Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9J0W11yYYEARsBIJ25oaw19EFuo.roa
File:                     9J0W11yYYEARsBIJ25oaw19EFuo.roa (raw, json)
Hash identifier:          U4IUgk5wJjL5h7v0+tBBjOkRCxHdsBfOugANZCv+VVI=
Subject key identifier:   F4:9D:16:D7:5C:98:60:40:11:B0:12:09:DB:9A:1A:C3:5F:44:16:EA
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D49
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9J0W11yYYEARsBIJ25oaw19EFuo.roa
Signing time:             Tue 29 Sep 2020 09:54:24 +0000
ROA not before:           Tue 29 Sep 2020 09:54:24 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.233.244.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3401 (0xd49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:24 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F49D16D75C98604011B01209DB9A1AC35F4416EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:97:56:7c:05:12:9c:0a:c0:f7:41:43:8c:90:
                    68:0a:b2:a9:d3:21:f2:62:8f:12:96:63:c1:b0:2d:
                    be:c6:c4:38:55:1d:79:ec:4c:bc:43:d5:6a:51:c0:
                    58:8f:27:73:e9:8c:4b:37:6b:1f:4d:a2:a0:76:cf:
                    63:a4:5a:99:f8:2b:0b:d2:08:8a:f5:86:37:cc:3e:
                    22:39:9b:a5:e0:49:6e:20:92:72:3b:98:13:b5:8d:
                    38:80:4c:6b:c1:04:0a:72:b4:a9:ed:2e:5b:f6:9a:
                    3a:d8:3c:a3:d9:2b:ed:70:af:9f:4d:d3:6b:4c:4a:
                    25:7a:5c:db:e5:ea:4a:b8:a1:1f:82:e8:a3:1b:d0:
                    ba:85:b5:64:c5:16:bf:98:f0:29:a7:dd:fc:7b:6e:
                    d6:f2:4c:12:fe:09:8a:23:d0:3d:56:f7:88:1a:35:
                    1a:86:f7:2b:d3:41:1a:79:70:b4:24:f2:5b:58:3b:
                    53:3b:7d:40:7d:e1:22:46:b6:43:81:a9:9f:d9:ce:
                    9a:14:36:52:4e:58:67:83:e8:7b:54:37:ea:43:0b:
                    41:ff:e2:6f:fe:39:78:bd:0d:9f:06:13:75:e4:22:
                    47:1c:47:27:2e:d9:09:a0:2e:c6:bc:51:a2:41:dc:
                    92:58:91:55:74:dc:9f:d0:5a:cd:c4:7f:fa:50:dd:
                    a9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9D:16:D7:5C:98:60:40:11:B0:12:09:DB:9A:1A:C3:5F:44:16:EA
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9J0W11yYYEARsBIJ25oaw19EFuo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:54:a2:fb:8b:3b:11:cf:d9:9d:a9:3d:3b:43:0b:a9:77:7a:
         82:2c:33:7d:9d:af:65:11:ae:96:29:b5:3f:71:74:6f:f5:1f:
         20:47:47:bb:38:8e:71:38:d8:73:80:86:28:78:2d:ef:66:26:
         85:a1:eb:61:a2:16:fd:4c:72:dd:e0:73:ee:85:eb:1b:4c:b1:
         11:e4:23:69:62:dd:72:01:d3:c2:1e:37:1a:18:ef:a4:b7:5a:
         cf:8b:9f:5f:61:41:24:d2:7d:3e:d1:27:48:6c:f4:2c:a7:a9:
         f6:e9:e6:0c:11:a1:f5:1a:56:a1:c1:d1:a7:fe:5c:f3:4e:48:
         8b:82:da:e1:5c:2d:fc:cd:fd:e4:84:9d:65:d0:7d:77:6b:11:
         2b:9c:c4:54:02:2c:6b:dc:53:7b:99:29:c6:a8:99:01:f5:19:
         5a:ea:0d:30:2d:58:df:d4:77:39:f2:a3:4a:fb:36:3a:01:75:
         9e:48:74:dc:52:be:f5:c2:18:d9:c6:ea:ca:9e:6a:7a:c2:85:
         ae:7b:f5:e1:c3:e3:ec:bd:06:3f:ab:3b:a0:cc:d3:49:72:11:
         e6:ff:cc:07:e6:42:09:0c:ac:90:7a:61:50:70:d0:7d:87:68:
         f6:80:19:44:05:96:73:45:c4:c4:97:5b:cf:d7:16:24:2b:84:
         a6:2c:46:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----