Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-hQ413uYswQzxwFDb47Pp_GDeb8.roa
File:                     -hQ413uYswQzxwFDb47Pp_GDeb8.roa (raw, json)
Hash identifier:          MPSOHo0/yDmoTDkeQ6kq4wE2b9wMduzYbAdLESHCNCk=
Subject key identifier:   FA:14:38:D7:7B:98:B3:04:33:C7:01:43:6F:8E:CF:A7:F1:83:79:BF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1563
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-hQ413uYswQzxwFDb47Pp_GDeb8.roa
Signing time:             Sun 07 Feb 2021 12:04:22 +0000
ROA not before:           Sun 07 Feb 2021 12:04:22 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.233.116.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5475 (0x1563)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:04:22 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=FA1438D77B98B30433C701436F8ECFA7F18379BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:28:b0:2f:cc:e5:ea:d3:a5:49:52:6f:7f:42:
                    26:69:bd:c0:39:23:07:17:24:0b:d8:27:5b:b5:9f:
                    c9:b8:7f:69:d0:55:98:1f:a3:3c:39:13:7c:14:c6:
                    fa:20:8f:35:0e:1c:b6:da:f0:0f:51:92:2d:76:58:
                    68:de:10:35:19:db:7d:70:f7:b3:6f:73:31:02:04:
                    c2:f3:b7:50:30:b2:91:cc:33:a2:73:63:2f:e0:d9:
                    3e:25:b0:1e:7a:0b:7d:74:8c:e0:64:e6:01:e7:d3:
                    87:07:27:4e:5e:3a:be:e1:cb:a2:2a:7b:43:27:cc:
                    01:2e:90:4e:a6:ef:5e:71:a9:ab:6d:93:79:ca:03:
                    3d:b2:54:78:5c:f3:30:ed:29:d2:00:2d:ba:85:8c:
                    2d:98:b6:68:8a:d7:40:9b:91:34:ec:2e:96:c5:87:
                    6b:aa:c0:f0:8d:38:65:cc:2a:49:41:3d:6a:72:4c:
                    c8:9f:e7:6c:f3:b1:bd:27:87:e6:0d:26:0b:10:88:
                    48:0b:da:4f:4e:82:a0:63:f1:0d:60:d4:5a:ca:38:
                    75:46:bd:37:cb:6c:cd:c4:b8:3b:b0:c7:ac:fb:fc:
                    78:e4:e9:8f:24:02:8b:5e:55:2f:b6:4f:f5:15:ae:
                    cb:09:61:a9:18:4a:b1:ea:9d:76:31:d8:3b:25:14:
                    d5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:14:38:D7:7B:98:B3:04:33:C7:01:43:6F:8E:CF:A7:F1:83:79:BF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-hQ413uYswQzxwFDb47Pp_GDeb8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:0d:d0:44:f2:3c:fd:73:d3:ee:a0:40:ba:75:c4:30:cc:9b:
         cc:bb:f4:ae:28:d5:b9:a9:3e:42:64:32:9d:21:97:ac:63:25:
         06:ba:cd:52:c4:2c:e3:f5:70:64:ee:53:dc:74:11:be:0d:6b:
         66:53:01:c7:0c:0b:bc:2a:a4:73:a1:cb:0f:53:1f:1d:ae:b6:
         39:99:cc:c3:6c:4f:8c:5e:68:ba:64:89:03:23:a6:9f:42:d4:
         14:4f:db:0f:12:7a:24:8a:b9:f6:f0:6f:88:a3:83:21:11:d1:
         f4:d5:d3:ce:fd:c6:3a:dd:ed:cc:c3:4e:83:0d:7a:08:4f:9c:
         11:3e:cf:ea:7e:62:e3:3b:ba:ce:ec:bf:f9:e4:0c:1f:e2:0d:
         ef:75:d5:5a:4a:e7:1b:28:48:8e:b2:61:a0:2d:1c:76:d6:d1:
         ba:84:81:34:82:b0:16:83:92:f4:c6:d0:61:65:7e:78:d1:4c:
         99:94:dc:17:56:fb:29:67:f9:4f:1a:61:82:15:c9:79:37:5d:
         4e:e1:22:18:0a:4e:b0:20:60:b9:5e:da:68:a3:1c:ac:19:8b:
         0a:96:19:14:20:ee:a6:d2:c0:7a:3b:1b:47:ac:bf:c0:cb:21:
         31:da:86:eb:15:03:35:e9:a0:e4:44:7d:37:a0:7c:77:a0:89:
         e1:0b:0b:93
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFWMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjA0MjJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEZBMTQzOEQ3N0I5OEIz
MDQzM0M3MDE0MzZGOEVDRkE3RjE4Mzc5QkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRKLAvzOXq06VJUm9/QiZpvcA5IwcXJAvYJ1u1n8m4f2nQVZgf
ozw5E3wUxvogjzUOHLba8A9Rki12WGjeEDUZ231w97NvczECBMLzt1AwspHMM6Jz
Yy/g2T4lsB56C310jOBk5gHn04cHJ05eOr7hy6Iqe0MnzAEukE6m715xqattk3nK
Az2yVHhc8zDtKdIALbqFjC2YtmiK10CbkTTsLpbFh2uqwPCNOGXMKklBPWpyTMif
52zzsb0nh+YNJgsQiEgL2k9OgqBj8Q1g1FrKOHVGvTfLbM3EuDuwx6z7/Hjk6Y8k
AoteVS+2T/UVrssJYakYSrHqnXYx2DslFNV/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU+hQ413uYswQzxwFDb47Pp/GDeb8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLy1oUTQxM3VZc3dRenh3RkRi
NDdQcF9HRGViOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF2
6XQwDQYJKoZIhvcNAQELBQADggEBAKMN0ETyPP1z0+6gQLp1xDDMm8y79K4o1bmp
PkJkMp0hl6xjJQa6zVLELOP1cGTuU9x0Eb4Na2ZTAccMC7wqpHOhyw9THx2utjmZ
zMNsT4xeaLpkiQMjpp9C1BRP2w8SeiSKufbwb4ijgyER0fTV0879xjrd7czDToMN
eghPnBE+z+p+YuM7us7sv/nkDB/iDe911VpK5xsoSI6yYaAtHHbW0bqEgTSCsBaD
kvTG0GFlfnjRTJmU3BdW+yln+U8aYYIVyXk3XU7hIhgKTrAgYLle2mijHKwZiwqW
GRQg7qbSwHo7G0esv8DLITHahusVAzXpoOREfTegfHegieELC5M=
-----END CERTIFICATE-----