Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xfkeOUxIIaiaY7ETt0swd3sO7mk.roa
File:                     xfkeOUxIIaiaY7ETt0swd3sO7mk.roa (raw, json)
Hash identifier:          rO1lCof3u7fs99bxzEC+/3a+2yyF6/NhXD6oBWfvBFA=
Subject key identifier:   C5:F9:1E:39:4C:48:21:A8:9A:63:B1:13:B7:4B:30:77:7B:0E:EE:69
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1CF1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xfkeOUxIIaiaY7ETt0swd3sO7mk.roa
Signing time:             Wed 29 Sep 2021 02:48:25 +0000
ROA not before:           Wed 29 Sep 2021 02:48:25 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.192.156.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7409 (0x1cf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:25 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=C5F91E394C4821A89A63B113B74B30777B0EEE69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:98:a6:99:16:c8:ab:d3:2e:13:fc:ea:e0:6a:
                    18:b4:02:65:89:95:f2:54:24:71:0c:d2:12:cc:19:
                    e9:34:04:00:0c:2a:fe:31:05:17:de:7b:4e:6a:38:
                    51:3b:2c:cb:8b:f7:36:4d:5c:d8:42:dc:1e:f2:0b:
                    41:89:8e:41:3a:1f:e1:03:dc:d4:0d:fc:53:c9:89:
                    73:5d:6f:31:8d:97:60:e4:a6:44:f1:82:3c:45:e4:
                    c6:96:19:09:9c:5f:c1:2e:13:1a:55:da:14:ea:fc:
                    0d:51:ea:07:2d:33:1c:a3:f1:73:7d:26:fa:f4:77:
                    9c:9b:87:35:dc:64:a3:23:bf:aa:1a:85:c9:38:c8:
                    c9:0b:5a:1c:54:b3:3e:35:74:bd:90:a6:bb:ce:a6:
                    5c:98:61:35:92:54:37:f1:f8:99:6e:20:e2:01:6a:
                    6b:6b:99:33:87:17:30:4f:9d:cc:50:48:4c:5b:f3:
                    0e:05:eb:c6:c4:f3:43:a3:2a:64:8a:4a:c6:de:07:
                    9d:99:a4:ec:ac:75:4f:87:e4:92:36:fe:35:40:9e:
                    54:c0:20:87:e8:fa:23:3a:68:57:a0:85:a2:8f:f0:
                    3d:31:ea:08:40:2f:7c:4f:2f:7a:34:85:82:f9:a3:
                    89:ca:ff:da:f6:05:e0:f0:30:39:63:ba:3e:dc:54:
                    77:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F9:1E:39:4C:48:21:A8:9A:63:B1:13:B7:4B:30:77:7B:0E:EE:69
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xfkeOUxIIaiaY7ETt0swd3sO7mk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:3b:69:46:a2:50:35:34:ee:8d:3f:ad:de:22:81:d4:b8:47:
         ba:68:ee:39:72:7f:eb:9f:88:ef:b3:21:97:4d:c2:7e:2b:6f:
         e5:68:bb:f1:de:9f:07:66:9b:73:83:d1:41:25:96:59:11:22:
         53:7a:9e:3c:83:07:d1:cd:01:26:8b:1c:99:ab:8a:ea:bc:29:
         3d:12:b5:58:d1:48:d9:8f:9b:3a:3f:94:44:a9:dd:d6:84:af:
         eb:c2:9c:04:23:8f:f7:a6:5a:c3:3c:0b:28:ac:40:9e:ab:47:
         7f:ea:c8:72:c7:43:33:7d:35:41:61:14:33:e0:7f:39:df:15:
         1c:59:af:d8:5b:9b:fa:64:b2:45:a1:1d:f2:f9:14:61:8e:89:
         47:96:d2:cc:83:16:dc:f3:28:79:13:b0:ed:eb:7c:d8:8f:5d:
         33:76:d5:20:87:e8:cf:6c:1e:7d:1c:50:d9:a7:80:b7:fe:38:
         ad:ee:b7:eb:15:54:c4:44:a5:1c:47:c3:fc:4d:d5:5b:ba:e1:
         bd:be:95:e2:17:ad:e3:dd:7b:f1:72:87:ae:78:11:79:70:52:
         2d:bd:15:67:62:04:57:58:4e:f0:4a:ea:38:11:b3:06:c1:24:
         56:3b:d2:80:8f:ee:cc:b4:35:05:aa:76:ed:16:26:35:20:c2:
         7c:56:c7:23
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHPEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ4MjVaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEM1RjkxRTM5NEM0ODIx
QTg5QTYzQjExM0I3NEIzMDc3N0IwRUVFNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqmKaZFsir0y4T/Orgahi0AmWJlfJUJHEM0hLMGek0BAAMKv4x
BRfee05qOFE7LMuL9zZNXNhC3B7yC0GJjkE6H+ED3NQN/FPJiXNdbzGNl2DkpkTx
gjxF5MaWGQmcX8EuExpV2hTq/A1R6gctMxyj8XN9Jvr0d5ybhzXcZKMjv6oahck4
yMkLWhxUsz41dL2QprvOplyYYTWSVDfx+JluIOIBamtrmTOHFzBPncxQSExb8w4F
68bE80OjKmSKSsbeB52ZpOysdU+H5JI2/jVAnlTAIIfo+iM6aFeghaKP8D0x6ghA
L3xPL3o0hYL5o4nK/9r2BeDwMDljuj7cVHcbAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUxfkeOUxIIaiaY7ETt0swd3sO7mkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3hma2VPVXhJSWFpYVk3RVR0
MHN3ZDNzTzdtay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wJwwDQYJKoZIhvcNAQELBQADggEBAFM7aUaiUDU07o0/rd4igdS4R7po7jlyf+uf
iO+zIZdNwn4rb+Vou/Henwdmm3OD0UElllkRIlN6njyDB9HNASaLHJmriuq8KT0S
tVjRSNmPmzo/lESp3daEr+vCnAQjj/emWsM8CyisQJ6rR3/qyHLHQzN9NUFhFDPg
fznfFRxZr9hbm/pkskWhHfL5FGGOiUeW0syDFtzzKHkTsO3rfNiPXTN21SCH6M9s
Hn0cUNmngLf+OK3ut+sVVMREpRxHw/xN1Vu64b2+leIXrePde/Fyh654EXlwUi29
FWdiBFdYTvBK6jgRswbBJFY70oCP7sy0NQWqdu0WJjUgwnxWxyM=
-----END CERTIFICATE-----