Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yOaYdWn1RMsyxj6shhzATq0SrjQ.roa
File:                     yOaYdWn1RMsyxj6shhzATq0SrjQ.roa (raw, json)
Hash identifier:          LYlxMiqEdgaCuuZseTMqPflcNHKaMkWaXQd9TdRvPgk=
Subject key identifier:   C8:E6:98:75:69:F5:44:CB:32:C6:3E:AC:86:1C:C0:4E:AD:12:AE:34
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1771
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yOaYdWn1RMsyxj6shhzATq0SrjQ.roa
Signing time:             Sun 07 Feb 2021 12:19:17 +0000
ROA not before:           Sun 07 Feb 2021 12:19:17 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.205.16/28 maxlen: 28

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6001 (0x1771)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:19:17 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C8E6987569F544CB32C63EAC861CC04EAD12AE34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a1:99:e0:8e:61:28:3e:aa:9f:ba:b7:08:74:
                    8d:94:07:98:5d:87:0b:4b:02:48:9d:7a:de:93:2d:
                    9c:12:2e:fb:1a:33:60:ab:8f:f8:83:db:32:03:3b:
                    98:db:53:03:f5:db:1a:21:c9:d4:aa:78:30:f6:48:
                    80:94:55:b4:4c:ab:52:9a:37:78:e0:27:c8:9a:e5:
                    d1:63:ac:4e:56:85:cc:e4:f8:99:63:9d:06:ba:e8:
                    23:4b:91:70:e0:8f:21:7f:3b:0c:40:e6:73:ff:ea:
                    26:03:81:a9:25:46:77:f3:9a:b9:4f:91:43:30:c5:
                    e1:f6:e8:fe:47:f4:3a:90:dd:78:75:ea:83:73:be:
                    9e:6d:6a:af:f9:e3:83:89:6d:e5:f2:ba:90:13:1e:
                    48:3c:59:60:54:5c:a5:4c:32:a4:de:82:25:a5:ea:
                    82:74:4f:5c:b1:5f:0c:31:ec:86:c3:28:0e:91:b0:
                    fe:46:cc:6f:b0:80:88:47:07:b4:2c:cb:4e:b1:dc:
                    b0:d6:64:8d:27:ac:49:fb:05:e7:56:12:3a:ff:8e:
                    b6:20:ea:72:ee:30:8a:24:99:32:56:73:98:0b:f8:
                    2a:a7:5c:1a:41:ad:86:4b:19:18:01:f1:48:df:61:
                    dc:20:3e:9a:53:f1:b1:79:7d:b8:50:b3:2e:75:ba:
                    43:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E6:98:75:69:F5:44:CB:32:C6:3E:AC:86:1C:C0:4E:AD:12:AE:34
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yOaYdWn1RMsyxj6shhzATq0SrjQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.205.16/28

    Signature Algorithm: sha256WithRSAEncryption
         0c:ef:ec:40:c2:f3:a6:c7:e9:44:8a:86:16:dd:36:55:1f:77:
         aa:a1:ca:55:91:aa:7f:c5:20:4e:25:02:42:42:f4:89:1f:5c:
         b4:77:c7:ad:ef:25:95:81:3e:34:81:d4:38:b7:86:49:14:d8:
         c4:fd:c7:7c:bd:83:9d:29:d3:77:a9:ab:88:2e:59:69:95:d2:
         32:02:95:26:f2:10:d4:7d:39:28:72:f3:af:89:42:73:8d:48:
         0b:da:88:3a:0f:d9:b0:2c:cb:9e:32:e2:f4:96:64:7f:aa:2b:
         aa:fc:a7:69:f0:9d:fa:bf:65:da:1d:e8:9f:ae:92:52:17:de:
         d5:de:de:f5:58:21:19:58:21:c8:fa:ed:5e:b0:ae:50:08:fb:
         6e:f9:f3:ac:22:ec:16:71:45:57:ce:50:85:a2:1e:7f:22:9b:
         77:bd:81:80:70:0a:0f:bc:10:0e:6e:bb:65:d4:24:11:14:05:
         37:77:60:f7:34:cf:db:91:97:b1:14:61:b9:cc:d4:6c:93:1e:
         5d:1a:7f:81:74:c6:c2:eb:79:17:c8:1c:6d:d3:c9:6c:ae:53:
         f9:e8:14:ff:5a:fe:a1:52:71:47:b0:d0:66:f7:1e:f7:2a:66:
         68:30:2d:44:d2:d8:be:7e:4e:b7:f9:4b:51:fe:e4:62:ca:69:
         2f:dd:57:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----