Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-TVBheu8MoIT6IEFLZ3T4CY-k_Y.roa
File:                     -TVBheu8MoIT6IEFLZ3T4CY-k_Y.roa (raw, json)
Hash identifier:          VVE+7lXWflF67l/i7ZmQnfmetxdWeF/QxFDPMDJWpjQ=
Subject key identifier:   F9:35:41:85:EB:BC:32:82:13:E8:81:05:2D:9D:D3:E0:26:3E:93:F6
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D33
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-TVBheu8MoIT6IEFLZ3T4CY-k_Y.roa
Signing time:             Tue 29 Sep 2020 09:54:18 +0000
ROA not before:           Tue 29 Sep 2020 09:54:18 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.193.108.128/30 maxlen: 30

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3379 (0xd33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:18 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F9354185EBBC328213E881052D9DD3E0263E93F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3a:18:a7:22:f0:47:65:70:2a:15:78:d1:e1:
                    c2:29:2b:10:24:3f:8f:60:c8:5a:3b:b5:23:6b:85:
                    30:18:17:4c:e2:ae:0c:fd:b1:5a:b3:e7:ac:7c:7c:
                    cd:be:b4:e7:7c:89:88:5f:06:72:30:63:68:9c:22:
                    24:9f:05:e4:4f:09:43:90:e5:e5:4d:d1:73:fa:81:
                    c3:ef:d2:94:8e:b3:ff:38:ec:35:51:b4:4f:3b:0f:
                    00:51:2d:5e:aa:8b:a9:67:fe:f0:c2:c7:57:f6:1d:
                    d0:3e:3d:69:89:fa:5e:9f:e6:08:db:ae:93:4e:41:
                    a6:69:3e:18:4d:f4:66:cf:2a:3a:d2:e9:68:44:49:
                    a0:e1:4e:e9:9c:d8:8b:ac:86:f8:bb:7b:a8:80:ad:
                    54:f7:dc:03:67:1b:2b:fa:c1:c5:8a:35:34:91:9a:
                    b6:11:b5:fc:c3:af:be:35:08:1c:52:75:24:dd:d4:
                    1b:3a:45:df:38:cb:63:c8:29:f9:9d:1c:eb:dd:96:
                    b4:cc:47:19:b3:fe:af:33:b6:70:82:9e:56:98:5c:
                    f6:4a:08:d7:c9:c7:e6:27:d6:90:34:ed:bf:f5:99:
                    9d:cf:1a:36:4c:66:c6:2b:1b:c4:0d:44:77:b0:4d:
                    51:9a:65:8f:2f:ce:56:15:7a:34:5d:2b:e5:f9:c0:
                    a2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:35:41:85:EB:BC:32:82:13:E8:81:05:2D:9D:D3:E0:26:3E:93:F6
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-TVBheu8MoIT6IEFLZ3T4CY-k_Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.108.128/30

    Signature Algorithm: sha256WithRSAEncryption
         34:17:2a:41:7c:98:d7:4c:5f:6a:44:20:b3:e4:f2:e0:dd:e0:
         5b:9a:21:07:85:99:a2:33:77:27:47:53:5b:c1:d8:58:4e:b3:
         56:60:59:01:37:1d:b9:84:7e:04:21:30:91:30:50:7b:34:36:
         7b:75:f1:36:15:46:2a:a6:75:e1:e3:28:c9:8d:ec:d5:41:6a:
         df:7a:4c:09:88:dd:c8:a4:a7:49:17:af:a6:47:34:6f:b1:08:
         9c:5a:cc:f2:91:05:c3:a3:bb:05:a2:ae:bf:16:95:b3:8c:0a:
         cc:c5:f2:d3:10:b1:d0:49:e7:44:ed:31:8e:1d:4b:e6:b6:1f:
         6c:b2:f9:1c:65:f1:25:8c:cb:5f:bd:47:8c:d7:79:ba:14:9c:
         f6:aa:67:e1:c8:01:a9:66:69:0d:98:8f:91:93:c6:2a:27:8c:
         86:e8:3b:eb:29:5c:60:d4:8a:88:88:2f:7b:b1:83:f5:f0:c7:
         ee:31:7c:cb:29:12:82:38:fa:40:c9:0e:d4:e7:7f:5c:0a:d7:
         80:cd:59:f6:e7:f6:d1:9b:fe:d7:82:44:ea:df:51:70:37:77:
         3d:99:b6:55:29:e9:cc:57:db:98:a8:70:74:56:3c:68:30:9f:
         92:42:99:0f:10:5e:bb:38:38:f5:74:a3:f1:62:65:67:57:1a:
         a7:7d:6c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----