Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/85-qjzwY80Sl_Dchn8x9er3Ogzc.roa
File:                     85-qjzwY80Sl_Dchn8x9er3Ogzc.roa (raw, json)
Hash identifier:          WXcZuqjFPf/9VggpJhaT3yHGKKAmS/rl3+o0SwcrFtM=
Subject key identifier:   F3:9F:AA:8F:3C:18:F3:44:A5:FC:37:21:9F:CC:7D:7A:BD:CE:83:37
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E81
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/85-qjzwY80Sl_Dchn8x9er3Ogzc.roa
Signing time:             Tue 29 Sep 2020 09:55:49 +0000
ROA not before:           Tue 29 Sep 2020 09:55:49 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.112.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3713 (0xe81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:49 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F39FAA8F3C18F344A5FC37219FCC7D7ABDCE8337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9c:ee:b3:65:2d:1a:88:aa:71:ae:65:43:6d:
                    d0:58:19:7c:96:d0:c2:28:dd:6e:c3:a4:eb:f4:8f:
                    67:22:8d:89:50:e8:ef:45:41:30:96:0f:08:b3:e0:
                    3c:7a:d1:7d:4e:23:ec:04:9f:a9:25:fa:cf:08:2e:
                    2c:45:7c:88:df:23:da:9c:34:b9:0e:fd:3b:65:99:
                    3a:17:bb:17:98:33:7c:e0:8e:1c:4f:dd:26:ea:e8:
                    ec:5b:0a:1a:50:84:f4:08:bc:9c:b5:ae:5a:00:ce:
                    fd:a2:db:e7:0c:f7:c9:b5:b8:e2:53:9c:d0:f8:be:
                    24:7d:cc:dc:71:d7:b4:e5:e2:6d:f3:ca:81:13:19:
                    f6:2b:c5:df:a2:e5:73:f6:d9:3c:a7:34:a2:62:2b:
                    5d:11:cd:f1:3e:b7:79:c7:41:b6:5e:74:41:0e:b7:
                    88:cf:a2:58:22:fa:ff:02:7b:29:a8:14:56:f9:f8:
                    c9:e3:27:10:af:59:b8:8c:8b:81:7c:78:ce:2d:72:
                    fb:11:2d:d4:f9:04:6d:17:fa:2d:2c:a5:d2:cf:6d:
                    e9:10:81:fd:4c:2c:af:a6:71:e9:89:d4:9f:a4:8b:
                    75:ff:de:6f:9b:16:a7:ec:f0:1f:51:b2:a0:e9:ad:
                    e5:91:50:af:12:53:30:8c:93:2b:f4:93:e4:f9:e1:
                    5b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:9F:AA:8F:3C:18:F3:44:A5:FC:37:21:9F:CC:7D:7A:BD:CE:83:37
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/85-qjzwY80Sl_Dchn8x9er3Ogzc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         97:22:b5:47:9b:e5:01:31:96:36:32:ef:0f:fb:c4:81:eb:08:
         2c:79:33:4f:96:c9:11:66:76:eb:9c:a3:5d:8a:d0:cd:81:f3:
         20:61:4e:37:92:47:e7:d6:20:fa:db:be:58:ed:63:45:c4:2e:
         47:41:37:83:96:67:d4:6f:53:6b:ef:2a:f9:16:c3:24:c6:ad:
         3d:ee:f0:02:d1:d9:38:f6:3b:a1:82:43:4c:c8:ec:fb:9f:75:
         f7:d5:e2:a8:7f:69:0e:2a:a6:f0:86:2b:05:53:32:87:5c:f5:
         fe:9c:05:87:79:74:67:5f:6d:36:36:ff:57:68:72:6e:67:79:
         c8:66:43:b4:2a:ae:c5:be:02:a1:5c:d8:20:77:8d:3c:a4:da:
         af:13:29:ff:fb:04:04:7d:6b:a1:8a:df:3b:e0:d5:d9:17:3e:
         0f:30:c4:73:6c:3a:08:95:90:86:09:c8:23:1f:57:19:d0:31:
         20:0f:fb:aa:e1:67:4a:8e:55:f0:6d:6c:20:94:2a:c5:27:9a:
         31:c3:a4:d4:9e:b6:a0:a8:a4:c0:44:c3:05:41:91:11:f8:ad:
         cc:e8:4f:9f:cf:47:dc:f9:f5:9d:4d:1b:4e:4a:60:ee:57:52:
         f6:48:14:ba:fe:4c:f8:97:50:d6:64:76:40:80:43:55:c6:d5:
         e3:1b:43:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----