Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BDUlrPru1L0jxpknGmDnCo6OHgE.roa
File:                     BDUlrPru1L0jxpknGmDnCo6OHgE.roa (raw, json)
Hash identifier:          k0wabN9P5W8neB3EWrkUYwGYDyeZ9eqgOTqTvQ34+q0=
Subject key identifier:   04:35:25:AC:FA:EE:D4:BD:23:C6:99:27:1A:60:E7:0A:8E:8E:1E:01
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0CD2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BDUlrPru1L0jxpknGmDnCo6OHgE.roa
Signing time:             Tue 29 Sep 2020 09:53:51 +0000
ROA not before:           Tue 29 Sep 2020 09:53:51 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.193.240.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3282 (0xcd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:53:51 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=043525ACFAEED4BD23C699271A60E70A8E8E1E01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ba:df:c2:01:e7:d9:e0:33:fe:65:ea:cd:d5:
                    2c:c6:50:f9:11:7f:ec:c9:6a:05:6c:9e:a9:e3:12:
                    35:28:63:69:3d:c7:7d:70:0b:ec:0b:ac:31:1b:d5:
                    9e:34:a7:6d:c2:89:81:e7:10:83:ad:90:a4:ba:3e:
                    6a:29:a0:7a:c2:a0:ee:af:37:d7:96:bd:44:38:4f:
                    d9:f1:0c:ae:f1:48:dc:46:ef:1b:5f:1c:a1:c6:07:
                    63:d0:c5:49:bf:72:b4:4c:70:24:cd:75:57:9d:d6:
                    e6:17:42:0b:40:01:d6:0c:ab:00:df:79:ff:ab:84:
                    25:0d:74:8e:d4:d3:06:5c:be:07:20:da:6f:da:16:
                    bd:82:9b:c1:8e:79:7c:fd:af:4e:bc:04:b3:2f:c2:
                    9b:2c:f2:ca:f6:f8:54:d6:25:24:e0:43:00:61:65:
                    53:3b:58:7a:5f:bf:fa:67:3c:3b:9b:c0:74:f5:aa:
                    3c:64:5e:e2:be:d3:be:1c:5d:0b:96:5f:8a:0c:ed:
                    f0:b6:32:e7:af:e1:67:20:f9:35:30:25:00:37:16:
                    c2:ab:22:0d:13:c5:b7:56:d0:8a:2e:3a:b3:08:1e:
                    15:c9:75:14:0f:5b:5c:38:f6:0f:d9:22:e8:2b:96:
                    a3:fb:52:6b:9f:d6:c2:88:7e:45:f2:24:37:c3:54:
                    8b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:35:25:AC:FA:EE:D4:BD:23:C6:99:27:1A:60:E7:0A:8E:8E:1E:01
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BDUlrPru1L0jxpknGmDnCo6OHgE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         16:5e:8a:a9:73:0b:db:c7:9c:7c:ac:cd:32:c0:42:74:04:77:
         3e:ef:3d:75:0a:a3:28:78:ec:d3:c2:0f:80:7f:87:39:c8:1a:
         24:af:b9:f1:36:18:70:4f:fb:1a:82:57:71:de:ce:2c:ab:e0:
         ec:9a:01:bc:5e:93:c9:00:1b:65:a3:30:50:d9:29:77:a3:35:
         9c:cc:40:11:ac:29:42:88:80:24:13:0a:b3:d7:21:11:30:e5:
         96:1a:4b:98:b1:cd:d3:8b:c4:a3:88:4c:3a:cb:a3:ac:15:7c:
         aa:4f:9a:7b:7a:9e:06:91:a0:ca:eb:5b:80:e8:33:a7:63:c9:
         5f:99:95:d4:07:90:3c:93:39:64:c9:df:41:8b:68:37:44:3a:
         13:58:3d:05:67:c6:e9:1c:61:f8:d2:58:0b:2c:d5:06:42:58:
         f3:3c:92:5c:08:98:6e:34:88:a3:f6:76:47:c8:a9:df:41:b3:
         66:a6:dc:74:47:f1:cf:78:59:07:75:84:42:d6:9c:95:86:78:
         43:8a:a7:85:bb:7f:88:72:5d:3b:55:4d:3e:d7:2a:03:a0:2f:
         1e:b4:a6:f0:1d:51:f9:4c:08:21:7f:90:eb:94:49:33:3c:4e:
         63:0b:3d:58:44:b9:bb:aa:0c:d2:4a:c6:35:e4:18:51:ad:e6:
         6e:3a:5e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----