Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EPKzjg5yyaz1mi4oCT4aMxFLx4U.roa
File:                     EPKzjg5yyaz1mi4oCT4aMxFLx4U.roa (raw, json)
Hash identifier:          4Bs8SQMqyPS4rSIIFPgxzaFZBeuQFLa9qVCGOvLQxtg=
Subject key identifier:   10:F2:B3:8E:0E:72:C9:AC:F5:9A:2E:28:09:3E:1A:33:11:4B:C7:85
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0DF7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EPKzjg5yyaz1mi4oCT4aMxFLx4U.roa
Signing time:             Tue 29 Sep 2020 09:55:11 +0000
ROA not before:           Tue 29 Sep 2020 09:55:11 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        123.193.144.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3575 (0xdf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:11 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=10F2B38E0E72C9ACF59A2E28093E1A33114BC785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0f:61:73:2b:5d:e0:ad:30:6c:0b:63:b3:1d:
                    eb:3e:01:78:99:9e:ca:a0:2b:c9:17:b4:ae:fa:0c:
                    2b:87:75:11:5d:b9:bd:2b:91:2e:8c:0d:80:e4:59:
                    00:0f:45:6f:8d:e3:34:e0:a5:d7:cf:c7:ab:5b:60:
                    72:97:e5:b2:b6:8b:bb:39:6d:b9:4b:99:99:7f:27:
                    5b:2b:44:61:24:25:ea:5d:e2:25:5b:38:69:66:80:
                    e9:5e:76:8f:29:ae:a8:a7:2a:4c:92:cf:1e:a0:c4:
                    1f:a4:e5:1c:87:c3:c7:8d:f6:41:aa:e6:06:2d:d4:
                    3f:c1:c0:55:8a:c5:af:9b:2e:36:05:a6:bc:06:05:
                    a0:62:a0:9c:12:c2:f5:6e:7c:16:93:1c:50:a8:58:
                    ba:d7:18:51:99:e5:69:d9:91:97:0c:4c:ae:bd:52:
                    09:bf:7c:15:33:7f:d4:9c:40:2e:7a:5d:d9:4d:1b:
                    0c:6b:0f:6c:49:1a:f9:1a:da:6c:44:9e:be:30:63:
                    c5:63:a2:c9:dd:25:23:78:9d:d3:54:6d:0c:62:a2:
                    17:40:34:22:bc:d0:99:19:d0:db:e5:e6:5c:1a:1d:
                    f4:18:6d:ac:e3:93:54:49:a0:a6:3e:67:b0:3c:7f:
                    42:c6:ba:e0:0d:a8:a8:ec:6e:d0:da:9a:97:33:f8:
                    8c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F2:B3:8E:0E:72:C9:AC:F5:9A:2E:28:09:3E:1A:33:11:4B:C7:85
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EPKzjg5yyaz1mi4oCT4aMxFLx4U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ab:95:9a:5f:7d:08:28:f0:5c:42:a0:aa:77:58:3f:30:f7:47:
         c7:38:30:f6:97:5c:77:97:32:da:67:b1:44:45:db:93:57:44:
         2e:99:c6:f8:0e:d2:0b:3a:e1:ae:a5:a0:e3:a2:a9:97:65:c1:
         fd:c0:eb:e5:67:18:3e:67:ec:25:c9:26:d2:ba:d1:45:11:cd:
         c9:89:3a:76:d6:97:d7:49:4a:c8:30:50:ab:b2:1f:40:48:97:
         9a:7e:fc:3f:45:1a:53:a5:14:ee:b4:34:0f:e1:44:31:51:ea:
         de:d5:d3:ab:6c:84:34:ac:2d:d1:7a:37:3e:c0:73:10:1c:e3:
         4b:bc:ca:8b:53:a1:bb:d7:f3:cd:6e:fe:3b:a1:56:f2:6e:4a:
         1a:f6:15:b6:fa:49:8d:a0:3f:42:d4:4a:55:62:e2:71:87:67:
         22:00:1f:0e:fb:50:5d:37:01:ae:c3:03:64:1e:8f:16:3b:53:
         b2:ba:ea:4e:30:46:ae:85:5f:da:28:e4:62:3e:bc:85:4d:d0:
         5c:c0:e1:5c:08:0f:55:b3:12:ef:89:7f:b5:d6:b5:a4:1c:53:
         76:1d:36:27:bf:b9:18:cc:4f:c4:ce:9a:b1:20:de:da:2e:7d:
         f1:e2:57:84:1d:b9:71:e3:cf:a9:24:7a:ec:e2:96:cc:fe:9d:
         97:8a:96:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----