a:de:9e:28:ee:35:ea:b8:44:30:f1:
         53:e0:ab:b3:c1:76:a3:80:5d:01:b6:69:00:cb:ac:bd:f4:9f:
         e8:8b:22:13:f5:38:b1:6a:d2:e2:ee:be:9b:a8:c2:11:2a:6f:
         dc:d4:1f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----