Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EbOyB473YMkpa9lB76L-zK6JPfU.roa
File:                     EbOyB473YMkpa9lB76L-zK6JPfU.roa (raw, json)
Hash identifier:          +ETVergHPVIks+Uy4K/tQTINN6ZvbTzlx1F7EstXuG8=
Subject key identifier:   11:B3:B2:07:8E:F7:60:C9:29:6B:D9:41:EF:A2:FE:CC:AE:89:3D:F5
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D1D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EbOyB473YMkpa9lB76L-zK6JPfU.roa
Signing time:             Tue 29 Sep 2020 09:54:12 +0000
ROA not before:           Tue 29 Sep 2020 09:54:12 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.232.32.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3357 (0xd1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:12 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=11B3B2078EF760C9296BD941EFA2FECCAE893DF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:78:43:e9:07:2f:48:1d:d7:47:b0:75:57:ec:
                    c4:bd:e8:52:74:56:01:8e:c8:cf:3b:55:92:34:aa:
                    77:4b:4f:6b:58:e4:20:4b:83:67:65:c1:62:68:fa:
                    32:bb:86:fe:86:7c:3b:6a:38:7b:25:29:c3:d7:4e:
                    0e:1d:84:5e:cd:a5:01:ba:35:ad:c8:77:cf:90:ae:
                    de:e3:be:96:e1:2c:12:9f:2d:5f:26:e3:05:13:cd:
                    af:43:ee:07:e9:4e:5d:07:0e:c0:48:a5:a5:0c:c4:
                    49:17:b2:c8:d2:67:09:d1:c4:78:69:5e:27:30:c4:
                    d5:2c:d4:28:35:74:cd:a2:54:a9:15:16:bc:5d:63:
                    12:be:9a:00:ad:16:5b:47:cf:d2:a5:6e:68:e0:34:
                    9a:3b:3b:10:c3:74:a9:9c:c6:0c:4f:7d:04:05:35:
                    91:72:b9:e7:62:10:ce:24:bb:40:7b:a4:01:84:71:
                    e2:5f:e7:99:a8:53:9d:a3:51:ed:e8:34:97:68:df:
                    3b:2b:db:fa:e2:13:a7:cb:89:59:50:32:39:ab:a2:
                    6b:0f:50:17:52:95:be:3d:b3:60:bf:33:f1:8a:05:
                    7e:69:d7:22:75:fd:e1:6f:8b:84:2c:20:3d:a0:37:
                    70:4f:76:26:b9:c0:1d:fe:6e:ce:c6:c3:16:f1:3f:
                    00:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B3:B2:07:8E:F7:60:C9:29:6B:D9:41:EF:A2:FE:CC:AE:89:3D:F5
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EbOyB473YMkpa9lB76L-zK6JPfU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:54:37:27:0f:26:49:62:e7:17:5c:0a:69:12:54:d2:67:9e:
         74:78:f6:d2:a1:a7:75:77:45:f5:ed:d2:65:99:71:27:19:de:
         0a:97:cc:5d:f0:df:c8:b4:e9:4a:69:35:fb:6a:28:11:9a:83:
         fb:4d:95:ff:ba:13:f3:ee:34:e2:be:9c:b7:01:62:eb:70:39:
         1d:24:30:0b:a1:23:73:bb:a2:4a:11:41:ff:99:45:3f:21:fe:
         a7:99:72:32:d7:56:ec:88:c4:54:85:2d:2d:3e:24:10:39:c7:
         3e:be:12:1b:8a:35:e3:66:de:00:d0:f7:34:38:df:a6:47:2e:
         dc:bf:b3:95:c0:c7:94:9f:42:a0:c8:ec:91:93:b7:0d:57:ba:
         c7:b9:ad:00:18:28:f2:11:be:32:6c:44:d8:f4:7c:47:51:6b:
         7c:5e:bd:6f:df:64:1b:6a:ad:a8:47:08:62:15:59:84:dc:d9:
         72:74:97:12:61:48:4d:ef:7f:2e:64:55:79:0c:a8:ad:4f:d4:
         07:04:27:f3:42:74:b0:2b:81:e9:15:31:78:28:98:e9:0b:28:
         df:c0:fb:d1:1b:08:7f:5f:c7:f9:5f:fc:8e:50:9f:83:a7:3c:
         0d:17:db:1c:6b:67:ab:c0:fb:f9:55:c7:43:4f:02:31:48:b1:
         06:5f:f5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----