Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1pXL2XNnK_a550bDqx0AgF9WC1U.roa
File:                     1pXL2XNnK_a550bDqx0AgF9WC1U.roa (raw, json)
Hash identifier:          fRbNUqhANHnya7/QfdFBPWHR3o4VK54/lnHomEkEOoo=
Subject key identifier:   D6:95:CB:D9:73:67:2B:F6:B9:E7:46:C3:AB:1D:00:80:5F:56:0B:55
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0DCC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1pXL2XNnK_a550bDqx0AgF9WC1U.roa
Signing time:             Tue 29 Sep 2020 09:55:00 +0000
ROA not before:           Tue 29 Sep 2020 09:55:00 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.233.64.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3532 (0xdcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:00 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D695CBD973672BF6B9E746C3AB1D00805F560B55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ab:60:5e:7a:5b:aa:77:cb:9b:83:43:42:51:
                    01:09:2f:dc:a7:0f:2b:1b:c3:f3:19:a1:b2:1b:95:
                    3d:f8:83:0b:71:db:66:56:70:a4:a6:aa:c1:10:f0:
                    c4:12:64:d6:3d:1b:b4:35:af:a6:ef:16:a5:cf:44:
                    7f:cb:b6:29:a6:07:45:45:76:83:59:92:41:13:8c:
                    2e:d1:6a:4f:84:c2:44:48:f4:29:96:41:42:f3:97:
                    21:19:b6:b8:17:d8:f6:77:7e:64:cf:c0:ff:8f:80:
                    31:0f:09:54:bc:83:fa:43:3c:70:86:43:0f:84:56:
                    53:16:17:f4:d4:ea:2e:25:8c:ea:b1:0a:15:13:43:
                    e0:2a:fb:a6:23:49:0f:0d:39:d6:c6:b3:fb:d1:b7:
                    e9:13:cc:03:5e:3f:02:a1:8e:a6:a4:c2:4f:ac:6b:
                    e0:d3:4d:61:f3:0c:93:9e:4d:70:8c:92:0a:14:3c:
                    38:5e:d9:6a:9e:aa:de:50:e6:4c:0e:ef:c4:ba:61:
                    fa:63:13:ad:a3:4d:d7:fe:e2:5b:30:d7:64:fd:06:
                    3c:97:ae:77:fa:82:11:b5:0e:4e:07:c5:c2:fc:06:
                    6b:56:5a:02:e8:4f:56:11:1e:a7:01:b8:01:d3:6f:
                    c4:50:14:00:98:8e:34:c8:8a:56:f8:b1:28:9b:b0:
                    3a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:95:CB:D9:73:67:2B:F6:B9:E7:46:C3:AB:1D:00:80:5F:56:0B:55
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1pXL2XNnK_a550bDqx0AgF9WC1U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:64:1b:81:f4:ae:b1:f4:01:63:c6:d4:b1:7a:88:0f:a6:90:
         ec:da:32:0c:bc:ee:a9:58:92:5e:27:90:01:82:ba:0b:7a:59:
         bf:fa:3e:cf:f0:88:b5:5b:c6:64:94:09:59:3d:0c:e5:70:b9:
         44:3e:b5:2e:5a:78:fa:5d:65:07:c1:2b:db:87:f8:e1:29:e6:
         90:f5:af:83:26:33:33:3a:ff:c4:de:e8:2f:24:da:4d:3e:c0:
         f0:ad:cc:e3:b9:8c:cc:2c:fd:b9:39:ef:10:4b:a8:7a:a1:77:
         aa:fd:4f:d4:2b:c9:da:c3:23:31:67:e7:4c:8d:f3:50:61:2e:
         cb:ca:a4:77:f7:3c:01:7a:42:ae:e5:23:d4:b4:e3:67:7a:3c:
         2e:aa:81:fe:d5:63:a7:8d:e4:f0:68:00:f5:3d:7c:a5:1f:9e:
         c5:ff:27:30:8c:23:67:7d:8b:fe:aa:03:e8:07:e7:ea:52:7f:
         94:3e:73:b0:a9:f8:d5:2e:22:f2:4f:0c:d0:0f:d8:db:3c:0e:
         93:36:df:98:bd:bb:a7:2a:94:01:2b:48:ce:06:80:40:a3:47:
         ba:05:b8:be:d4:96:15:49:f8:9f:36:9c:24:79:cd:23:27:07:
         11:e3:d6:ff:b7:2f:29:8a:58:da:33:7a:85:46:d8:18:93:52:
         e9:20:67:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----