Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HWME1204/8odKiEijLQQU-Cp9LC9JXZP9V38.roa
File:                     8odKiEijLQQU-Cp9LC9JXZP9V38.roa (raw, json)
Hash identifier:          P92y7bWqLTB5lM0lljUb9WQmT9kodwV6UU8H8KUTHxI=
Subject key identifier:   F2:87:4A:88:48:A3:2D:04:14:F8:2A:7D:2C:2F:49:5D:93:FD:57:7F
Certificate issuer:       /CN=E95973EB86F597CAE612C67929ED9352E70B5528
Certificate serial:       0C82
Authority key identifier: E9:59:73:EB:86:F5:97:CA:E6:12:C6:79:29:ED:93:52:E7:0B:55:28
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/6Vlz64b1l8rmEsZ5Ke2TUucLVSg.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HWME1204/8odKiEijLQQU-Cp9LC9JXZP9V38.roa
Signing time:             Tue 29 Sep 2020 09:58:57 +0000
ROA not before:           Tue 29 Sep 2020 09:58:57 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18049
IP address blocks:        103.126.180.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3202 (0xc82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95973EB86F597CAE612C67929ED9352E70B5528
        Validity
            Not Before: Sep 29 09:58:57 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F2874A8848A32D0414F82A7D2C2F495D93FD577F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cb:c8:b9:4d:f5:3a:e5:9f:b6:fb:e2:73:c8:
                    fa:68:49:a4:48:a3:b5:b5:8d:31:4c:bb:04:48:95:
                    d0:52:ff:78:92:92:d4:c1:94:31:82:1b:4f:4e:f6:
                    0d:e0:e2:d4:c3:a3:45:bd:ad:a2:d5:c5:b4:43:d3:
                    4c:13:3c:15:86:3c:88:5f:71:6d:8d:1a:29:d6:7d:
                    f4:97:00:b6:e4:56:e2:0b:00:bd:f8:51:dc:d5:6d:
                    41:78:a7:f8:c3:f7:e9:98:c4:37:23:db:23:bf:57:
                    07:d8:d6:ef:70:4d:cd:70:f7:1a:72:72:eb:76:8c:
                    1f:ba:e8:da:ef:51:ea:cb:88:62:cb:6e:14:a4:35:
                    d9:e2:90:60:07:9f:10:75:6b:e3:80:07:30:b5:8c:
                    4a:60:c3:5b:f8:51:9c:8e:2c:62:5b:6f:ba:25:17:
                    17:e1:c2:87:30:3b:23:31:3d:1a:2d:25:e1:14:9d:
                    53:05:6f:ef:03:2d:3c:01:37:9b:d5:a3:ec:64:20:
                    6f:3d:3f:4b:59:fc:0f:49:6b:c5:38:03:85:0b:55:
                    a2:4c:6b:23:fa:0f:4c:f1:d2:c7:a5:ac:dd:7d:d7:
                    75:a6:dd:8f:55:9a:ad:86:cf:e8:31:d8:77:43:48:
                    84:f2:bf:99:fb:a1:c0:45:0f:fe:98:07:ef:78:fa:
                    3d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:87:4A:88:48:A3:2D:04:14:F8:2A:7D:2C:2F:49:5D:93:FD:57:7F
            X509v3 Authority Key Identifier:
                keyid:E9:59:73:EB:86:F5:97:CA:E6:12:C6:79:29:ED:93:52:E7:0B:55:28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWME1204/6Vlz64b1l8rmEsZ5Ke2TUucLVSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/6Vlz64b1l8rmEsZ5Ke2TUucLVSg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWME1204/8odKiEijLQQU-Cp9LC9JXZP9V38.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:ab:e5:86:b7:27:34:80:75:80:22:08:d4:d4:65:b1:af:4a:
         8a:24:cd:ed:52:1a:53:7e:7c:7f:c1:c9:a9:14:c4:38:f9:ef:
         6f:fc:3c:9d:92:d1:8d:03:82:b4:fc:2c:08:e5:fd:84:ab:27:
         1c:16:55:9e:71:28:6e:47:2d:05:1d:42:70:74:fa:06:54:15:
         5b:c0:3e:ac:19:5b:c2:e8:64:6a:d7:35:3f:6f:c5:ce:08:11:
         ed:38:c7:04:84:83:20:2d:b8:7c:29:73:96:00:de:e7:17:cb:
         91:5b:fc:1c:4b:a9:d9:ca:29:02:55:51:3d:54:37:c7:a8:1c:
         8e:44:73:cb:9c:f5:c7:9e:f9:b4:fe:fc:19:05:95:78:65:7d:
         d2:28:6c:84:d0:90:9b:15:75:76:8c:47:70:ff:cf:12:c5:71:
         c1:47:6c:01:56:5b:8b:4f:c3:1e:8a:54:9b:4e:c3:e8:94:eb:
         72:9a:c1:a6:d1:98:82:cc:25:24:3d:3f:aa:e8:d7:f4:1f:d5:
         bc:ce:50:c4:a9:51:5b:14:3a:67:01:f6:33:0f:36:64:0d:51:
         e5:1f:59:73:a8:cb:4d:62:db:9d:61:d4:79:a9:bf:2a:aa:2d:
         75:7d:5a:70:e8:bb:93:11:66:8d:6e:ae:50:23:18:86:14:30:
         f0:80:8e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----