Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0qsNCxZa19CvyOVDTrSpDYqrEgk.roa
File:                     0qsNCxZa19CvyOVDTrSpDYqrEgk.roa (raw, json)
Hash identifier:          M6CcZoNPM4pMTRPcHHHiCX8RTRteFlgwFG6DF4XzMaM=
Subject key identifier:   D2:AB:0D:0B:16:5A:D7:D0:AF:C8:E5:43:4E:B4:A9:0D:8A:AB:12:09
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D60
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0qsNCxZa19CvyOVDTrSpDYqrEgk.roa
Signing time:             Tue 29 Sep 2020 09:54:29 +0000
ROA not before:           Tue 29 Sep 2020 09:54:29 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.193.218.64/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3424 (0xd60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:29 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D2AB0D0B165AD7D0AFC8E5434EB4A90D8AAB1209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:62:44:ef:dc:b9:3f:6b:1c:e5:02:da:42:d7:
                    d6:3c:d0:31:a7:bb:76:1e:f8:9e:95:af:2c:ec:56:
                    a0:92:31:18:1a:06:58:ec:e1:f9:c2:28:b9:21:73:
                    6f:e2:3d:c5:01:45:4e:d1:6f:8c:c8:a1:e5:96:92:
                    92:4b:39:31:b4:c0:62:6c:e9:3d:92:8e:6d:6d:92:
                    64:83:9b:e8:73:63:34:d2:32:ed:38:11:e5:7b:d4:
                    24:c3:2b:aa:08:84:c5:d7:3e:53:4c:2d:05:fc:90:
                    91:8d:34:41:26:9a:ef:6a:c5:8f:59:5f:c1:e9:68:
                    2c:6a:46:6d:c4:af:f0:dc:10:22:d1:08:5d:cd:de:
                    76:52:0c:da:49:13:49:82:f3:03:fb:b6:e6:fe:ef:
                    65:51:c5:52:1f:ff:96:64:ef:80:c7:af:1f:5a:e7:
                    08:5a:9f:fd:2c:19:e9:f9:78:73:06:10:64:b1:e9:
                    17:35:1e:55:1b:5a:01:c4:ff:d4:e4:b5:02:25:af:
                    c6:fa:5d:2a:80:32:e3:4d:44:72:83:75:1b:b2:cc:
                    69:6e:6c:49:b1:ff:5d:bc:e1:7c:da:86:46:67:a6:
                    59:45:8a:99:f1:99:d3:cf:02:ec:13:4c:d7:93:75:
                    3a:12:5c:19:74:44:f6:21:95:fd:c8:0a:1b:66:aa:
                    24:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AB:0D:0B:16:5A:D7:D0:AF:C8:E5:43:4E:B4:A9:0D:8A:AB:12:09
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0qsNCxZa19CvyOVDTrSpDYqrEgk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.218.64/26

    Signature Algorithm: sha256WithRSAEncryption
         00:c2:11:4b:a5:16:6a:6e:ca:f8:25:d8:81:c0:82:bf:8e:57:
         f3:0e:76:eb:92:9f:6e:37:0d:86:48:49:c0:f9:15:a7:88:c3:
         23:1a:a6:4a:1a:88:7a:4d:1b:a2:93:a2:b7:27:ae:82:c4:71:
         74:47:45:ad:ee:de:b7:48:2a:47:7a:df:74:ea:f7:f4:5e:d5:
         20:58:b1:f6:9d:06:a6:84:af:72:4e:82:00:fc:3c:70:16:47:
         72:2c:b1:83:71:95:63:89:84:67:98:ca:90:02:0c:c5:92:c3:
         ce:c9:5e:ad:14:aa:53:d8:f2:ad:f5:74:0d:92:42:94:4f:d6:
         40:c8:26:4e:af:17:66:12:78:45:67:86:c4:83:18:01:16:ed:
         3e:28:26:77:63:f6:d2:0e:e8:f6:5d:d2:f1:6b:a4:71:a6:74:
         06:c1:45:95:4f:cb:48:17:87:7a:95:f3:06:d1:ac:25:b0:e1:
         0a:4f:29:e6:d4:df:d9:fb:7b:96:67:64:73:ad:9e:de:78:b7:
         93:d6:04:ad:50:01:e4:2b:2a:71:00:bb:86:d6:27:31:ce:17:
         22:f0:6d:13:ef:37:10:cc:c6:ac:79:0b:ff:bb:0c:66:16:99:
         16:d9:21:cf:50:9d:9a:1a:a2:f3:c9:22:c7:d1:73:3d:83:cd:
         b9:e3:dd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----