Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4DXgYkHivBvtX4AiX96UMy7CpcY.roa
File:                     4DXgYkHivBvtX4AiX96UMy7CpcY.roa (raw, json)
Hash identifier:          yIMHTxdNRu7eg3G4L/6HtVeIxIP4WB11EfRnm10unYQ=
Subject key identifier:   E0:35:E0:62:41:E2:BC:1B:ED:5F:80:22:5F:DE:94:33:2E:C2:A5:C6
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E1C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4DXgYkHivBvtX4AiX96UMy7CpcY.roa
Signing time:             Tue 29 Sep 2020 09:55:21 +0000
ROA not before:           Tue 29 Sep 2020 09:55:21 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        123.195.52.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3612 (0xe1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:21 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E035E06241E2BC1BED5F80225FDE94332EC2A5C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c9:e2:e0:40:db:1c:08:aa:2d:b4:3a:24:ad:
                    bf:a7:71:a0:89:53:c3:c0:f4:b8:b8:8d:c1:f4:bd:
                    ce:18:8b:6a:37:d7:ed:3b:31:d3:2f:f1:8b:76:bd:
                    23:40:92:c1:28:98:e9:32:0e:c7:6f:ba:d1:17:04:
                    65:c9:88:77:ad:08:18:3b:be:ed:41:35:ea:8f:6d:
                    bc:c9:c6:11:4a:cb:3c:77:83:1f:4a:26:d3:3e:71:
                    44:39:e9:ef:4c:2b:a2:9e:75:ea:65:43:54:14:e7:
                    2c:7b:06:62:a7:cb:7a:b2:6d:91:31:43:b5:c6:5f:
                    19:58:e0:94:3c:0d:c6:a3:f8:11:0d:5b:40:84:ce:
                    f4:f6:b3:16:5a:ac:28:ba:9b:73:91:b6:e2:fc:9f:
                    ff:77:70:1a:0d:b5:d7:4d:28:0b:a0:23:31:5a:e6:
                    d4:76:18:81:51:88:dc:18:83:f8:74:33:3a:4a:9b:
                    f0:4c:fa:f3:64:bb:2f:aa:3e:a1:bb:8e:59:af:fd:
                    aa:0f:8a:ec:9d:95:2a:56:e5:1c:4d:9e:84:08:ba:
                    b6:e0:a2:38:95:28:7e:ac:61:e5:6a:d6:f9:52:2e:
                    65:dd:18:38:e8:6e:e1:de:4c:51:17:2e:62:eb:34:
                    39:b1:82:60:9b:f1:f9:db:d5:04:b8:33:9a:e2:02:
                    33:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:35:E0:62:41:E2:BC:1B:ED:5F:80:22:5F:DE:94:33:2E:C2:A5:C6
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4DXgYkHivBvtX4AiX96UMy7CpcY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:0a:c7:28:84:79:6a:f9:13:2a:02:f9:2b:c1:f0:6b:ae:7f:
         c8:83:55:d2:cc:80:66:29:f5:a9:da:39:4d:3f:ac:f1:2c:20:
         0e:f7:4b:38:66:08:bf:73:6c:73:02:e9:1b:19:13:f5:c1:8e:
         40:b5:d4:9b:f3:2a:d3:d3:13:90:56:19:aa:8b:d3:0b:b5:b6:
         7d:eb:a2:c0:87:71:f8:db:e6:cc:09:22:89:42:b9:82:af:d0:
         67:8b:75:ea:04:02:bf:e5:e7:01:89:7c:49:61:4a:23:48:ba:
         90:46:af:38:c6:92:84:98:6c:60:7f:16:9d:0d:9e:2f:46:c2:
         13:7a:31:7c:17:ed:fc:04:ff:c3:a4:12:a5:3f:d2:87:a8:ee:
         eb:68:44:d2:c2:86:34:98:5a:de:8e:a7:4c:f9:f2:0a:2d:63:
         f2:6a:67:bd:a5:52:9c:3a:e7:fb:41:44:f0:aa:4d:4e:ac:f8:
         ef:b7:72:ba:01:61:24:e5:15:97:27:74:40:46:8a:06:5a:f1:
         8e:ba:25:3a:d8:eb:06:ca:d3:0f:db:d2:2b:35:5b:98:d4:e4:
         bb:3a:fc:28:fc:a0:90:7f:8a:5b:84:a5:36:d7:2a:e4:e7:93:
         8f:6f:09:1d:9f:6c:36:1c:81:b9:63:5b:78:b1:98:1c:09:43:
         9f:3d:c1:45
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDhwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU1MjFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEUwMzVFMDYyNDFFMkJD
MUJFRDVGODAyMjVGREU5NDMzMkVDMkE1QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyyeLgQNscCKottDokrb+ncaCJU8PA9Li4jcH0vc4Yi2o31+07
MdMv8Yt2vSNAksEomOkyDsdvutEXBGXJiHetCBg7vu1BNeqPbbzJxhFKyzx3gx9K
JtM+cUQ56e9MK6KedeplQ1QU5yx7BmKny3qybZExQ7XGXxlY4JQ8Dcaj+BENW0CE
zvT2sxZarCi6m3ORtuL8n/93cBoNtddNKAugIzFa5tR2GIFRiNwYg/h0MzpKm/BM
+vNkuy+qPqG7jlmv/aoPiuydlSpW5RxNnoQIurbgojiVKH6sYeVq1vlSLmXdGDjo
buHeTFEXLmLrNDmxgmCb8fnb1QS4M5riAjNFAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU4DXgYkHivBvtX4AiX96UMy7CpcYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzREWGdZa0hpdkJ2dFg0QWlY
OTZVTXk3Q3BjWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wzQwDQYJKoZIhvcNAQELBQADggEBACkKxyiEeWr5EyoC+SvB8Guuf8iDVdLMgGYp
9anaOU0/rPEsIA73SzhmCL9zbHMC6RsZE/XBjkC11JvzKtPTE5BWGaqL0wu1tn3r
osCHcfjb5swJIolCuYKv0GeLdeoEAr/l5wGJfElhSiNIupBGrzjGkoSYbGB/Fp0N
ni9GwhN6MXwX7fwE/8OkEqU/0oeo7utoRNLChjSYWt6Op0z58gotY/JqZ72lUpw6
5/tBRPCqTU6s+O+3croBYSTlFZcndEBGigZa8Y66JTrY6wbK0w/b0is1W5jU5Ls6
/Cj8oJB/iluEpTbXKuTnk49vCR2fbDYcgbljW3ixmBwJQ589wUU=
-----END CERTIFICATE-----