Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yJqUI9770FjtJuDGneaascAFQnE.roa
File:                     yJqUI9770FjtJuDGneaascAFQnE.roa (raw, json)
Hash identifier:          4USvYpiYqcEX5P7gVpriHGU5vNwvNahFyD1mx+GSJIE=
Subject key identifier:   C8:9A:94:23:DE:FB:D0:58:ED:26:E0:C6:9D:E6:9A:B1:C0:05:42:71
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D48
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yJqUI9770FjtJuDGneaascAFQnE.roa
Signing time:             Wed 29 Sep 2021 02:48:50 +0000
ROA not before:           Wed 29 Sep 2021 02:48:50 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        123.195.160.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7496 (0x1d48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:50 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=C89A9423DEFBD058ED26E0C69DE69AB1C0054271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ad:5f:f8:d0:ae:f5:a8:c6:ae:ac:6b:c9:ae:
                    12:d5:57:da:4a:f9:cd:eb:cc:68:74:3a:a2:5f:51:
                    f7:cc:2c:09:0a:b4:43:1c:75:16:4f:6d:34:f7:69:
                    ce:85:85:1d:0b:38:be:27:9d:92:76:4f:3d:91:b1:
                    b9:aa:aa:f7:7a:7c:72:68:08:8b:f4:a1:2c:85:65:
                    ff:d5:6d:8a:88:8a:1c:5b:6b:b7:8a:d2:4a:56:d6:
                    bc:33:7f:04:06:50:bc:d0:de:a7:38:94:82:8d:ed:
                    86:2e:3a:98:49:b3:11:63:34:54:18:a1:58:5c:fb:
                    c0:b5:02:64:fd:42:3c:f4:14:97:3f:48:1c:aa:1e:
                    2a:38:62:53:90:e5:ae:88:ec:0b:a2:25:ad:ed:55:
                    41:6e:74:bc:a2:53:75:21:08:2e:05:23:2b:fb:6b:
                    a9:73:2e:46:9d:94:8a:f2:ec:9c:a3:68:b5:5b:8b:
                    14:a1:10:5c:57:85:23:b1:3c:be:9b:2f:3f:b0:0e:
                    18:a9:1e:52:2a:b9:f3:2f:86:84:67:f3:cf:06:53:
                    d2:f6:0d:47:d3:0f:fa:58:5f:9d:8b:ef:9c:4f:f4:
                    43:8c:ae:e1:ac:ba:11:22:0f:36:01:ee:db:36:78:
                    60:e0:a7:c4:83:b0:bd:f2:07:a0:b7:f7:29:76:15:
                    94:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:9A:94:23:DE:FB:D0:58:ED:26:E0:C6:9D:E6:9A:B1:C0:05:42:71
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yJqUI9770FjtJuDGneaascAFQnE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5f:f5:6e:11:e5:64:e6:77:a6:ed:23:3f:0d:44:be:e3:c7:5d:
         76:34:f6:64:d8:06:28:44:bc:b4:6c:46:b9:ba:62:46:87:a6:
         0c:ae:30:45:a1:2f:8e:0a:81:ed:06:a8:5e:d5:bf:3e:47:d2:
         83:7a:cd:63:8e:69:7b:d4:94:e4:56:3f:71:fe:1d:22:45:0f:
         36:b3:f5:98:42:af:2c:2b:9b:b3:2c:6d:e5:27:0b:ba:9b:60:
         9c:1c:9a:44:f6:68:60:96:86:19:b3:f5:da:4d:74:a8:1e:c3:
         45:14:67:ab:6f:32:03:a3:d6:e4:71:07:89:1e:86:83:5e:30:
         9d:11:a5:57:c1:77:d1:ac:e2:e7:32:02:d1:07:2c:bd:cd:84:
         07:f6:e1:4f:37:28:fd:19:e4:27:57:f5:ed:90:20:25:f2:e2:
         9f:4e:6e:f7:7e:f1:49:cb:22:97:7e:05:be:27:31:0a:d6:67:
         26:0c:05:44:32:23:70:b8:89:1e:3e:23:0d:08:de:14:84:1b:
         c1:8f:5d:f0:63:5c:03:cf:af:5d:e0:55:c5:e1:f2:88:6c:4f:
         80:dc:b9:ee:1e:3b:ed:af:ec:fb:70:a2:bd:8f:b7:e2:ed:28:
         32:4d:78:55:a9:60:dd:1c:a2:c7:87:51:47:ea:ec:9d:3f:ce:
         78:35:d8:b6
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHUgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ4NTBaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEM4OUE5NDIzREVGQkQw
NThFRDI2RTBDNjlERTY5QUIxQzAwNTQyNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDsrV/40K71qMaurGvJrhLVV9pK+c3rzGh0OqJfUffMLAkKtEMc
dRZPbTT3ac6FhR0LOL4nnZJ2Tz2Rsbmqqvd6fHJoCIv0oSyFZf/VbYqIihxba7eK
0kpW1rwzfwQGULzQ3qc4lIKN7YYuOphJsxFjNFQYoVhc+8C1AmT9Qjz0FJc/SByq
Hio4YlOQ5a6I7AuiJa3tVUFudLyiU3UhCC4FIyv7a6lzLkadlIry7JyjaLVbixSh
EFxXhSOxPL6bLz+wDhipHlIqufMvhoRn888GU9L2DUfTD/pYX52L75xP9EOMruGs
uhEiDzYB7ts2eGDgp8SDsL3yB6C39yl2FZSXAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUyJqUI9770FjtJuDGneaascAFQnEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3lKcVVJOTc3MEZqdEp1REdu
ZWFhc2NBRlFuRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV7
w6AwDQYJKoZIhvcNAQELBQADggEBAF/1bhHlZOZ3pu0jPw1EvuPHXXY09mTYBihE
vLRsRrm6YkaHpgyuMEWhL44Kge0GqF7Vvz5H0oN6zWOOaXvUlORWP3H+HSJFDzaz
9ZhCrywrm7MsbeUnC7qbYJwcmkT2aGCWhhmz9dpNdKgew0UUZ6tvMgOj1uRxB4ke
hoNeMJ0RpVfBd9Gs4ucyAtEHLL3NhAf24U83KP0Z5CdX9e2QICXy4p9Obvd+8UnL
Ipd+Bb4nMQrWZyYMBUQyI3C4iR4+Iw0I3hSEG8GPXfBjXAPPr13gVcXh8ohsT4Dc
ue4eO+2v7Ptwor2Pt+LtKDJNeFWpYN0coseHUUfq7J0/zng12LY=
-----END CERTIFICATE-----