Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4QwFJoWymZ9cDy7vhaew_ZXRmoc.roa
File:                     4QwFJoWymZ9cDy7vhaew_ZXRmoc.roa (raw, json)
Hash identifier:          NgurZsJ53OHfs+J0+d3wlOJPKhuh3XgLsyOeOvm/D68=
Subject key identifier:   E1:0C:05:26:85:B2:99:9F:5C:0F:2E:EF:85:A7:B0:FD:95:D1:9A:87
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       18EF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4QwFJoWymZ9cDy7vhaew_ZXRmoc.roa
Signing time:             Sun 07 Feb 2021 12:55:19 +0000
ROA not before:           Sun 07 Feb 2021 12:55:19 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        123.195.0.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6383 (0x18ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:55:19 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E10C052685B2999F5C0F2EEF85A7B0FD95D19A87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5d:86:f4:83:60:00:f7:f4:dc:4f:69:83:b8:
                    96:e8:27:0a:3f:b7:ba:75:ab:9c:68:35:19:d0:b6:
                    82:7b:5f:2c:62:06:06:35:a3:75:c3:4c:46:59:0a:
                    5e:1d:e7:b2:f2:32:ca:c0:09:92:f0:0a:9c:8c:0e:
                    b7:2c:16:72:47:a7:a9:2b:23:c6:bc:9f:67:51:52:
                    ae:64:1e:7f:89:61:26:8b:df:6f:2a:fa:ef:a9:b8:
                    fa:2e:fe:48:5e:4b:65:62:4a:63:ca:73:f7:b1:c4:
                    c1:2e:5a:33:37:19:4b:7c:0b:78:d1:0a:58:3b:63:
                    87:de:32:8f:52:c8:81:ef:d6:f8:f3:7b:46:77:18:
                    2c:1a:46:3e:c1:81:cb:ac:cd:6d:6d:f3:0e:4b:2c:
                    d2:b9:d3:18:dd:14:99:07:ba:e5:1f:3c:9a:ce:34:
                    8a:44:a1:31:b9:c7:19:84:23:9d:58:fc:9e:98:d1:
                    99:a1:41:f8:c9:42:33:89:84:ba:e6:53:ff:5a:b0:
                    de:a0:c6:fc:e1:8a:d4:fd:2b:f8:2f:94:a5:75:43:
                    f9:2f:cc:13:03:cf:89:53:01:79:af:2a:33:d0:67:
                    d9:13:e0:e6:22:37:fb:47:09:d8:c1:b6:6b:54:d0:
                    1d:2f:8f:16:2a:29:7d:65:56:6e:dc:3e:11:ea:00:
                    57:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0C:05:26:85:B2:99:9F:5C:0F:2E:EF:85:A7:B0:FD:95:D1:9A:87
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4QwFJoWymZ9cDy7vhaew_ZXRmoc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         33:8e:67:c9:51:2d:41:b4:05:f7:c6:59:20:39:96:ef:27:8e:
         aa:1f:7d:8e:26:a7:1d:a8:0f:47:0b:c9:2b:26:fb:4f:1c:0f:
         a2:ae:0f:a1:ca:ab:c8:32:38:dc:06:85:70:5e:b6:49:e8:7b:
         ce:ce:07:5c:98:ba:39:20:d8:48:f8:5d:13:36:c6:61:dc:61:
         82:62:0a:35:dc:dd:cc:af:32:3e:4b:52:45:4a:64:85:2f:3b:
         73:92:ab:c5:0a:13:47:af:eb:ae:5f:a2:f2:fb:83:db:bb:25:
         c3:e9:3d:74:9c:15:d9:63:ae:be:22:33:b7:1f:90:4e:ac:88:
         7d:f8:16:b4:fd:f8:c0:42:ca:3c:53:a1:3a:de:29:c6:55:30:
         73:c9:3c:24:dd:26:9d:b4:48:3a:bd:ef:a0:18:ad:ca:b8:4f:
         0b:a0:71:65:76:89:54:ed:c3:f7:2b:ab:8c:ac:b5:4c:6c:df:
         c9:5d:5c:40:2c:2a:82:02:24:66:98:2a:ba:18:a5:c0:64:9f:
         91:7b:dc:ba:9c:e5:50:98:2b:12:e8:04:20:f8:e9:11:de:17:
         9c:4d:6d:79:30:f8:32:7b:8f:0c:cb:30:8f:89:35:72:22:01:
         de:d1:29:63:b4:4f:c5:ed:28:21:4c:00:7f:e4:65:ce:5e:1f:
         15:2e:9c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----