Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wvanRrNChY_tnG0jjFrpDmmlGQ8.roa
File:                     wvanRrNChY_tnG0jjFrpDmmlGQ8.roa (raw, json)
Hash identifier:          jQhKhUOQn6UoA8QPvewxugRiuRGjpFjK7PzQIJeE+Iw=
Subject key identifier:   C2:F6:A7:46:B3:42:85:8F:ED:9C:6D:23:8C:5A:E9:0E:69:A5:19:0F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       18DF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wvanRrNChY_tnG0jjFrpDmmlGQ8.roa
Signing time:             Sun 07 Feb 2021 12:54:38 +0000
ROA not before:           Sun 07 Feb 2021 12:54:38 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        123.194.128.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6367 (0x18df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:54:38 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C2F6A746B342858FED9C6D238C5AE90E69A5190F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c7:7d:cf:ff:18:f4:b8:d0:a0:9b:3d:48:e1:
                    89:1c:c7:7e:57:b5:52:3c:51:33:45:19:d5:71:08:
                    2d:20:b8:10:64:42:89:5d:f2:bd:be:1c:68:64:42:
                    85:84:fc:2e:4c:2c:59:c1:ef:7d:96:5e:94:48:a2:
                    61:49:4f:b1:6e:d2:5c:51:56:92:5d:e8:3d:86:b0:
                    24:f3:e9:9b:b0:a8:45:fc:5f:9d:f4:41:bc:f1:45:
                    4b:c9:6f:a0:ac:87:4b:2b:87:c8:96:de:3e:18:c0:
                    f1:eb:ee:e7:e7:56:f8:45:52:70:60:18:09:bd:6d:
                    d2:06:7b:73:b3:be:cf:79:30:78:c9:ab:d2:eb:cc:
                    65:e0:66:7f:0a:fa:58:8c:42:76:c4:48:72:2d:e4:
                    ac:38:4d:3b:9d:5d:9d:97:46:e6:72:c0:20:96:ad:
                    5f:4c:c4:e7:ac:ce:12:0d:9b:18:1f:74:81:eb:92:
                    04:96:93:2e:0b:41:b9:51:83:d0:08:2f:91:b2:4f:
                    9d:49:e6:39:89:56:4e:4a:65:74:a6:5f:fa:69:c6:
                    9b:dd:2f:af:b2:48:7c:5d:52:bb:ec:19:99:e2:37:
                    0a:48:58:3a:eb:63:e6:f2:43:d7:0a:32:ad:a3:fb:
                    86:b2:85:f5:57:20:0a:0e:f5:30:22:cd:77:2e:55:
                    a1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F6:A7:46:B3:42:85:8F:ED:9C:6D:23:8C:5A:E9:0E:69:A5:19:0F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wvanRrNChY_tnG0jjFrpDmmlGQ8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8d:57:be:ae:e4:1b:af:84:e0:c6:2f:f2:41:d2:6c:5f:d9:9f:
         e2:2f:05:d2:b4:0e:b2:4b:37:55:1e:ae:dc:ad:92:ff:e1:2d:
         80:a9:52:ce:ec:49:4d:95:36:61:30:65:26:0c:9e:df:1b:01:
         5d:85:a4:d9:67:ac:2b:bf:95:5c:0a:22:04:da:80:48:bf:39:
         2c:73:c2:1b:09:30:9e:ac:42:1a:07:ef:b6:52:31:98:cb:7e:
         e5:ae:dc:39:d5:64:d6:f9:f8:ad:e5:63:c5:86:fa:37:5e:a1:
         88:9d:e3:2e:bb:0c:bf:59:4a:cb:7c:d4:04:c3:2d:e6:5b:5a:
         41:16:94:76:cd:b9:6b:25:bb:9d:b3:7e:95:5f:29:ee:f6:25:
         27:e8:af:c3:b8:61:ed:82:17:62:ca:65:f4:48:25:1f:b3:ea:
         d3:cf:a7:d2:49:e5:c6:6b:71:e1:8f:6a:35:d7:e5:bf:cb:ed:
         84:b9:97:2a:ed:24:cb:42:29:46:d2:df:f4:b2:76:1d:ff:ca:
         ad:7e:39:e8:5a:51:a9:2c:6b:5b:bd:53:12:39:69:02:18:e8:
         6e:22:f3:9b:38:9f:65:11:a0:84:b9:88:e2:b4:dd:32:62:a0:
         20:63:74:51:8a:4b:94:c0:8b:76:4b:17:c3:9c:e4:4b:b2:4a:
         4d:a6:ea:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----