Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8h0ZZn8QSQWVrIwfGZdHA2M7Svg.roa
File:                     8h0ZZn8QSQWVrIwfGZdHA2M7Svg.roa (raw, json)
Hash identifier:          qk/0wwSPmJk8JdJ0FYyonzUcjg2XauFxEBkSX7QYqp0=
Subject key identifier:   F2:1D:19:66:7F:10:49:05:95:AC:8C:1F:19:97:47:03:63:3B:4A:F8
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       14F9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8h0ZZn8QSQWVrIwfGZdHA2M7Svg.roa
Signing time:             Sun 07 Feb 2021 12:00:53 +0000
ROA not before:           Sun 07 Feb 2021 12:00:53 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.193.0.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5369 (0x14f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:00:53 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F21D19667F10490595AC8C1F19974703633B4AF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:17:83:e9:e2:bc:c3:3e:fe:a8:e4:52:60:74:
                    22:82:90:f9:c3:ef:35:a2:bb:3a:c3:b4:d1:80:a9:
                    c3:0f:6b:40:c2:a1:02:2c:41:9f:0c:87:5f:e7:cb:
                    11:bf:d3:24:1a:da:ea:85:ea:34:d4:47:cb:7e:4b:
                    ca:45:a8:4e:cc:3c:9a:07:3b:c3:7a:77:dc:b8:d5:
                    00:e1:ff:bc:1a:2f:11:d3:cf:e7:b1:d4:35:0c:de:
                    b9:ec:ce:79:a2:a0:a2:7a:6b:d0:d5:e1:f2:68:cc:
                    be:b4:65:0e:16:8a:65:ec:00:e0:9d:19:16:4e:02:
                    34:64:57:19:05:f3:10:9f:5f:16:36:0d:1e:9a:f2:
                    68:77:61:f4:9f:e0:12:6a:e7:e3:3f:ac:d7:ac:eb:
                    20:e2:e0:11:77:86:87:6d:de:c7:87:67:85:0f:89:
                    e1:eb:40:fc:65:08:1f:04:99:a7:5d:50:6d:14:8c:
                    49:f3:8b:5e:7e:e1:de:ff:c5:4c:13:9c:6e:2a:5a:
                    04:5d:28:22:27:dc:e4:5e:32:71:11:44:4a:69:30:
                    26:79:98:d1:03:f0:37:ac:90:72:64:a6:ad:bc:30:
                    73:db:22:5d:bf:62:70:51:bf:87:d3:3b:1f:fd:4c:
                    cb:54:36:62:29:4a:9a:02:05:25:1f:49:db:55:62:
                    5f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1D:19:66:7F:10:49:05:95:AC:8C:1F:19:97:47:03:63:3B:4A:F8
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8h0ZZn8QSQWVrIwfGZdHA2M7Svg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2a:bc:f0:30:10:28:90:08:06:18:f5:0e:c4:68:d2:df:08:19:
         0c:1a:f0:87:26:f2:72:9d:82:61:53:63:e1:cc:67:8a:25:02:
         8e:15:8f:e4:1a:50:bc:73:a4:94:c5:6a:8c:25:20:d0:26:c1:
         54:2f:47:88:53:da:a7:7c:a8:af:0c:3a:67:4c:18:e5:9f:1b:
         9e:1d:5a:77:34:1e:ba:1f:c4:a1:27:37:28:64:b3:ec:85:b3:
         61:54:ef:55:03:56:4f:9e:03:83:1c:55:39:0b:b2:81:e9:53:
         04:2c:86:00:9b:27:7c:d0:86:b1:a1:97:e4:6a:ff:37:5b:43:
         e7:87:ed:99:35:96:7b:df:7f:ef:a6:64:68:03:e9:d2:6a:a8:
         fe:bc:75:1b:ea:e5:c0:4f:bf:42:86:43:18:5a:f8:19:8c:b1:
         d0:20:eb:2f:1e:63:37:c1:ee:ad:b8:58:88:a5:b5:d3:3a:e9:
         cd:dd:84:f4:2a:8b:15:3b:37:ef:75:66:58:4d:24:a1:9d:6c:
         0b:da:2d:88:2e:83:8e:1b:86:21:59:80:0f:97:4f:80:7f:8e:
         f7:9f:a7:e8:b9:bd:64:c2:cf:6a:4a:44:9a:90:59:7d:91:4a:
         96:fd:a3:35:75:4b:68:d2:92:1a:09:f8:05:23:ba:a3:0e:38:
         b6:18:d6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----