Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/69EFvv0EjFXTff_a5XuzdCJhY1s.roa
File:                     69EFvv0EjFXTff_a5XuzdCJhY1s.roa (raw, json)
Hash identifier:          TiiYTZGMzMYX27tqGXmYd5tsD0pOUjwvOcwcNTEuCmA=
Subject key identifier:   EB:D1:05:BE:FD:04:8C:55:D3:7D:FF:DA:E5:7B:B3:74:22:61:63:5B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F3B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/69EFvv0EjFXTff_a5XuzdCJhY1s.roa
Signing time:             Tue 29 Sep 2020 09:56:40 +0000
ROA not before:           Tue 29 Sep 2020 09:56:40 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        118.232.192.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3899 (0xf3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:40 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=EBD105BEFD048C55D37DFFDAE57BB3742261635B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4f:b8:9e:e7:aa:09:5a:be:4b:ff:89:d9:e5:
                    17:f2:04:fb:54:27:4b:bc:d4:a0:f9:6d:fa:c6:40:
                    67:df:e1:44:a7:e6:e9:0e:e3:e2:dd:a1:11:a4:ca:
                    5f:3f:56:73:e2:c4:1f:39:f4:9b:b0:e9:d5:42:94:
                    33:a9:ac:f9:86:cf:fb:23:2b:23:2f:8d:8b:8c:3c:
                    58:d1:21:b4:24:ef:2f:31:35:bb:af:33:b5:a5:02:
                    d0:e2:8e:32:b8:f6:a0:f1:2f:30:79:65:8b:bd:35:
                    f0:a2:63:6a:db:ea:de:36:a4:e8:15:b7:dc:52:1e:
                    17:88:05:41:c4:f4:18:5f:17:64:33:40:38:02:af:
                    d3:d9:c8:6d:b9:d9:35:7f:51:9a:0d:9d:d1:c2:f6:
                    20:ff:7c:a0:80:49:1c:84:64:a8:df:70:0b:51:4b:
                    19:d1:60:c6:59:78:a6:d0:e4:31:d9:43:d0:c8:23:
                    9f:09:f4:7e:fb:a0:08:89:58:8d:7f:9e:2e:27:c2:
                    c1:65:fb:e8:40:e6:85:e4:02:92:66:81:89:f1:79:
                    81:6b:ef:da:87:f8:ea:55:c4:49:9f:e0:9e:08:fd:
                    df:3a:a0:20:4e:2c:4e:20:f3:cf:40:a8:26:c0:10:
                    2c:5b:19:5c:f7:ee:48:3c:35:65:0e:8d:8f:2e:6a:
                    bc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D1:05:BE:FD:04:8C:55:D3:7D:FF:DA:E5:7B:B3:74:22:61:63:5B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/69EFvv0EjFXTff_a5XuzdCJhY1s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         82:ed:c2:cb:cd:5d:bd:1b:67:98:65:c6:7d:4a:82:ee:e6:bc:
         19:5a:69:94:c0:07:7f:96:81:1c:0b:f2:c4:64:0a:3d:d7:71:
         06:63:ad:04:3c:8d:00:8e:98:27:2f:09:9a:38:da:1f:b6:68:
         4c:cb:97:5f:cd:cb:fe:a0:4c:a1:3b:47:bd:56:5b:13:0e:a0:
         d3:0e:57:26:aa:5b:fd:f8:65:dd:5d:34:7b:9f:1e:f9:0c:ec:
         36:48:41:b7:0e:11:48:43:61:51:44:c9:3a:4a:77:70:11:c0:
         ca:08:ef:56:b2:e2:16:cd:d5:dc:d7:fd:1a:50:30:1e:09:fa:
         4d:8a:45:6e:02:58:51:7a:c7:a3:60:ff:06:2e:4b:2a:b8:3c:
         b5:cd:b5:a0:c0:1a:74:8b:45:8d:4d:df:ec:93:2e:ef:86:02:
         6d:5c:fc:5d:9d:ee:1f:70:3c:43:ac:2d:ec:5e:81:8c:e5:28:
         87:74:d2:7e:bc:00:b1:26:1c:db:9d:69:b7:0e:e0:bc:d9:00:
         28:03:a9:a8:a2:65:f6:60:78:b9:c7:78:71:10:f9:bf:b1:51:
         3a:8a:7b:5f:3d:d4:a3:6a:17:bc:de:a4:ee:3b:a5:b2:a6:73:
         50:ce:90:1f:36:79:4f:c8:e8:3f:14:0f:d2:8b:91:b9:7a:e6:
         82:86:23:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----