Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DLEHiVB7GnfXMji-di2UHhJhKdo.roa
File:                     DLEHiVB7GnfXMji-di2UHhJhKdo.roa (raw, json)
Hash identifier:          LoebbzjHi5XaBGC4rezMbmgopvOGMhTO2R4HmGzZgK4=
Subject key identifier:   0C:B1:07:89:50:7B:1A:77:D7:32:38:BE:76:2D:94:1E:12:61:29:DA
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E8D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DLEHiVB7GnfXMji-di2UHhJhKdo.roa
Signing time:             Tue 29 Sep 2020 09:55:51 +0000
ROA not before:           Tue 29 Sep 2020 09:55:51 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        211.76.123.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3725 (0xe8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:51 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=0CB10789507B1A77D73238BE762D941E126129DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:59:b7:f5:ef:a6:eb:8e:9d:b4:70:b7:0e:bc:
                    5b:0d:59:f6:c7:6b:78:a4:25:a8:74:d6:4b:c2:63:
                    7e:12:c3:bc:cc:d3:61:15:6d:25:7c:89:7e:97:17:
                    c9:e8:b8:c0:11:88:b6:8a:ab:bf:1a:96:cb:9e:6f:
                    a7:4d:11:1d:b6:08:15:7c:7d:7d:48:f5:96:fd:3d:
                    de:ac:de:17:76:75:b5:0a:b0:62:bc:5a:73:69:a3:
                    97:0c:f8:cf:68:ee:60:34:1d:c6:72:3e:e5:62:9e:
                    52:7c:e3:27:9e:5a:db:1f:18:53:72:2d:7d:e0:df:
                    36:02:d4:af:30:7a:88:a7:1f:9d:bb:22:8f:24:b2:
                    74:67:94:16:31:af:12:4b:b7:f3:93:07:94:06:0e:
                    a1:46:04:59:a8:12:1d:f9:76:f6:70:ec:21:93:d1:
                    11:48:99:f8:52:b1:39:39:4e:fa:8d:95:06:b9:3e:
                    c4:d2:06:a1:87:ca:51:a6:d1:51:5c:ca:23:6b:ab:
                    4a:0b:45:05:bf:16:23:aa:e8:46:59:a4:09:a5:e5:
                    57:44:8e:92:a2:3b:bb:00:36:78:1e:6d:a4:0f:27:
                    c2:f8:31:f1:5e:e9:86:86:2d:95:2e:7a:d5:11:d3:
                    fe:ae:2a:89:77:cb:2a:21:77:b5:0a:87:72:ce:64:
                    47:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B1:07:89:50:7B:1A:77:D7:32:38:BE:76:2D:94:1E:12:61:29:DA
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DLEHiVB7GnfXMji-di2UHhJhKdo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:c2:61:76:b3:a2:8d:e1:75:6c:8b:89:a6:c3:6f:36:a9:19:
         64:55:9c:59:90:b1:b3:1d:07:2d:e4:9e:98:f6:3d:0d:6e:84:
         e5:69:3e:f8:ed:03:e0:55:68:e2:9f:ce:4a:46:7c:11:6d:83:
         e2:fa:40:49:94:54:fe:5a:df:bd:99:a5:9b:0e:76:d9:d8:c9:
         e6:d5:6d:a3:56:f0:85:70:5b:11:45:31:97:e7:10:94:ee:dc:
         94:68:96:14:2f:5f:7b:a7:ae:30:e0:44:7f:83:cc:6f:01:77:
         36:3d:71:0b:ff:42:14:00:11:f3:71:11:98:fa:a2:f9:45:56:
         0f:2d:e1:d4:c4:88:f7:d7:1f:43:91:1a:44:6a:11:39:39:8f:
         5f:4e:cb:68:8b:2e:00:42:bb:6d:b1:e4:61:07:97:41:5c:d2:
         00:8e:95:c5:ac:af:2e:30:dd:69:3f:7d:a4:be:d0:86:25:70:
         53:44:6e:b3:38:a6:d3:88:d1:3e:f4:a3:46:8c:e4:6b:38:10:
         14:13:4f:e0:25:6c:cf:ee:37:ed:dd:ef:35:4a:bb:59:90:fd:
         82:18:12:67:40:86:b5:ef:3c:31:9d:8a:a2:52:15:f9:b8:26:
         2b:e1:ad:ec:d6:c3:d9:97:98:9c:f2:85:7e:0f:d4:b8:0e:c9:
         1c:4c:24:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----