Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1evYrh-Q0mc75oFp_kNYCm4ET1U.roa
File:                     1evYrh-Q0mc75oFp_kNYCm4ET1U.roa (raw, json)
Hash identifier:          yzu0/QqJ3G6tcOgEh/KlgLuj3nHzsFMzHRZOiYQWLvo=
Subject key identifier:   D5:EB:D8:AE:1F:90:D2:67:3B:E6:81:69:FE:43:58:0A:6E:04:4F:55
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F2F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1evYrh-Q0mc75oFp_kNYCm4ET1U.roa
Signing time:             Tue 29 Sep 2020 09:56:37 +0000
ROA not before:           Tue 29 Sep 2020 09:56:37 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.148.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3887 (0xf2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:37 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D5EBD8AE1F90D2673BE68169FE43580A6E044F55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1a:58:07:29:15:24:d3:a8:74:7c:6a:ef:d9:
                    c7:aa:15:0d:c1:92:8b:1f:6f:3b:e5:48:87:ac:42:
                    ff:1e:bb:89:62:4b:ad:d7:2c:2c:46:d9:60:e4:8d:
                    0c:1d:4b:75:cd:1a:f8:0b:bf:c5:94:65:3c:cf:be:
                    b4:19:07:91:45:8e:b7:d9:ac:ed:be:8d:d0:7b:7a:
                    23:b1:c6:85:77:86:7d:ad:a6:05:74:9b:6d:15:90:
                    00:08:1e:b7:c1:f8:9b:af:5a:f4:b3:c1:10:73:a4:
                    64:64:82:a6:d2:38:c2:40:27:32:5b:50:4b:07:29:
                    2e:0d:9a:f1:16:56:6a:4f:e5:20:8d:a2:be:86:12:
                    e8:b1:3a:b7:b4:4b:0d:cf:18:55:e0:a8:c1:67:4e:
                    06:03:75:44:6c:57:0d:a8:34:0d:04:d0:ba:b2:6d:
                    fc:ca:7d:4c:b0:3a:b5:d8:e6:ea:2d:6c:e0:db:6c:
                    1a:74:1f:0e:75:07:c2:30:0f:56:1c:6a:ff:bf:b5:
                    4e:04:9c:74:6c:bf:55:ce:00:b6:11:1b:4e:0e:4f:
                    b7:f5:5e:9e:93:11:6b:37:43:4b:cf:73:b1:38:fc:
                    d3:1f:64:f7:27:87:c8:99:b7:b1:f9:7b:1a:47:bd:
                    3d:a7:13:4c:c0:53:25:aa:01:15:38:f8:1b:0e:f1:
                    18:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:EB:D8:AE:1F:90:D2:67:3B:E6:81:69:FE:43:58:0A:6E:04:4F:55
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1evYrh-Q0mc75oFp_kNYCm4ET1U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:28:3e:86:1f:b3:ba:21:fa:66:55:d4:45:31:73:84:66:a0:
         f7:f7:d5:7f:a1:e9:9f:76:8f:99:fa:7a:e0:07:23:ef:a2:ce:
         90:73:92:c1:8c:26:27:47:e9:d0:ff:ba:6d:c4:41:c3:c8:e3:
         af:3e:1c:8d:2c:90:5e:33:6b:40:44:a2:25:4e:9b:9a:43:be:
         88:42:23:7e:c3:68:b3:f1:7b:08:76:72:e4:41:ad:c2:b1:45:
         29:01:af:41:c0:05:5e:6a:55:12:de:47:8c:8c:ba:c2:34:fd:
         9f:e0:6e:64:64:c7:36:52:92:69:08:75:30:81:5b:7d:e8:76:
         9d:68:d3:0f:63:f4:fe:d9:f2:67:c6:b5:9d:78:92:8d:7a:1f:
         0e:d5:8a:00:49:67:7f:10:bb:6e:d6:7e:2c:d5:81:e0:66:47:
         b1:17:1b:58:be:b1:a1:47:82:99:43:40:b5:3c:a9:b5:4d:c3:
         41:e7:99:e8:f9:a7:02:bc:e3:36:13:dd:df:5a:28:92:1f:93:
         9d:f6:c9:7c:ec:bf:1f:43:56:92:54:c8:7d:27:98:ae:95:a0:
         15:cb:94:90:02:d5:56:b4:80:e2:5d:23:68:8e:9b:07:27:31:
         60:08:0c:61:65:ad:69:17:b4:60:b0:5b:fb:2f:d8:19:80:b6:
         27:2d:5b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----