Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v3UsfsztJJdHwtw-AsrdedQH_1E.roa
File:                     v3UsfsztJJdHwtw-AsrdedQH_1E.roa (raw, json)
Hash identifier:          3Q0ru88vzv9zAV66zRe2skb42F3e2gXpmCA7BONOIk4=
Subject key identifier:   BF:75:2C:7E:CC:ED:24:97:47:C2:DC:3E:02:CA:DD:79:D4:07:FF:51
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1763
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v3UsfsztJJdHwtw-AsrdedQH_1E.roa
Signing time:             Sun 07 Feb 2021 12:18:51 +0000
ROA not before:           Sun 07 Feb 2021 12:18:51 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.233.16.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5987 (0x1763)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:18:51 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BF752C7ECCED249747C2DC3E02CADD79D407FF51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:53:b7:37:73:4d:a8:23:ef:a8:bb:00:69:27:
                    4b:f9:83:97:0c:24:8d:33:51:ce:17:d1:03:5e:1a:
                    41:a2:61:00:6e:23:73:54:f0:09:e7:aa:5d:7b:59:
                    f9:b9:57:eb:76:81:b3:17:eb:05:eb:25:68:b1:a7:
                    83:19:9a:c7:67:25:25:4a:f2:b8:38:37:37:72:31:
                    c8:f5:b9:c4:29:2e:d5:9c:22:73:f9:9e:e4:2e:bd:
                    94:04:84:9e:08:4a:1b:e2:0d:90:b5:ab:1a:06:b5:
                    cc:3b:5b:7e:cf:ab:1a:ea:6b:7a:b2:5b:0e:85:10:
                    d5:63:7d:ef:dd:39:bb:99:99:40:4b:97:08:f2:09:
                    fe:99:e8:12:1f:a3:f1:db:0b:e3:c0:8b:65:f1:76:
                    62:ef:58:97:5e:23:87:28:91:f6:d5:d8:cc:50:f9:
                    ab:4f:db:07:e4:5a:77:f1:56:78:28:e7:02:1d:f8:
                    3a:2c:40:8a:83:ca:68:85:ad:d6:a8:ae:47:e0:c7:
                    cb:eb:cc:7c:91:35:50:b9:32:63:90:16:b6:54:d2:
                    00:18:8e:48:60:ec:1a:33:9c:a5:a6:96:9d:af:55:
                    6b:b8:08:6b:a1:9c:b7:9f:53:11:6b:d0:81:33:5c:
                    a3:90:04:ea:f6:99:ec:c7:dd:6e:5c:b9:7c:dc:94:
                    c3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:75:2C:7E:CC:ED:24:97:47:C2:DC:3E:02:CA:DD:79:D4:07:FF:51
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v3UsfsztJJdHwtw-AsrdedQH_1E.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         32:ce:b4:84:9c:9d:56:ab:40:30:38:89:fa:6c:7b:d5:9f:57:
         86:50:be:80:99:d5:7c:62:f9:73:20:41:dc:ca:47:01:21:7e:
         02:5a:78:6e:ae:8d:08:60:20:ba:53:0d:e0:7f:75:e9:f9:de:
         1f:bf:ac:21:02:38:52:af:ee:d0:eb:dd:09:0f:46:72:d0:6b:
         ff:7b:e8:07:2e:38:08:a9:3c:cb:52:16:ce:8d:1a:06:9f:73:
         81:9e:22:fb:fb:02:95:14:8a:5d:f4:e4:12:f0:b8:d4:4f:1d:
         55:fa:c8:62:ea:4e:8f:06:29:29:47:30:e3:5d:7d:48:50:d4:
         0d:70:e7:ea:e0:81:2b:e5:47:b3:84:ce:50:04:17:48:af:e1:
         d8:17:9a:82:8c:0e:01:3b:74:8e:c7:05:ed:36:ba:73:c7:60:
         0d:9e:c5:fe:0c:95:c8:56:43:7f:26:36:90:96:38:93:d0:4f:
         fa:c0:aa:82:16:20:8d:f1:84:4b:08:35:41:f5:64:d3:43:88:
         55:47:c4:6e:df:6a:22:fb:42:ee:1f:60:05:4a:85:d7:1f:ec:
         34:e2:57:aa:e0:47:49:c4:6b:32:de:77:6a:0d:fe:19:b4:24:
         55:cd:19:a3:02:a7:2d:c8:17:d2:7f:62:ca:33:8b:5b:61:2d:
         a5:61:8c:fd
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICF2MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjE4NTFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEJGNzUyQzdFQ0NFRDI0
OTc0N0MyREMzRTAyQ0FERDc5RDQwN0ZGNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtU7c3c02oI++ouwBpJ0v5g5cMJI0zUc4X0QNeGkGiYQBuI3NU
8Annql17Wfm5V+t2gbMX6wXrJWixp4MZmsdnJSVK8rg4NzdyMcj1ucQpLtWcInP5
nuQuvZQEhJ4IShviDZC1qxoGtcw7W37Pqxrqa3qyWw6FENVjfe/dObuZmUBLlwjy
Cf6Z6BIfo/HbC+PAi2XxdmLvWJdeI4cokfbV2MxQ+atP2wfkWnfxVngo5wId+Dos
QIqDymiFrdaorkfgx8vrzHyRNVC5MmOQFrZU0gAYjkhg7BoznKWmlp2vVWu4CGuh
nLefUxFr0IEzXKOQBOr2mezH3W5cuXzclMPdAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUv3UsfsztJJdHwtw+AsrdedQH/1EwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3YzVXNmc3p0SkpkSHd0dy1B
c3JkZWRRSF8xRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2
6RAwDQYJKoZIhvcNAQELBQADggEBADLOtIScnVarQDA4ifpse9WfV4ZQvoCZ1Xxi
+XMgQdzKRwEhfgJaeG6ujQhgILpTDeB/den53h+/rCECOFKv7tDr3QkPRnLQa/97
6AcuOAipPMtSFs6NGgafc4GeIvv7ApUUil305BLwuNRPHVX6yGLqTo8GKSlHMONd
fUhQ1A1w5+rggSvlR7OEzlAEF0iv4dgXmoKMDgE7dI7HBe02unPHYA2exf4MlchW
Q38mNpCWOJPQT/rAqoIWII3xhEsINUH1ZNNDiFVHxG7faiL7Qu4fYAVKhdcf7DTi
V6rgR0nEazLed2oN/hm0JFXNGaMCpy3IF9J/Ysozi1thLaVhjP0=
-----END CERTIFICATE-----