Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tCJv7lIKpP25GQcLCI_0kpjJcIE.roa
File:                     tCJv7lIKpP25GQcLCI_0kpjJcIE.roa (raw, json)
Hash identifier:          fEVL8VjXWven97nylrmCCE3E/i2NeIO6yIt9O3uXDqc=
Subject key identifier:   B4:22:6F:EE:52:0A:A4:FD:B9:19:07:0B:08:8F:F4:92:98:C9:70:81
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0DB6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tCJv7lIKpP25GQcLCI_0kpjJcIE.roa
Signing time:             Tue 29 Sep 2020 09:54:52 +0000
ROA not before:           Tue 29 Sep 2020 09:54:52 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        123.195.192.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3510 (0xdb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:52 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B4226FEE520AA4FDB919070B088FF49298C97081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:37:b7:1e:52:da:d1:ca:4a:d7:bc:0e:bc:d8:
                    3b:6b:00:a9:da:f5:f2:c4:0a:7c:70:e7:82:33:43:
                    66:82:0e:5d:06:8a:c6:b0:e8:7a:cc:9d:f6:35:65:
                    61:9f:91:2c:6a:1a:a2:26:35:90:63:21:af:c8:71:
                    d3:70:57:95:37:88:19:dd:bf:3f:d3:b6:9c:87:38:
                    eb:ca:3a:40:8f:0e:9f:c9:d1:d3:27:98:a0:53:12:
                    a3:94:9c:3c:8b:d6:ee:a8:d3:21:da:03:ae:68:df:
                    a2:b2:67:fb:e8:bd:03:64:14:64:34:e8:60:0c:10:
                    7c:1a:55:5c:14:8e:96:f6:3e:35:76:0d:1c:55:69:
                    d7:0a:a9:89:9e:bb:58:ef:98:ff:b8:3d:bb:16:d1:
                    4a:bb:64:db:2f:c5:3f:bf:4e:4e:a6:45:24:ce:5c:
                    2d:b3:72:a6:ef:5f:0f:ba:a9:43:15:38:40:0c:15:
                    1f:b9:57:1d:a6:d4:e0:dd:d1:66:65:2d:2a:2b:fe:
                    99:25:64:48:eb:0b:5b:53:33:3b:29:0a:3d:23:cd:
                    a8:39:3d:da:87:7b:d5:48:cb:51:91:51:8d:df:c6:
                    a3:76:4b:b9:08:1f:38:da:93:6a:93:80:1e:c3:79:
                    fc:b4:17:c0:4d:b2:85:de:21:e8:fb:8d:17:96:93:
                    1e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:22:6F:EE:52:0A:A4:FD:B9:19:07:0B:08:8F:F4:92:98:C9:70:81
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tCJv7lIKpP25GQcLCI_0kpjJcIE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8d:7d:8c:01:80:fb:f0:3a:68:40:b2:c5:a0:e2:7d:01:d6:c9:
         6d:70:de:6e:4a:53:8e:bb:b6:bf:43:ee:21:8a:d4:b2:87:ae:
         6b:e6:0d:dc:83:76:a6:5c:5c:42:83:60:1a:4d:fd:99:44:34:
         cd:ae:5c:0f:d1:bb:d2:65:8d:7a:98:0c:aa:96:8b:15:f0:b3:
         9c:b4:61:19:7c:ec:db:37:2c:44:52:0e:94:46:b9:52:7c:35:
         7d:86:43:cc:da:8e:02:82:50:a3:90:e3:71:ad:52:48:19:e2:
         8f:8f:07:f6:d2:97:20:e8:95:16:2a:7a:26:c5:c0:77:51:6b:
         30:ec:9f:4f:f4:ee:e4:85:bf:f7:10:8c:19:6e:e2:ce:36:e7:
         e1:55:a1:07:b0:9f:9c:9e:d3:aa:5d:bb:8c:85:2e:83:9b:1b:
         28:89:13:5b:0d:b6:44:2f:fd:5b:21:ee:1b:5a:95:42:62:8e:
         cb:11:63:25:e4:73:36:ff:cd:bb:fa:61:b7:a3:1c:81:32:21:
         f0:62:be:db:63:30:09:67:b8:d9:c1:60:9f:a8:da:08:0c:0c:
         71:62:dc:b8:3a:d7:f5:28:8f:70:c6:9d:ac:1f:ab:2e:29:1a:
         b8:89:be:69:64:df:a5:c0:fd:f6:dc:14:45:e4:6f:5b:cd:1c:
         48:26:df:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----