Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tzMUhJvMjjk07OVPtiA-dy-54PU.roa
File:                     tzMUhJvMjjk07OVPtiA-dy-54PU.roa (raw, json)
Hash identifier:          BI29RfUnX73sThepPM3xR5aDuTUwb2NhhKqzS3sMHG8=
Subject key identifier:   B7:33:14:84:9B:CC:8E:39:34:EC:E5:4F:B6:20:3E:77:2F:B9:E0:F5
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       17CF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tzMUhJvMjjk07OVPtiA-dy-54PU.roa
Signing time:             Sun 07 Feb 2021 12:23:45 +0000
ROA not before:           Sun 07 Feb 2021 12:23:45 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.204.0/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6095 (0x17cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:23:45 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B73314849BCC8E3934ECE54FB6203E772FB9E0F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0c:0e:01:60:15:01:fd:b8:8b:fc:90:f4:98:
                    2a:29:b0:68:56:f0:96:8c:a4:79:6a:60:27:cf:b6:
                    b4:9e:15:7e:68:d9:2c:11:a7:9c:21:98:80:0f:a2:
                    19:b6:4d:29:7e:25:5d:4c:6c:41:8b:03:fb:e5:ea:
                    80:aa:04:4c:04:ce:2c:16:67:65:80:93:a2:d4:70:
                    22:fd:43:d3:5b:58:a5:6d:c3:29:5d:5b:2c:1e:8f:
                    93:21:2e:8c:07:2a:a3:f1:ae:a9:b4:c6:d4:9b:f4:
                    93:24:14:ae:66:46:e2:92:f6:60:a5:53:80:8e:15:
                    ec:fc:b5:6d:82:8a:95:14:27:09:e6:fc:e2:b4:cb:
                    d4:04:b3:ec:06:07:dd:16:28:e3:c7:99:b8:ca:e4:
                    e8:72:dd:61:d9:ef:84:d4:65:8a:3d:9e:53:f7:a7:
                    d2:e7:22:94:d3:00:ab:9d:de:77:c3:22:f9:7a:59:
                    f5:11:a3:b4:80:42:2e:ec:cc:bc:4e:08:fa:67:f2:
                    0d:89:a3:d0:6c:ac:5e:ab:b4:f2:42:5a:16:be:c4:
                    a6:9a:76:0e:a6:76:17:35:81:ae:d8:83:41:3b:d7:
                    0f:7a:d3:e6:2c:48:2a:15:00:9f:88:45:58:34:cc:
                    22:20:31:78:5c:dd:39:11:ec:c9:b2:e5:8f:7f:3e:
                    c5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:33:14:84:9B:CC:8E:39:34:EC:E5:4F:B6:20:3E:77:2F:B9:E0:F5
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tzMUhJvMjjk07OVPtiA-dy-54PU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.204.0/26

    Signature Algorithm: sha256WithRSAEncryption
         a3:d5:83:05:57:82:87:68:d7:dd:6d:5c:a7:60:9c:10:e5:e3:
         08:ed:85:98:cc:3d:a1:1b:30:1e:6a:9c:45:c2:82:8d:b8:dd:
         ed:31:d1:b7:01:c8:70:11:3e:de:fe:ac:3f:23:db:9f:cc:df:
         f9:12:c5:a7:fb:da:fa:06:64:ae:7a:53:5f:32:d2:0e:b3:58:
         ba:ee:7c:79:64:b0:2b:fa:fa:44:ba:e7:22:8a:76:25:ae:92:
         7e:21:52:82:eb:5e:a9:35:da:a0:98:94:86:25:f4:3f:85:57:
         e6:55:1e:e8:82:b0:3d:97:3e:36:6c:90:52:50:4f:37:1e:f5:
         a0:fd:aa:39:c1:fa:ea:8f:4c:b4:04:9e:c8:c3:ae:10:a9:63:
         4e:d6:ba:c6:21:bd:78:5c:70:81:ae:8f:e6:61:a6:4a:52:ad:
         e8:3d:9c:10:8f:d3:2f:1e:40:92:61:32:fc:fa:1a:18:cb:62:
         51:b7:85:f1:48:ea:0c:a2:12:b6:1d:bb:f4:ed:19:b7:7c:12:
         6c:91:1d:0c:92:ea:1d:91:ab:84:53:fa:ba:99:f7:18:0c:ad:
         f4:dc:44:fa:56:19:6c:63:99:ed:de:15:e8:1b:fa:cd:8e:ef:
         a6:a7:b0:d7:1d:73:bd:b9:07:6d:95:4e:d1:d1:b5:c6:49:93:
         da:aa:f4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----