Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tOab6l68SYBWxC-dzSKxabMBJ9M.roa
File:                     tOab6l68SYBWxC-dzSKxabMBJ9M.roa (raw, json)
Hash identifier:          kSpM3b7akVd85OtL0RFN/FGPIL32b6T1UD+3iglGXEE=
Subject key identifier:   B4:E6:9B:EA:5E:BC:49:80:56:C4:2F:9D:CD:22:B1:69:B3:01:27:D3
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       171F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tOab6l68SYBWxC-dzSKxabMBJ9M.roa
Signing time:             Sun 07 Feb 2021 12:16:48 +0000
ROA not before:           Sun 07 Feb 2021 12:16:48 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.193.156.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5919 (0x171f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:16:48 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B4E69BEA5EBC498056C42F9DCD22B169B30127D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1a:67:bd:aa:0d:75:86:bb:01:29:e9:b1:a3:
                    25:53:64:61:29:ad:39:ae:13:1f:2e:e8:7a:c0:85:
                    eb:4f:0a:4a:b0:88:e8:ce:4f:04:8b:4d:96:42:0c:
                    3c:e5:33:52:d8:36:7b:95:c5:8e:e0:d1:2e:3c:84:
                    50:83:b7:3c:51:15:ab:5f:00:77:0e:1b:1c:c9:41:
                    e0:f0:de:a7:89:62:32:09:4d:20:05:ff:64:96:7d:
                    d1:de:0d:ee:af:e4:d8:b5:7a:69:96:69:79:7f:23:
                    e8:ee:74:88:c7:5f:0d:4c:cc:6e:0d:1c:08:b0:8f:
                    6d:71:31:ef:fb:e4:c9:84:b4:b2:41:2e:5e:28:0c:
                    05:ce:dc:25:59:6f:40:4e:53:1a:48:72:2f:1b:f2:
                    82:07:13:0b:3a:e5:c4:02:03:e7:4f:66:f2:7e:51:
                    0e:2c:74:8b:27:01:fc:e0:c8:71:8c:94:10:c6:d3:
                    9b:c4:44:b1:1a:dc:df:82:bd:75:e7:45:fc:04:fe:
                    68:88:bf:e1:f5:93:7b:c3:13:91:6a:58:57:b0:2d:
                    ed:62:21:75:5e:c2:9f:b1:fc:c7:2d:0e:2e:4c:f5:
                    75:97:68:38:61:51:54:50:12:9c:1e:b3:7a:5b:2e:
                    ed:ff:f1:d7:42:e6:2b:4f:8a:16:5d:b6:e2:f6:da:
                    43:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E6:9B:EA:5E:BC:49:80:56:C4:2F:9D:CD:22:B1:69:B3:01:27:D3
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tOab6l68SYBWxC-dzSKxabMBJ9M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:3f:fb:4f:28:5c:82:7c:82:55:20:6d:49:90:90:1e:38:bb:
         f6:49:c8:f2:c1:8a:65:a2:b9:27:c1:75:1b:0f:ef:0a:86:d5:
         80:b3:75:a1:33:8e:c6:12:24:56:4d:16:c4:e8:6d:87:cb:00:
         36:3c:6a:1c:29:cd:5b:85:f2:f4:bf:0b:81:b1:73:d0:ee:13:
         4b:6f:c2:08:3f:05:8d:e2:32:75:b5:ca:7c:47:3d:ec:ea:ba:
         c9:7d:86:8f:d5:31:85:ec:40:77:bd:46:02:59:54:6e:e9:d2:
         80:12:ec:58:ed:46:a0:58:1c:da:7f:75:7e:f5:d2:34:8e:38:
         11:09:7b:93:12:65:d0:0c:0c:96:c4:ad:88:f8:01:0d:60:70:
         52:de:ae:18:43:f2:40:b2:a0:df:fe:87:fc:12:72:73:d2:04:
         28:d8:ca:40:91:c3:1f:ee:1a:87:bb:51:44:41:26:c4:c6:06:
         f8:8d:6e:70:a3:dd:25:31:6b:6b:b6:b5:f3:71:43:4e:bc:0e:
         cb:95:27:86:4a:ae:45:ae:68:03:59:8e:6f:74:6d:b3:7e:4d:
         2b:bf:c8:15:1e:a8:38:84:e8:77:00:c0:97:c1:38:c1:cb:a3:
         cc:f7:a9:b7:22:e7:16:7b:6c:d2:b8:59:1e:3a:01:c2:11:fb:
         bf:c1:ab:22
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFx8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjE2NDhaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEI0RTY5QkVBNUVCQzQ5
ODA1NkM0MkY5RENEMjJCMTY5QjMwMTI3RDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCgGme9qg11hrsBKemxoyVTZGEprTmuEx8u6HrAhetPCkqwiOjO
TwSLTZZCDDzlM1LYNnuVxY7g0S48hFCDtzxRFatfAHcOGxzJQeDw3qeJYjIJTSAF
/2SWfdHeDe6v5Ni1emmWaXl/I+judIjHXw1MzG4NHAiwj21xMe/75MmEtLJBLl4o
DAXO3CVZb0BOUxpIci8b8oIHEws65cQCA+dPZvJ+UQ4sdIsnAfzgyHGMlBDG05vE
RLEa3N+CvXXnRfwE/miIv+H1k3vDE5FqWFewLe1iIXVewp+x/MctDi5M9XWXaDhh
UVRQEpwes3pbLu3/8ddC5itPihZdtuL22kNXAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUtOab6l68SYBWxC+dzSKxabMBJ9MwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3RPYWI2bDY4U1lCV3hDLWR6
U0t4YWJNQko5TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wZwwDQYJKoZIhvcNAQELBQADggEBAAI/+08oXIJ8glUgbUmQkB44u/ZJyPLBimWi
uSfBdRsP7wqG1YCzdaEzjsYSJFZNFsTobYfLADY8ahwpzVuF8vS/C4Gxc9DuE0tv
wgg/BY3iMnW1ynxHPezqusl9ho/VMYXsQHe9RgJZVG7p0oAS7FjtRqBYHNp/dX71
0jSOOBEJe5MSZdAMDJbErYj4AQ1gcFLerhhD8kCyoN/+h/wScnPSBCjYykCRwx/u
Goe7UURBJsTGBviNbnCj3SUxa2u2tfNxQ068DsuVJ4ZKrkWuaANZjm90bbN+TSu/
yBUeqDiE6HcAwJfBOMHLo8z3qbci5xZ7bNK4WR46AcIR+7/BqyI=
-----END CERTIFICATE-----