Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GGaNA08ouSrBjyHC15PGYawqpGo.roa
File:                     GGaNA08ouSrBjyHC15PGYawqpGo.roa (raw, json)
Hash identifier:          vkv/bmQ/x3KPxtsdniL1v1YG3KNgLoT/B9pVcNAQxCQ=
Subject key identifier:   18:66:8D:03:4F:28:B9:2A:C1:8F:21:C2:D7:93:C6:61:AC:2A:A4:6A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       18F9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GGaNA08ouSrBjyHC15PGYawqpGo.roa
Signing time:             Sun 07 Feb 2021 12:55:44 +0000
ROA not before:           Sun 07 Feb 2021 12:55:44 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        123.195.128.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6393 (0x18f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:55:44 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=18668D034F28B92AC18F21C2D793C661AC2AA46A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:90:05:4e:1d:20:b9:d4:9d:70:e2:03:b7:2d:
                    ed:f9:df:37:d8:2a:ce:50:7d:b5:bc:f1:36:44:c2:
                    5e:2b:12:e2:f0:d9:62:b7:99:d1:92:4c:d9:7c:19:
                    e4:ac:01:b3:2a:7b:8a:3e:a5:fe:ee:d1:7d:85:e9:
                    b8:3a:49:62:da:89:57:f3:3f:02:e6:ad:f0:97:a0:
                    dc:33:6f:6e:8d:3f:b0:83:a9:7d:4c:99:72:69:42:
                    d9:50:84:26:70:d5:8b:b2:9b:22:0f:ba:7f:9d:83:
                    15:d9:e3:25:a0:6c:a0:8f:4c:5d:04:8f:6f:72:9f:
                    9d:d2:dd:49:f6:f4:bb:37:80:c8:68:3e:61:cd:6f:
                    ef:03:a5:2d:d6:b7:e8:69:3c:70:4e:bf:b5:03:b6:
                    b0:5a:72:b5:c2:2e:70:88:6c:05:2b:dc:bd:d5:61:
                    d6:fc:09:46:43:96:e3:3c:ff:6c:81:1c:30:9b:0a:
                    26:f2:d5:c6:2f:3b:d1:a5:32:b0:d6:8c:ae:99:c6:
                    dc:91:a6:6f:4e:19:a6:bd:b0:b3:b4:78:5b:d2:a7:
                    ab:f0:83:28:25:46:95:e9:f2:83:62:d1:ba:88:9d:
                    16:f4:7a:46:d7:cd:94:b9:44:22:da:9b:6c:72:32:
                    88:05:23:d5:89:da:69:28:e7:71:6c:a8:bf:ec:1e:
                    33:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:66:8D:03:4F:28:B9:2A:C1:8F:21:C2:D7:93:C6:61:AC:2A:A4:6A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GGaNA08ouSrBjyHC15PGYawqpGo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         08:3d:06:cc:80:00:7f:b2:3f:ad:cd:eb:1d:3e:f9:8c:e4:7c:
         97:76:65:8b:59:c1:e7:35:78:23:01:ec:3e:e8:cf:ce:03:8e:
         3b:25:98:f6:ce:e6:63:0f:c5:a3:b6:38:cb:6b:e5:2e:89:72:
         cb:8b:36:3b:8f:98:66:17:52:ea:79:1d:f4:a9:e4:c7:97:2a:
         7b:23:94:d0:c7:09:6e:6c:b6:37:ee:64:02:28:be:39:24:5b:
         49:32:eb:1a:a3:66:bc:63:2b:f1:7c:87:72:1e:f4:da:29:45:
         1b:6e:b1:33:98:2b:b7:ce:21:c1:ec:d9:dd:12:c9:05:bc:fd:
         e1:32:41:fc:90:86:a3:90:ee:c6:39:6b:79:87:9b:52:c2:a1:
         9d:60:31:96:68:fc:4d:75:0d:19:2d:58:26:b8:07:ac:59:2c:
         b7:0b:69:75:d3:69:ea:ab:28:f9:6d:30:9c:17:19:3a:15:af:
         01:62:66:17:4e:47:e9:c0:cc:e2:20:f0:c0:84:67:bc:fb:bd:
         ac:7e:61:8c:70:9c:95:4c:70:7d:48:47:14:a2:ba:31:ed:46:
         60:65:4e:78:4e:1c:e2:26:72:b2:70:28:73:19:11:08:18:20:
         73:b8:1c:3d:12:d5:76:72:6a:28:d7:de:21:da:50:de:e9:ed:
         54:c7:62:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----