Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yhuusjFKu5_BCGZA1Fd7tVsQP1s.roa
File:                     yhuusjFKu5_BCGZA1Fd7tVsQP1s.roa (raw, json)
Hash identifier:          P0LTffMr6a7Iw+FwlMrI5akq8mbKi9GKT3znqnNBB1g=
Subject key identifier:   CA:1B:AE:B2:31:4A:BB:9F:C1:08:66:40:D4:57:7B:B5:5B:10:3F:5B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D9D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yhuusjFKu5_BCGZA1Fd7tVsQP1s.roa
Signing time:             Tue 29 Sep 2020 09:54:46 +0000
ROA not before:           Tue 29 Sep 2020 09:54:46 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.205.128/28 maxlen: 28

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3485 (0xd9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:46 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=CA1BAEB2314ABB9FC1086640D4577BB55B103F5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:54:cf:88:94:3b:07:a9:7d:0d:b2:51:bf:91:
                    e8:33:2e:f6:ce:15:aa:17:e0:3e:98:57:bf:43:4b:
                    55:d4:38:4e:76:6b:c1:63:02:3d:71:71:68:da:4a:
                    e1:85:79:96:3c:6b:84:b4:fc:4d:1e:a1:31:c1:29:
                    6c:8e:cf:74:14:f2:f6:d0:f8:0c:ae:4c:b2:e8:b4:
                    52:6b:18:be:6b:5d:6a:02:68:a2:68:08:dd:9a:da:
                    c7:e4:6d:45:ce:f0:d4:d2:75:7c:50:70:53:f0:2b:
                    b6:b4:7b:0d:b6:6d:60:21:d3:6e:1c:fa:f3:6c:08:
                    22:38:f9:38:cf:d0:de:7c:c0:f5:4f:a0:8f:90:01:
                    f9:2b:24:1b:e3:f3:dc:61:2e:aa:cc:14:b8:f1:76:
                    5d:87:72:be:3d:18:11:38:7e:7b:7e:79:ac:29:9f:
                    1a:8a:56:74:6e:bd:15:d8:85:69:97:df:bf:7e:da:
                    e1:ee:98:2c:e8:af:61:ce:d5:a0:ee:b5:2b:2f:25:
                    ad:ec:a1:9d:5c:d3:9e:e5:5d:f5:99:ba:95:4e:d8:
                    d5:b4:ba:d5:a9:ae:e5:c2:ce:5f:32:c9:d9:aa:ae:
                    cd:e2:1f:e3:81:2d:cf:d4:c4:1b:04:f9:13:05:4a:
                    96:59:63:66:35:c5:d4:49:a0:57:2b:03:3e:a0:39:
                    a7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:1B:AE:B2:31:4A:BB:9F:C1:08:66:40:D4:57:7B:B5:5B:10:3F:5B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yhuusjFKu5_BCGZA1Fd7tVsQP1s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.205.128/28

    Signature Algorithm: sha256WithRSAEncryption
         6a:25:20:53:7e:d9:b5:48:75:eb:3e:e6:24:04:28:bb:25:de:
         8f:c5:60:24:be:c3:35:10:5d:5f:0d:83:ad:d9:5f:2c:df:42:
         0c:8e:20:fa:27:df:7d:f1:82:cc:75:d4:73:39:b2:bf:5e:3a:
         ae:e0:74:90:fe:de:ff:28:ff:81:f5:99:51:04:32:6c:ed:ba:
         9e:31:67:d6:d7:9a:2a:da:5e:46:54:57:1c:22:4f:26:8e:83:
         74:e5:6c:a2:42:31:7d:23:a5:50:d6:2a:d3:57:c6:a6:c9:96:
         11:74:8c:ad:2d:e4:7b:05:0a:8b:fb:2b:6d:8d:68:72:67:d5:
         c8:97:9a:e7:4b:ad:8a:98:08:bb:45:9e:3e:99:51:fc:7c:6e:
         b8:57:71:37:11:98:25:6c:5d:c7:82:ca:09:40:3d:ff:03:54:
         1e:c6:d8:37:8f:1b:14:54:e7:ec:e2:23:d5:c9:f0:1d:7b:6b:
         01:c8:ca:d3:fa:09:66:b9:58:8c:dd:9f:a0:01:cf:cc:6d:ab:
         9a:d3:c7:1b:04:4f:a5:77:13:fd:ac:43:f6:f7:8e:98:c8:19:
         e8:5c:18:63:d4:57:3b:20:ae:f5:f5:10:87:23:bf:8a:e9:f8:
         55:d2:61:08:b7:f7:27:a2:e2:34:af:0d:66:49:55:44:ae:67:
         91:f6:a7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----