Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-Us1cymE5T4MZALihLPH7NzvTc0.roa
File:                     -Us1cymE5T4MZALihLPH7NzvTc0.roa (raw, json)
Hash identifier:          N3UMflgKyBp1Iz8oa85A9feeSlxFeb6m19RDLASJGNw=
Subject key identifier:   F9:4B:35:73:29:84:E5:3E:0C:64:02:E2:84:B3:C7:EC:DC:EF:4D:CD
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D20
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-Us1cymE5T4MZALihLPH7NzvTc0.roa
Signing time:             Tue 29 Sep 2020 09:54:13 +0000
ROA not before:           Tue 29 Sep 2020 09:54:13 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.192.64.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3360 (0xd20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:13 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F94B35732984E53E0C6402E284B3C7ECDCEF4DCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:63:0a:d9:a3:f7:d1:22:84:b2:06:e7:95:e2:
                    69:af:24:05:dd:08:87:97:76:55:9d:40:83:64:62:
                    99:f6:e8:31:29:e8:82:27:13:f0:de:6d:9d:f7:b3:
                    fb:bd:4a:72:72:f3:9e:45:76:9f:1e:d9:6b:39:5f:
                    8a:a8:43:b5:1a:95:64:18:40:b8:45:c4:1e:67:e7:
                    c2:73:e7:b2:b0:6a:a2:d4:ff:14:80:f4:48:21:c0:
                    eb:5f:17:b3:56:01:2c:27:f6:05:b7:26:ba:74:a0:
                    87:c1:24:d4:f9:e4:0b:a8:0c:15:4b:02:d1:bd:9d:
                    2b:7c:86:d9:06:2a:6f:51:bf:c2:e7:59:06:07:4d:
                    eb:8d:61:8e:f1:8e:4d:95:11:29:80:1f:e7:cc:80:
                    b5:bb:8b:a8:ad:2f:f6:49:1a:2b:f8:13:49:9a:42:
                    33:7f:e3:a1:5f:a8:d5:6d:84:c9:82:28:7e:a6:d6:
                    22:d4:93:fa:de:72:b3:28:90:72:0a:18:f3:7c:63:
                    3a:92:eb:4f:d8:db:e1:a0:c8:01:e0:8d:6f:57:d4:
                    66:db:2c:53:b5:cd:6d:b6:2d:ad:be:7e:ba:5c:77:
                    83:9c:75:ac:21:d1:aa:8a:56:f2:5a:b5:61:7c:e1:
                    5b:14:42:89:46:7d:86:83:0d:cc:b2:1f:0b:17:94:
                    c3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:4B:35:73:29:84:E5:3E:0C:64:02:E2:84:B3:C7:EC:DC:EF:4D:CD
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-Us1cymE5T4MZALihLPH7NzvTc0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a4:65:7f:36:dd:c1:f2:8f:ed:e3:77:f1:f2:55:38:88:69:5b:
         20:93:d1:3f:f5:f6:6a:61:ef:f1:8c:70:7d:b0:77:7c:33:27:
         84:fe:61:77:cb:0e:a0:e6:f5:de:56:0b:ca:71:68:61:53:bd:
         b0:e8:43:ae:d4:a5:44:68:8f:96:b7:b1:b3:36:4c:35:e1:ac:
         be:b5:58:17:4a:7a:1a:85:bc:6a:50:78:c3:01:d8:67:48:17:
         f8:68:fe:44:52:ac:f5:4f:fa:4c:a7:c7:00:94:06:12:ce:e1:
         b4:ae:c7:5a:09:1d:55:d2:ac:10:28:08:0c:73:97:4b:a0:5b:
         af:62:f3:1a:e5:e1:53:dc:81:f2:33:e7:99:04:6b:7c:12:70:
         fc:b6:e1:43:10:7d:9d:ba:21:17:e0:fc:ac:9b:3f:14:ca:4f:
         38:25:fe:fa:a7:b0:f6:ea:8d:72:89:72:dc:55:ba:94:66:f6:
         af:44:9e:c1:fa:f0:d6:2f:77:9f:46:a1:71:c9:58:1e:84:6c:
         92:d6:af:24:c0:0a:2c:6d:7d:71:50:74:0b:da:c0:4f:d8:45:
         e9:19:79:ab:09:b1:16:4a:a2:ef:98:ef:e9:c5:a5:57:e0:6d:
         b5:f1:c1:b5:a2:bd:d8:7c:71:1c:74:cc:ff:22:76:7c:5d:07:
         1e:21:93:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----