Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2E0N-eBWAQifSapOIMWYrBHK5Vc.roa
File:                     2E0N-eBWAQifSapOIMWYrBHK5Vc.roa (raw, json)
Hash identifier:          z6z/wGxI3HDwvBPlrFUQvGC3ePM0cBl015lhZplREYI=
Subject key identifier:   D8:4D:0D:F9:E0:56:01:08:9F:49:AA:4E:20:C5:98:AC:11:CA:E5:57
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D9B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2E0N-eBWAQifSapOIMWYrBHK5Vc.roa
Signing time:             Tue 29 Sep 2020 09:54:45 +0000
ROA not before:           Tue 29 Sep 2020 09:54:45 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.236.128/25 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3483 (0xd9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:45 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D84D0DF9E05601089F49AA4E20C598AC11CAE557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b7:80:19:9f:0f:cb:46:eb:69:f8:c5:bb:00:
                    18:0a:03:27:e0:09:51:c8:4f:85:4f:ae:c4:7a:c1:
                    b9:f2:c3:c9:56:46:6d:24:36:b5:4e:77:68:94:23:
                    24:96:93:3c:43:71:f2:b1:05:47:ed:db:73:48:0e:
                    cf:1b:ed:83:34:0a:bb:f2:0b:5f:ea:39:89:c5:c9:
                    fa:99:07:f2:46:17:7e:33:c4:81:34:30:29:a9:21:
                    59:ab:74:fc:24:2d:70:02:2e:89:c4:f6:96:c6:52:
                    0d:b2:81:e8:2c:7b:b5:7e:fd:59:09:72:06:03:72:
                    32:7a:ab:07:3a:8e:3b:3d:be:9a:6e:e3:55:f0:d8:
                    90:2a:09:c3:ab:3b:1c:39:c0:e3:43:b3:33:cf:ea:
                    a0:bd:21:99:eb:9d:c9:e2:3d:9d:ee:00:e1:1a:08:
                    b9:66:d6:63:78:2d:42:d5:02:aa:11:79:b4:3d:b2:
                    ed:59:69:d2:91:ca:58:bd:57:59:65:ac:3b:89:b5:
                    18:6c:07:5a:5f:d0:99:c3:4f:fe:74:f5:60:27:74:
                    33:2a:51:11:4f:04:9b:54:ba:68:8e:39:c6:6e:4f:
                    8c:91:d5:56:32:b4:d9:64:29:1f:ec:7c:fd:43:aa:
                    85:f7:df:cc:ac:66:eb:e3:61:57:c5:c6:85:6f:16:
                    8d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:4D:0D:F9:E0:56:01:08:9F:49:AA:4E:20:C5:98:AC:11:CA:E5:57
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2E0N-eBWAQifSapOIMWYrBHK5Vc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.236.128/25

    Signature Algorithm: sha256WithRSAEncryption
         03:ee:09:a4:ce:39:68:94:ed:68:5f:cf:bf:ed:c8:ae:14:f8:
         97:45:ec:55:bc:0c:c3:a0:24:3a:f9:ae:5f:fe:d7:b7:76:73:
         a6:54:31:99:38:26:7f:3e:80:09:44:45:fb:71:45:7c:92:f8:
         0a:9b:55:25:c2:fa:14:3a:cc:cd:35:9c:02:7f:ad:ad:b2:42:
         00:69:f5:e5:e9:23:aa:22:5a:67:58:8b:e4:11:23:cc:9d:6c:
         29:6c:cf:d8:eb:22:6d:ec:51:4f:ee:31:c1:f0:71:32:91:ac:
         d7:da:be:93:fc:25:21:ab:0a:d2:83:9c:a8:e5:23:65:eb:19:
         d1:e3:94:40:37:2e:02:10:eb:3f:1d:6e:ac:4b:6e:99:97:20:
         75:a7:62:4e:73:cd:d4:60:0b:43:82:92:06:67:ea:12:ed:6c:
         6d:05:c6:7a:0b:79:fd:4d:01:2c:10:b1:e6:93:94:6f:6c:6d:
         5b:87:31:41:c5:b0:c2:78:93:56:e9:1b:9c:97:6f:03:bb:d3:
         88:e1:e9:7e:25:9e:ee:df:83:02:6f:ea:ec:e9:b5:e7:66:8d:
         14:e6:c9:81:55:10:a2:f8:8b:5e:00:8f:d3:8a:35:f5:89:74:
         3f:2b:ef:99:8f:5c:88:72:3c:8f:f9:dd:21:08:fb:f2:21:a0:
         df:28:5e:31
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICDZswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU0NDVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEQ4NEQwREY5RTA1NjAx
MDg5RjQ5QUE0RTIwQzU5OEFDMTFDQUU1NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDlt4AZnw/LRutp+MW7ABgKAyfgCVHIT4VPrsR6wbnyw8lWRm0k
NrVOd2iUIySWkzxDcfKxBUft23NIDs8b7YM0CrvyC1/qOYnFyfqZB/JGF34zxIE0
MCmpIVmrdPwkLXACLonE9pbGUg2ygegse7V+/VkJcgYDcjJ6qwc6jjs9vppu41Xw
2JAqCcOrOxw5wONDszPP6qC9IZnrncniPZ3uAOEaCLlm1mN4LULVAqoRebQ9su1Z
adKRyli9V1llrDuJtRhsB1pf0JnDT/509WAndDMqURFPBJtUumiOOcZuT4yR1VYy
tNlkKR/sfP1DqoX338ysZuvjYVfFxoVvFo0tAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQU2E0N+eBWAQifSapOIMWYrBHK5VcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzJFME4tZUJXQVFpZlNhcE9J
TVdZckJISzVWYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQd7
w+yAMA0GCSqGSIb3DQEBCwUAA4IBAQAD7gmkzjlolO1oX8+/7ciuFPiXRexVvAzD
oCQ6+a5f/te3dnOmVDGZOCZ/PoAJREX7cUV8kvgKm1UlwvoUOszNNZwCf62tskIA
afXl6SOqIlpnWIvkESPMnWwpbM/Y6yJt7FFP7jHB8HEykazX2r6T/CUhqwrSg5yo
5SNl6xnR45RANy4CEOs/HW6sS26ZlyB1p2JOc83UYAtDgpIGZ+oS7WxtBcZ6C3n9
TQEsELHmk5RvbG1bhzFBxbDCeJNW6Rucl28Du9OI4el+JZ7u34MCb+rs6bXnZo0U
5smBVRCi+IteAI/TijX1iXQ/K++Zj1yIcjyP+d0hCPvyIaDfKF4x
-----END CERTIFICATE-----