Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yXICYhw08u1Nm0Jv6rcdDwggiko.roa
File:                     yXICYhw08u1Nm0Jv6rcdDwggiko.roa (raw, json)
Hash identifier:          jAvt8+uJKYP4qOYP1ZEuVgiYb7s6BgVNe2pn3YWSvow=
Subject key identifier:   C9:72:02:62:1C:34:F2:ED:4D:9B:42:6F:EA:B7:1D:0F:08:20:8A:4A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1901
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yXICYhw08u1Nm0Jv6rcdDwggiko.roa
Signing time:             Sun 07 Feb 2021 12:56:04 +0000
ROA not before:           Sun 07 Feb 2021 12:56:04 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        123.195.192.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6401 (0x1901)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:56:04 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C97202621C34F2ED4D9B426FEAB71D0F08208A4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b2:ce:94:30:ee:87:0a:b4:11:b9:62:cc:32:
                    f9:65:c4:31:3c:cf:35:cb:0a:e6:1d:8e:ef:5f:4a:
                    86:74:06:3c:13:91:9c:3e:d4:85:90:c3:fa:0d:1c:
                    13:b7:0c:65:fe:8c:8a:66:bb:34:f6:fc:e3:7a:d3:
                    26:e6:5e:d4:7f:d6:24:b5:10:81:ca:e8:99:86:48:
                    6d:f2:8f:3b:95:29:be:ac:d3:7e:fb:f7:5c:f6:36:
                    59:e2:c4:01:df:af:19:1f:9c:52:22:0e:03:2d:63:
                    34:0d:ac:0c:f0:70:43:54:f7:18:31:9a:32:b5:87:
                    03:1e:25:35:6f:af:ee:3f:88:bf:34:5f:38:76:29:
                    5c:3c:f3:17:a6:9c:4f:87:4d:e8:b2:0a:f4:5e:0a:
                    e6:3d:ce:d4:a3:c7:3a:00:34:2c:16:01:a9:6b:0f:
                    83:f8:40:49:de:db:d5:78:f6:d5:41:55:7c:a7:db:
                    1c:9d:5c:19:ca:72:b4:84:62:a3:ac:0e:9e:3b:27:
                    48:3c:4c:f9:23:8e:1f:49:5d:de:ba:21:a4:2f:79:
                    77:8c:b3:10:02:9e:a5:05:dc:65:60:56:1e:de:2c:
                    38:a8:18:da:39:f5:4f:60:69:14:a3:6d:7f:42:a4:
                    03:18:f9:43:22:63:06:75:f5:37:3c:49:43:94:89:
                    a4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:72:02:62:1C:34:F2:ED:4D:9B:42:6F:EA:B7:1D:0F:08:20:8A:4A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yXICYhw08u1Nm0Jv6rcdDwggiko.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         15:99:2a:41:ce:07:5a:b2:06:19:38:8d:f7:c8:54:9c:67:ad:
         7f:83:ea:44:1c:07:a3:09:02:7c:62:0f:5c:32:f7:7a:c7:0e:
         00:b4:ca:b7:60:ca:11:2b:19:e4:95:b8:c6:ef:20:fa:93:6b:
         10:61:55:d0:d3:4c:ac:3a:7e:7b:73:fa:d2:1b:63:df:a2:dc:
         16:1b:f2:e4:8d:2c:00:85:52:e0:1a:b3:22:7b:90:7d:c1:e1:
         b4:13:6d:b1:58:a2:4e:ea:1f:8a:ec:b9:ce:59:8b:94:b7:40:
         e8:31:f6:e1:40:4f:7d:56:a4:c8:46:a3:d9:43:f7:ad:89:a7:
         30:bf:50:ae:82:9b:f4:16:db:d9:22:8a:08:e3:e2:e4:80:fb:
         93:b3:9c:4a:af:bc:a5:b1:d6:65:45:27:4e:09:9c:e5:a4:88:
         51:95:97:2c:e9:40:33:a8:0c:c1:5f:75:0a:a3:49:af:f5:92:
         6c:72:09:ea:4c:c7:d1:77:39:ec:07:96:b3:02:ef:bc:24:bc:
         97:47:01:2a:0b:49:d8:89:c5:f4:39:23:45:34:c2:1b:e7:0d:
         78:fc:ef:78:f9:4d:90:bb:db:94:cd:be:d1:9e:c8:fa:dc:a9:
         38:0e:8e:7c:1a:af:50:2b:f6:4f:33:22:48:7c:67:b0:c8:b7:
         6f:ee:72:46
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGQEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjU2MDRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEM5NzIwMjYyMUMzNEYy
RUQ0RDlCNDI2RkVBQjcxRDBGMDgyMDhBNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3ss6UMO6HCrQRuWLMMvllxDE8zzXLCuYdju9fSoZ0BjwTkZw+
1IWQw/oNHBO3DGX+jIpmuzT2/ON60ybmXtR/1iS1EIHK6JmGSG3yjzuVKb6s0377
91z2NlnixAHfrxkfnFIiDgMtYzQNrAzwcENU9xgxmjK1hwMeJTVvr+4/iL80Xzh2
KVw88xemnE+HTeiyCvReCuY9ztSjxzoANCwWAalrD4P4QEne29V49tVBVXyn2xyd
XBnKcrSEYqOsDp47J0g8TPkjjh9JXd66IaQveXeMsxACnqUF3GVgVh7eLDioGNo5
9U9gaRSjbX9CpAMY+UMiYwZ19Tc8SUOUiaT5AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUyXICYhw08u1Nm0Jv6rcdDwggikowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3lYSUNZaHcwOHUxTm0wSnY2
cmNkRHdnZ2lrby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7
w8AwDQYJKoZIhvcNAQELBQADggEBABWZKkHOB1qyBhk4jffIVJxnrX+D6kQcB6MJ
AnxiD1wy93rHDgC0yrdgyhErGeSVuMbvIPqTaxBhVdDTTKw6fntz+tIbY9+i3BYb
8uSNLACFUuAasyJ7kH3B4bQTbbFYok7qH4rsuc5Zi5S3QOgx9uFAT31WpMhGo9lD
962JpzC/UK6Cm/QW29kiigjj4uSA+5OznEqvvKWx1mVFJ04JnOWkiFGVlyzpQDOo
DMFfdQqjSa/1kmxyCepMx9F3OewHlrMC77wkvJdHASoLSdiJxfQ5I0U0whvnDXj8
73j5TZC725TNvtGeyPrcqTgOjnwar1Ar9k8zIkh8Z7DIt2/uckY=
-----END CERTIFICATE-----