Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5XgqgbjIuyDvqXUjr0qWnz_ulLg.roa
File:                     5XgqgbjIuyDvqXUjr0qWnz_ulLg.roa (raw, json)
Hash identifier:          pkSBeVUKa+EP7E8OeZQqnJZBolHuus6JGEJFkHAMaeo=
Subject key identifier:   E5:78:2A:81:B8:C8:BB:20:EF:A9:75:23:AF:4A:96:9F:3F:EE:94:B8
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D57
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5XgqgbjIuyDvqXUjr0qWnz_ulLg.roa
Signing time:             Tue 29 Sep 2020 09:54:27 +0000
ROA not before:           Tue 29 Sep 2020 09:54:27 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        211.76.113.128/25 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3415 (0xd57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:27 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E5782A81B8C8BB20EFA97523AF4A969F3FEE94B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a0:30:71:44:a5:73:86:e5:0f:62:86:60:a0:
                    2d:4b:b6:05:d9:12:dd:e8:8e:a8:71:bd:fd:12:2b:
                    f9:c7:29:20:db:08:14:41:f0:ce:3b:0b:0d:f0:50:
                    ad:c1:87:19:3f:25:36:a5:2b:ed:8a:9d:bd:12:0d:
                    cb:f6:d8:f5:b0:09:a3:eb:fe:4b:ed:5e:8e:4d:4e:
                    da:fc:6e:b4:3b:9d:a3:8a:3c:fe:21:31:91:ba:92:
                    77:c5:a5:31:fa:51:78:52:7c:a3:0f:cc:d2:58:be:
                    1a:44:7b:ee:eb:2a:92:0d:65:6f:5d:b7:dd:8b:37:
                    ad:82:e6:3e:20:e2:e4:cc:50:72:7e:a9:b6:33:13:
                    a0:78:2f:55:05:d9:34:16:ed:71:0d:11:09:ac:08:
                    4f:4c:2a:65:d7:ad:de:14:22:14:c1:04:5e:2b:86:
                    8a:8a:d0:7c:cb:7b:94:30:b6:b8:22:fb:b1:a4:22:
                    f4:54:69:26:ad:2a:2c:3b:c9:32:1e:1a:d1:f3:f8:
                    12:09:95:e3:1e:ff:eb:50:c5:f1:a7:8e:17:4d:8a:
                    f0:e9:36:87:32:d1:06:9b:12:d5:3f:93:75:8c:50:
                    68:50:d1:23:5b:66:9c:ff:26:68:95:c0:92:7e:f9:
                    a7:8c:94:22:64:17:cf:e5:0d:5a:eb:1e:c6:62:bb:
                    3f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:78:2A:81:B8:C8:BB:20:EF:A9:75:23:AF:4A:96:9F:3F:EE:94:B8
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5XgqgbjIuyDvqXUjr0qWnz_ulLg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.113.128/25

    Signature Algorithm: sha256WithRSAEncryption
         b5:63:f3:5d:9d:05:4a:c2:52:e5:7c:37:96:49:b3:bb:a2:52:
         b7:4e:1a:e4:32:26:75:d7:03:13:b4:90:bd:ad:a5:c3:f4:d2:
         41:3f:82:cc:aa:cd:14:18:dd:c2:94:3e:18:87:9d:45:f4:81:
         e8:85:95:9a:28:55:11:77:34:8f:82:34:d7:1c:e7:92:cb:54:
         07:c6:44:5e:7f:c8:98:99:36:97:c7:31:63:9b:8f:22:ab:3e:
         4c:aa:17:7f:e5:13:86:38:8d:dd:3f:44:73:53:60:c1:d7:fa:
         bb:45:36:b8:01:1a:0c:bc:b4:53:08:24:09:67:90:7d:6d:b7:
         40:65:74:29:d9:87:52:55:fc:61:40:e4:88:a6:06:d8:f5:5e:
         a2:19:ab:05:57:f8:01:71:4c:f8:82:41:12:5e:02:dc:48:c0:
         a9:70:02:84:ef:75:0f:93:60:b9:93:49:48:bf:81:3b:13:08:
         27:ab:dd:6e:ee:1c:03:1a:47:69:a8:f5:88:7d:a8:82:0e:22:
         82:07:13:c7:33:99:0d:1a:57:33:77:af:7a:ec:51:d2:9b:37:
         28:3c:cc:f4:1e:7f:9d:bc:5e:50:b1:ed:23:b5:b9:ee:f3:a5:
         fb:7c:df:f4:2c:7c:07:0f:1c:2d:87:f7:b6:02:1e:bd:c7:f0:
         fe:62:11:aa
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICDVcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU0MjdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEU1NzgyQTgxQjhDOEJC
MjBFRkE5NzUyM0FGNEE5NjlGM0ZFRTk0QjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDboDBxRKVzhuUPYoZgoC1LtgXZEt3ojqhxvf0SK/nHKSDbCBRB
8M47Cw3wUK3Bhxk/JTalK+2Knb0SDcv22PWwCaPr/kvtXo5NTtr8brQ7naOKPP4h
MZG6knfFpTH6UXhSfKMPzNJYvhpEe+7rKpINZW9dt92LN62C5j4g4uTMUHJ+qbYz
E6B4L1UF2TQW7XENEQmsCE9MKmXXrd4UIhTBBF4rhoqK0HzLe5Qwtrgi+7GkIvRU
aSatKiw7yTIeGtHz+BIJleMe/+tQxfGnjhdNivDpNocy0QabEtU/k3WMUGhQ0SNb
Zpz/JmiVwJJ++aeMlCJkF8/lDVrrHsZiuz8DAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQU5XgqgbjIuyDvqXUjr0qWnz/ulLgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzVYZ3FnYmpJdXlEdnFYVWpy
MHFXbnpfdWxMZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQfT
THGAMA0GCSqGSIb3DQEBCwUAA4IBAQC1Y/NdnQVKwlLlfDeWSbO7olK3ThrkMiZ1
1wMTtJC9raXD9NJBP4LMqs0UGN3ClD4Yh51F9IHohZWaKFURdzSPgjTXHOeSy1QH
xkRef8iYmTaXxzFjm48iqz5Mqhd/5ROGOI3dP0RzU2DB1/q7RTa4ARoMvLRTCCQJ
Z5B9bbdAZXQp2YdSVfxhQOSIpgbY9V6iGasFV/gBcUz4gkESXgLcSMCpcAKE73UP
k2C5k0lIv4E7Ewgnq91u7hwDGkdpqPWIfaiCDiKCBxPHM5kNGlczd6967FHSmzco
PMz0Hn+dvF5Qse0jtbnu86X7fN/0LHwHDxwth/e2Ah69x/D+YhGq
-----END CERTIFICATE-----