Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-Esic9v2exR7OyxJtbwiAVTEOa4.roa
File:                     -Esic9v2exR7OyxJtbwiAVTEOa4.roa (raw, json)
Hash identifier:          ik/yW0EmgUg9y6gR9fADg7DH28KA6dWtHWbrqefAbZ8=
Subject key identifier:   F8:4B:22:73:DB:F6:7B:14:7B:3B:2C:49:B5:BC:22:01:54:C4:39:AE
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0EC9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-Esic9v2exR7OyxJtbwiAVTEOa4.roa
Signing time:             Tue 29 Sep 2020 09:56:08 +0000
ROA not before:           Tue 29 Sep 2020 09:56:08 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.192.240.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3785 (0xec9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:08 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F84B2273DBF67B147B3B2C49B5BC220154C439AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:40:59:28:c7:eb:76:37:7c:77:3f:c7:f6:41:
                    46:46:cb:05:9c:02:6a:ab:ce:8c:bd:36:20:7c:6a:
                    8c:74:90:5e:6b:40:df:f5:e6:21:5f:4c:37:a8:d6:
                    64:15:76:8e:64:d4:28:52:0b:66:c4:63:20:b2:c4:
                    61:95:fe:94:75:b3:4d:af:40:79:35:5d:cc:1a:c3:
                    1f:19:0c:24:25:13:48:76:df:3e:a6:f3:8d:3b:74:
                    84:f4:b8:66:07:09:62:e5:dc:0d:0d:f3:d3:c0:64:
                    f6:34:9a:0e:be:45:bf:ad:2b:4c:82:92:91:6f:b0:
                    1d:d3:89:78:14:73:d4:88:a2:f4:1a:ce:03:d9:8f:
                    bf:52:5b:20:c3:2b:cb:de:c4:6e:4f:08:48:9b:8f:
                    50:93:4d:b5:af:c6:9e:8a:33:eb:a4:dc:24:14:3a:
                    7c:93:8b:3f:23:56:25:53:fd:b1:eb:4a:64:e8:ba:
                    6f:3c:7f:22:71:3a:46:cf:1f:54:59:0e:48:5b:a4:
                    6e:74:8c:c5:da:05:0b:8b:a9:25:0f:15:68:c2:c5:
                    91:32:55:9c:fb:7e:0a:10:fc:9e:09:65:3d:e0:d3:
                    a7:0d:07:31:a0:62:69:67:5e:b3:6a:0f:72:89:c3:
                    83:9c:a6:06:2d:4c:69:ba:41:35:ed:80:cb:ed:4d:
                    90:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4B:22:73:DB:F6:7B:14:7B:3B:2C:49:B5:BC:22:01:54:C4:39:AE
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-Esic9v2exR7OyxJtbwiAVTEOa4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4c:24:86:03:1c:d2:45:cc:9f:91:7c:93:98:9b:49:82:19:f1:
         28:e7:4e:f7:7c:8c:8e:e4:e8:f1:97:b6:b2:2e:ca:7e:99:3a:
         5d:58:3a:e7:04:2e:91:b8:dc:f8:d2:31:bb:86:7d:7d:64:b1:
         3f:ab:81:b7:12:4a:cf:78:b1:85:4e:cf:95:5a:ef:12:fe:ac:
         1c:4e:31:75:2e:1f:3d:f7:2f:f0:02:f9:e8:d9:e4:1a:d4:53:
         97:1a:df:6a:d9:a0:4e:a5:75:31:54:35:13:45:be:7c:7b:01:
         10:03:9b:5c:2a:a5:0d:6f:ef:aa:74:d3:10:18:97:0b:3e:5a:
         51:c8:de:6d:ec:b5:c5:52:f3:8c:42:91:72:d4:d1:52:13:26:
         2b:7b:6f:f9:65:de:08:1f:eb:74:1b:70:12:dc:dd:f1:de:69:
         c7:64:e9:06:55:5b:25:41:19:8a:d8:98:6d:f3:53:31:ee:ca:
         34:26:3a:0e:86:f4:df:42:cc:18:b2:c9:55:0b:a4:3c:a2:10:
         db:b1:e7:da:20:42:e3:91:98:4e:6f:08:92:bf:4b:65:d4:dd:
         70:49:eb:8b:14:f9:b7:58:fc:59:ab:35:c8:9e:ff:6a:d2:88:
         2f:04:f8:b7:c8:bd:a9:56:b7:af:79:77:ba:3a:d0:16:05:12:
         6f:55:2a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----