Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xFR89pEiAHirlW873jVTsGwf7ic.roa
File:                     xFR89pEiAHirlW873jVTsGwf7ic.roa (raw, json)
Hash identifier:          UtzTbxEW7M5vnx+MWtzMou0kS7MXjr3BS5QwA9dxZZ4=
Subject key identifier:   C4:54:7C:F6:91:22:00:78:AB:95:6F:3B:DE:35:53:B0:6C:1F:EE:27
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F35
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xFR89pEiAHirlW873jVTsGwf7ic.roa
Signing time:             Tue 29 Sep 2020 09:56:38 +0000
ROA not before:           Tue 29 Sep 2020 09:56:38 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.193.223.64/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3893 (0xf35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:38 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C4547CF691220078AB956F3BDE3553B06C1FEE27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0d:67:d6:87:a0:79:dc:5d:12:6c:de:02:2f:
                    fd:a5:e4:4e:fe:61:47:15:12:03:b1:f1:35:69:98:
                    0e:f3:e8:8e:e7:7e:9f:a1:e1:46:de:47:9e:0e:37:
                    14:aa:ea:ff:5f:4d:26:8f:b2:66:5a:e4:2d:af:87:
                    e0:53:7d:2f:a6:e3:66:73:07:9c:a5:4a:0b:d9:02:
                    bf:60:df:50:58:fc:0a:05:fe:40:38:08:3b:22:57:
                    45:13:3b:a7:23:0c:bb:c0:ac:07:fd:a7:c6:7c:fd:
                    92:64:f8:10:5c:3a:eb:1f:53:4f:54:4f:98:44:56:
                    55:bf:8b:95:99:51:2a:1c:24:46:62:93:ed:e9:1b:
                    54:f1:f0:1a:aa:47:6c:bd:12:4a:62:d6:a5:bf:c0:
                    80:d1:ea:51:25:45:01:71:40:45:80:db:cc:0b:b6:
                    e4:09:a7:ea:9d:af:77:c8:13:a9:c2:4b:98:b9:8c:
                    dd:8a:80:04:14:98:29:a4:78:4d:79:ea:44:e0:b6:
                    5c:95:63:bb:96:79:e4:63:50:ee:f0:8b:d3:22:87:
                    f3:c8:ed:f6:77:de:d4:8a:2a:81:f9:79:92:1b:29:
                    95:7e:08:36:5c:3d:74:95:cb:dc:11:85:b0:f3:73:
                    9e:e7:07:ac:46:31:b9:ee:54:6e:00:cc:b7:1f:d9:
                    69:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:54:7C:F6:91:22:00:78:AB:95:6F:3B:DE:35:53:B0:6C:1F:EE:27
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xFR89pEiAHirlW873jVTsGwf7ic.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.223.64/26

    Signature Algorithm: sha256WithRSAEncryption
         72:8a:cd:b1:04:fa:05:a8:88:2d:13:1f:23:f5:d0:7e:6a:7f:
         4a:8c:ff:df:73:1a:4c:50:9c:fd:df:de:8b:34:d4:3e:5c:0a:
         8c:8d:5f:3f:fb:4e:01:02:e2:fd:2a:ff:b6:82:63:59:98:98:
         9f:04:dc:0d:1c:77:65:4c:12:1d:4f:aa:1b:18:e4:c3:34:e6:
         a0:45:ac:18:6e:ce:2a:1a:5f:ed:6e:d1:d9:02:0a:be:b2:cd:
         4b:19:5d:8d:8d:d1:7d:45:35:22:8e:fe:a5:c4:34:24:2a:ad:
         3f:5a:89:fe:92:fb:4f:65:a5:83:af:20:be:6d:e2:17:06:1f:
         56:f8:41:7b:1b:30:4d:29:b3:b0:e4:ef:58:46:18:73:39:df:
         f7:51:56:16:84:f1:aa:6f:7f:96:7c:13:b3:ac:df:ac:51:05:
         3f:2b:b4:44:c9:13:19:06:3c:4e:e9:d0:1d:f9:63:1b:83:17:
         d2:ed:f6:d1:d0:4d:be:ca:ba:ff:03:68:66:3a:8c:c6:1a:a0:
         ba:db:c7:7c:40:17:9b:a7:52:c2:60:6a:b7:4d:54:ae:e9:bb:
         96:d3:3a:10:d8:8c:f8:7a:58:79:ab:03:4b:c5:23:b7:86:ba:
         cf:90:5e:e9:dd:01:26:e3:7d:a2:c1:1b:e2:f2:20:21:4f:df:
         44:5d:17:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----