Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8VvGkgR2p5mLKYfq7Z037rZADow.roa
File:                     8VvGkgR2p5mLKYfq7Z037rZADow.roa (raw, json)
Hash identifier:          olcPEz+gyFezsNBgd5z5e61vsnDgmpilPw8PpRUkP4g=
Subject key identifier:   F1:5B:C6:92:04:76:A7:99:8B:29:87:EA:ED:9D:37:EE:B6:40:0E:8C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1895
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8VvGkgR2p5mLKYfq7Z037rZADow.roa
Signing time:             Sun 07 Feb 2021 12:40:17 +0000
ROA not before:           Sun 07 Feb 2021 12:40:17 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.233.80.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6293 (0x1895)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:40:17 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F15BC6920476A7998B2987EAED9D37EEB6400E8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a6:f2:60:83:2d:33:18:c3:87:20:c5:43:0b:
                    f2:9e:dd:da:49:ef:e4:18:db:2e:d9:0f:85:29:37:
                    9f:51:07:8c:a2:00:8f:bc:9e:12:eb:f7:d7:b3:72:
                    39:72:31:8c:76:fc:c5:c4:e3:ce:17:83:ea:74:68:
                    75:ad:1f:e8:1a:81:4d:15:cd:55:38:c2:39:f2:90:
                    ca:b7:79:86:ca:dc:95:bb:c9:ec:24:b0:27:cd:1a:
                    a4:11:75:ab:00:9d:6e:88:5b:7b:99:9d:21:b0:96:
                    23:8d:b5:0a:5d:63:38:e1:ad:ef:ce:20:9c:08:ba:
                    ce:10:3a:ca:94:f5:80:75:3a:7f:eb:f5:cc:e9:98:
                    d9:1f:e7:67:b7:ff:a7:40:bd:8d:6f:89:67:cb:a9:
                    bb:c9:a2:56:29:48:c2:cb:dd:14:f7:61:62:d7:2d:
                    b4:4d:f5:67:ba:b9:90:25:6e:59:93:7d:34:05:46:
                    c7:23:49:1a:7c:d7:12:61:80:de:de:56:e2:a5:21:
                    47:88:30:89:f2:cd:ec:37:2f:58:a1:47:86:66:08:
                    94:77:97:bc:18:d2:e1:57:79:af:b7:a7:c2:7c:98:
                    65:a4:65:c2:b0:83:f2:6b:39:b9:85:9c:0c:7a:e8:
                    70:b1:b9:5d:68:11:30:d5:64:fe:2b:27:8b:28:db:
                    40:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5B:C6:92:04:76:A7:99:8B:29:87:EA:ED:9D:37:EE:B6:40:0E:8C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8VvGkgR2p5mLKYfq7Z037rZADow.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:b0:6d:68:7c:c0:97:42:f5:5d:b6:ba:a4:a4:4c:b6:86:14:
         7e:12:cb:d4:7e:ec:c2:0e:4b:5d:00:24:2f:93:1d:88:12:6a:
         53:af:a1:44:91:00:e1:aa:b7:f8:07:a5:6e:d1:13:cf:4e:9b:
         45:7c:9c:63:c3:3a:2c:0c:d8:90:57:8b:65:c3:9a:8b:dd:42:
         d0:85:05:fd:39:fc:f9:b6:07:25:35:6e:e5:32:51:83:78:01:
         32:db:16:5d:79:0a:cd:3a:d4:54:9d:0d:5f:13:a3:26:6c:24:
         8a:07:01:a0:6e:d9:81:82:1c:10:0c:11:52:68:f4:cc:c6:ab:
         fe:94:1e:e2:0f:75:66:19:6d:cb:b4:4f:be:18:70:e7:e8:4f:
         56:46:b6:b1:5a:be:c4:44:4c:1c:52:13:b7:a4:fc:23:40:ec:
         83:1f:5f:1a:fb:33:af:6b:53:52:f5:a2:ad:3a:c6:68:87:21:
         48:27:ed:60:dc:d5:2f:7d:d3:08:fc:e8:01:e5:8d:e5:64:f0:
         34:0d:a2:d2:f6:cf:20:70:1a:b8:2a:15:c6:d1:d9:f1:1a:fb:
         4a:60:18:20:15:05:ca:87:c2:d3:b0:67:a2:88:ac:3c:34:64:
         27:fb:82:12:78:13:0a:ad:c9:e0:a6:16:86:59:45:5c:0f:70:
         e0:12:2e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----