Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1LeQ8KZXP6ynljumVe_jP5xFFPU.roa
File:                     1LeQ8KZXP6ynljumVe_jP5xFFPU.roa (raw, json)
Hash identifier:          Sabe4F9FIDFNgHUBmOn20X6qbb+NnR3K53sjkuK4GVw=
Subject key identifier:   D4:B7:90:F0:A6:57:3F:AC:A7:96:3B:A6:55:EF:E3:3F:9C:45:14:F5
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F17
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1LeQ8KZXP6ynljumVe_jP5xFFPU.roa
Signing time:             Tue 29 Sep 2020 09:56:29 +0000
ROA not before:           Tue 29 Sep 2020 09:56:29 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.205.144/28 maxlen: 28

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3863 (0xf17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:29 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D4B790F0A6573FACA7963BA655EFE33F9C4514F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:76:d1:8c:d9:7f:0d:f2:90:ed:67:77:13:f9:
                    5f:8c:5b:d4:6f:85:ce:8b:f2:9d:50:85:02:32:7d:
                    c5:26:93:9f:b4:12:7f:b4:ad:00:a4:bb:f1:42:02:
                    e7:70:13:ab:5d:89:63:74:bb:4c:f2:02:9a:8c:60:
                    b9:64:18:49:ab:c3:d9:c6:a0:80:fa:5f:8d:98:f4:
                    6f:65:57:d0:05:1f:6b:48:44:b3:44:ad:77:af:11:
                    77:5a:bf:6b:00:25:e5:20:c4:f7:96:e9:c9:62:9c:
                    8e:35:67:49:0b:17:e5:f6:8c:a3:e7:f6:b9:88:35:
                    05:a9:11:e0:f0:fd:9f:3d:f4:83:f8:ab:bf:18:7d:
                    91:be:c0:df:11:cf:fe:1d:79:a5:1f:9d:7f:12:b5:
                    8b:1b:fb:78:e3:4e:3c:d3:ea:4d:b5:61:c9:6c:60:
                    22:f6:56:9e:0e:84:32:a5:f2:1d:a4:e9:03:e8:f7:
                    d5:d8:dc:47:70:6e:15:2e:5c:8e:67:74:a8:17:48:
                    ce:62:ed:c0:81:2f:ee:5e:97:e6:50:f6:61:df:89:
                    6b:52:ff:1e:43:66:de:21:f6:73:f8:87:c6:cb:fc:
                    2a:23:8c:52:77:c2:ad:5c:29:9a:90:4a:20:24:aa:
                    e9:75:05:d3:e0:9a:88:a1:da:dd:c7:43:92:b7:8e:
                    e2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B7:90:F0:A6:57:3F:AC:A7:96:3B:A6:55:EF:E3:3F:9C:45:14:F5
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1LeQ8KZXP6ynljumVe_jP5xFFPU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.205.144/28

    Signature Algorithm: sha256WithRSAEncryption
         9a:4f:3d:f7:9d:00:c5:97:02:6e:9c:27:89:b2:bb:62:e0:f1:
         1b:2f:33:a3:07:53:43:9b:93:d4:74:94:d1:b1:d1:9e:eb:86:
         16:8e:f1:23:ea:21:69:2b:b7:a4:b2:3f:71:48:a3:48:15:87:
         ee:16:d5:d1:82:88:0a:fa:59:df:5a:47:d1:b3:29:cd:89:59:
         8e:33:3a:5a:e9:cb:cb:ce:76:01:99:c5:2c:01:5e:0c:b3:f6:
         f2:37:0f:d7:9c:62:44:9b:51:dd:08:e1:c9:66:70:f4:e1:c2:
         61:09:2b:3d:f8:de:01:d4:3e:78:73:a4:20:14:fc:ee:37:63:
         b3:af:e7:87:88:06:cf:f9:a7:1f:fe:12:ae:38:16:61:6f:31:
         ae:cd:9a:80:c8:4d:c9:7c:a4:d9:97:3e:8b:bf:38:ff:c6:9a:
         50:ac:e2:08:ad:f5:08:4c:02:7f:91:c0:14:9e:e3:f0:f3:7f:
         e1:a4:c9:8f:34:76:f1:8b:02:51:8b:04:22:2f:4f:59:ea:ba:
         55:18:8c:b7:1f:be:f1:d4:a4:ae:f9:f2:34:7e:88:f6:51:91:
         f6:20:de:cb:71:88:e8:2c:fc:71:6a:72:0b:ee:e4:dd:83:b3:
         4d:4d:21:fb:bf:ce:75:9d:a1:e1:d8:4e:8d:5f:66:c4:b8:a0:
         7d:ba:4e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----