Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3DWHSeJvoWvZrQlLC9ElrFEzNsE.roa
File:                     3DWHSeJvoWvZrQlLC9ElrFEzNsE.roa (raw, json)
Hash identifier:          tbGq/DTxYiDSoKGB++sUslAMZP0RRgn9uBr1x2aI8zA=
Subject key identifier:   DC:35:87:49:E2:6F:A1:6B:D9:AD:09:4B:0B:D1:25:AC:51:33:36:C1
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0DC0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3DWHSeJvoWvZrQlLC9ElrFEzNsE.roa
Signing time:             Tue 29 Sep 2020 09:54:56 +0000
ROA not before:           Tue 29 Sep 2020 09:54:56 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.232.96.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3520 (0xdc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:56 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=DC358749E26FA16BD9AD094B0BD125AC513336C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f7:b7:9d:29:6a:78:1b:50:f3:32:ee:55:73:
                    29:f2:d2:17:3d:07:d7:cf:8a:b5:61:f8:98:66:9d:
                    24:db:77:7f:52:99:e7:9d:eb:92:fb:b5:f0:5d:51:
                    d7:08:73:7a:9d:e9:9f:18:11:d3:dd:0f:7b:29:1a:
                    a2:d3:a3:54:68:75:fd:37:7a:bd:54:ad:61:08:dc:
                    92:ba:0f:f3:e6:46:5e:ad:f9:89:f3:c5:5c:b0:fd:
                    b1:93:e6:db:4e:5f:c6:0c:a4:00:ba:11:76:54:f3:
                    6e:71:ba:0e:32:9c:d1:3a:53:fb:ee:76:55:43:8e:
                    a4:17:f9:fd:7b:91:7e:17:f6:e2:06:70:ec:18:42:
                    d0:d1:04:9c:72:75:4c:df:40:4b:88:fb:7f:78:2c:
                    07:5f:45:cb:4a:e3:6a:e2:1c:55:0c:a6:aa:d7:fd:
                    ca:0a:cb:c0:dc:ad:65:e3:3e:37:d6:4b:b6:86:f9:
                    35:99:c5:03:cf:79:1a:bc:90:37:b0:8d:27:0b:26:
                    7e:ab:69:48:9d:1e:d5:aa:d7:e0:0c:34:ae:da:ed:
                    62:af:75:81:e7:ad:2b:35:40:b9:b1:ed:4b:97:77:
                    03:83:1a:6b:1d:8c:b2:c7:0e:05:e2:6e:b4:5b:31:
                    88:e3:ec:4f:86:cc:8d:9d:d7:a2:e4:55:bf:ba:37:
                    63:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:35:87:49:E2:6F:A1:6B:D9:AD:09:4B:0B:D1:25:AC:51:33:36:C1
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3DWHSeJvoWvZrQlLC9ElrFEzNsE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         07:d2:3d:a6:4f:7b:a7:cf:ad:ba:b8:e9:18:7d:92:27:5b:75:
         55:49:df:bd:31:e2:68:4d:64:db:20:e8:68:41:d5:10:b2:7f:
         5b:47:8c:4f:77:8e:da:df:32:b9:1d:a2:e8:ee:de:60:7f:9a:
         3b:32:4c:7d:f6:9b:86:a3:63:58:09:f6:2b:02:c7:3f:ed:71:
         11:c0:27:1a:f4:4c:0d:1c:a9:19:b1:74:cd:0a:10:9d:52:82:
         98:fd:0b:15:ff:f6:5a:29:7b:0e:af:d6:b3:85:5b:82:a5:d1:
         37:fc:96:3f:6c:cc:3d:cd:db:d5:c3:90:11:f9:7e:5a:94:7b:
         52:33:c8:fa:29:48:bf:22:cb:08:19:5f:a0:10:4d:23:eb:c4:
         fb:c3:69:4e:b0:b1:c6:1a:95:0f:02:24:d4:7e:a2:b0:60:07:
         ea:6f:0b:e1:c1:23:26:bf:c4:1e:a1:9d:9d:99:b3:3a:05:f6:
         cd:a5:34:5b:9a:87:f7:ac:7a:cc:e4:26:f4:36:1c:39:18:99:
         14:a2:ec:63:f5:e2:67:5b:b0:7f:d4:43:7f:ed:5a:a1:fe:2f:
         4c:bf:59:e3:37:98:97:4e:d0:69:5b:48:da:57:16:e1:9f:f9:
         64:84:81:51:84:26:27:b4:78:17:18:ed:4c:4f:d2:e0:5e:e8:
         0a:dc:4e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----