Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/EfriUTl6SLPHrJe_thmDGwATJkM.roa
File:                     EfriUTl6SLPHrJe_thmDGwATJkM.roa (raw, json)
Hash identifier:          thpit39wAEQ+R79uEHSGjVx0co4PV24tTRZGkaVCFXE=
Subject key identifier:   11:FA:E2:51:39:7A:48:B3:C7:AC:97:BF:B6:19:83:1B:00:13:26:43
Certificate issuer:       /CN=385713E359FCB9CAB12F20DB3FF190FCA81E323E
Certificate serial:       076E
Authority key identifier: 38:57:13:E3:59:FC:B9:CA:B1:2F:20:DB:3F:F1:90:FC:A8:1E:32:3E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/OFcT41n8ucqxLyDbP_GQ_KgeMj4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/EfriUTl6SLPHrJe_thmDGwATJkM.roa
Signing time:             Tue 29 Sep 2020 09:58:10 +0000
ROA not before:           Tue 29 Sep 2020 09:58:10 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     134823
IP address blocks:        103.122.190.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1902 (0x76e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385713E359FCB9CAB12F20DB3FF190FCA81E323E
        Validity
            Not Before: Sep 29 09:58:10 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=11FAE251397A48B3C7AC97BFB619831B00132643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0c:75:5f:9e:7e:4c:ff:44:cb:d6:33:9a:df:
                    be:22:eb:64:75:c2:23:bb:14:38:92:08:62:af:99:
                    1c:21:b9:40:57:34:13:2d:1b:e0:ab:2a:b3:da:74:
                    e7:a1:a8:c3:c3:7c:40:37:db:22:02:93:93:f6:e2:
                    78:05:9e:98:db:c4:b3:9c:52:bf:cc:0d:20:cb:99:
                    76:26:e7:93:f5:8d:5c:cd:2b:21:1a:04:65:15:ab:
                    6e:e6:99:75:40:13:18:b4:03:4b:58:ab:bf:a7:3f:
                    c8:c0:15:65:b4:12:38:25:41:e4:a1:0c:e4:35:85:
                    71:84:b2:cc:69:d8:7e:bd:a4:77:98:6b:25:04:0f:
                    35:5f:a5:73:07:be:d6:42:03:ce:22:24:74:cf:ac:
                    81:47:55:5d:7b:c8:ae:45:b9:05:88:72:f1:31:5c:
                    a9:a5:de:61:56:f4:35:9c:2d:fa:47:c5:a3:87:84:
                    a6:9d:03:67:f0:be:31:23:87:5e:82:57:81:79:03:
                    83:52:91:ca:d9:e9:da:c3:99:9a:a7:3c:e8:d7:2a:
                    44:0e:76:2d:7c:a6:7d:5f:bf:3c:5a:48:84:79:50:
                    aa:7b:e9:83:ae:d6:f6:02:fd:15:b4:d4:6b:c2:21:
                    9c:4e:ad:14:73:09:55:10:57:02:db:33:dd:dc:4f:
                    8b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FA:E2:51:39:7A:48:B3:C7:AC:97:BF:B6:19:83:1B:00:13:26:43
            X509v3 Authority Key Identifier:
                keyid:38:57:13:E3:59:FC:B9:CA:B1:2F:20:DB:3F:F1:90:FC:A8:1E:32:3E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/OFcT41n8ucqxLyDbP_GQ_KgeMj4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OFcT41n8ucqxLyDbP_GQ_KgeMj4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/EfriUTl6SLPHrJe_thmDGwATJkM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:b1:86:4e:8e:83:3a:03:d6:1b:df:aa:fb:1c:01:79:b4:26:
         2d:29:8a:fc:57:4d:12:21:cb:bb:cc:93:6c:9e:9e:3e:cc:d2:
         cc:31:59:a0:6d:62:68:99:8d:39:9b:f0:b9:f4:85:c9:9e:49:
         cb:02:c5:b8:68:5a:c0:6e:5a:fe:b0:7c:fd:a8:5e:98:82:7b:
         10:1d:cf:3e:32:af:fa:6b:5b:37:10:2c:0e:8b:58:02:ed:04:
         0a:de:90:0b:84:82:d1:63:cb:2d:56:83:a8:f1:e4:15:8d:1c:
         72:cf:fa:23:49:f8:91:79:a2:7f:f4:47:e7:2c:17:39:58:ba:
         ac:df:5f:98:c9:fb:3c:3a:6d:c2:43:f3:ae:e9:57:5e:2b:6d:
         77:09:23:97:d7:aa:17:54:50:33:19:a7:58:0a:fa:36:3f:0c:
         68:63:18:fc:13:6f:57:9e:0d:0e:6d:92:80:34:99:0b:dd:8a:
         98:44:fb:04:01:a0:61:4e:12:58:85:68:b5:3c:6b:0e:ec:40:
         ae:ab:e3:6e:0c:8b:77:73:df:41:40:6e:e5:4d:1d:ae:a0:a2:
         ce:24:d5:fb:f9:8c:f4:be:35:b1:79:eb:8b:a0:64:70:05:83:
         9a:86:3f:ff:90:c2:48:1b:36:15:9a:84:ca:b7:21:a0:d6:8c:
         cc:b3:7a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----