Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1uiPDBfMjN-OwuZKxjCS5zrGU9Y.roa
File:                     1uiPDBfMjN-OwuZKxjCS5zrGU9Y.roa (raw, json)
Hash identifier:          3jIAg2E7RZgZTear2LcmJktnehiBk+4PJrG2pkVm7Mg=
Subject key identifier:   D6:E8:8F:0C:17:CC:8C:DF:8E:C2:E6:4A:C6:30:92:E7:3A:C6:53:D6
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       14AF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1uiPDBfMjN-OwuZKxjCS5zrGU9Y.roa
Signing time:             Sun 07 Feb 2021 11:59:38 +0000
ROA not before:           Sun 07 Feb 2021 11:59:38 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.192.144.64/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5295 (0x14af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 11:59:38 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D6E88F0C17CC8CDF8EC2E64AC63092E73AC653D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:24:9d:ec:45:24:36:02:6d:d3:3c:e6:32:ff:
                    d3:32:77:4e:0d:90:ec:51:d1:2b:07:ad:c2:66:40:
                    37:76:80:10:6e:ea:52:62:3c:87:24:8d:81:49:dc:
                    ba:c0:47:46:58:69:50:30:a6:2d:8c:48:f5:d3:d1:
                    8c:a3:68:00:f3:20:6b:de:3a:dd:82:9c:a1:e6:cb:
                    08:e3:94:71:16:78:7a:56:16:86:b6:0c:7b:ab:be:
                    c3:68:14:8f:3c:77:1a:2a:bf:b8:2f:69:a0:7e:c3:
                    81:ca:be:a2:5f:f0:de:29:76:10:da:04:54:5c:67:
                    58:cf:ef:ef:01:dc:59:b0:6f:d9:f6:a0:0f:88:cc:
                    ac:be:ca:49:b6:fa:70:6f:dc:4e:a8:01:dd:7c:df:
                    e1:6f:e4:28:d3:da:e6:e0:4c:c5:5a:3e:86:fa:ec:
                    e1:51:f6:2c:cd:74:3a:00:65:a7:99:3e:b0:fc:2f:
                    70:08:6e:43:91:fe:fc:aa:94:d7:09:b1:41:24:dc:
                    93:72:75:c8:17:5d:e6:ce:04:84:8e:26:77:0a:ba:
                    b2:46:b0:2f:5b:a2:bc:e8:47:72:f8:cd:16:f8:27:
                    ec:d1:54:26:d9:0a:bc:4b:f3:4b:81:30:07:b8:41:
                    ab:ce:bd:5c:b4:0a:f4:27:0b:39:02:a4:f6:24:67:
                    91:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E8:8F:0C:17:CC:8C:DF:8E:C2:E6:4A:C6:30:92:E7:3A:C6:53:D6
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1uiPDBfMjN-OwuZKxjCS5zrGU9Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.144.64/26

    Signature Algorithm: sha256WithRSAEncryption
         21:c6:bf:40:bc:91:2f:8a:e9:2a:c0:c0:bc:ca:3c:3c:d1:f1:
         a9:87:f9:af:87:8a:1b:3e:9f:e7:4c:ea:f0:ed:0c:68:b2:7e:
         b6:e3:f2:ae:24:d3:82:7b:93:46:20:0e:c1:d4:7e:cf:68:09:
         90:91:01:64:dd:7d:4d:56:35:e5:fb:62:fb:92:35:03:1d:1f:
         c7:f4:ad:44:2a:fd:45:da:a5:6c:ed:79:2d:80:9b:0d:77:47:
         06:1a:ff:a9:98:2b:e1:aa:4f:4f:c8:91:fe:42:a9:dd:30:0e:
         33:ee:95:a8:27:91:8c:9a:40:a0:f5:38:44:31:2d:f1:0e:94:
         80:3b:91:d0:85:4d:1d:e1:e0:dc:64:dd:e8:8d:94:45:f1:cd:
         f8:9e:7d:05:6a:33:36:3b:bf:5f:1d:0d:d9:ad:41:b0:de:09:
         98:6b:8e:bc:63:f2:ec:15:99:8e:42:27:7f:29:d8:38:9c:cc:
         9f:fb:a2:eb:62:d3:ed:5c:15:e4:7a:e7:bc:79:c9:b6:97:6e:
         39:4a:50:1c:83:e6:89:60:dc:d0:1b:f6:c6:12:ed:66:46:a2:
         22:85:90:28:82:74:9c:41:b5:a4:ab:2d:88:e0:bb:fa:21:d0:
         9d:71:5a:0c:52:1c:87:38:48:d3:5c:27:ed:2b:6c:dd:bb:e8:
         23:40:d3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----