Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GTPF58Aed5ulRRgXO7BPAlfINYs.roa
File:                     GTPF58Aed5ulRRgXO7BPAlfINYs.roa (raw, json)
Hash identifier:          FxTQvpxSPxGOxc6jNccSblCuzlLrFUO2teW3h6YPK4g=
Subject key identifier:   19:33:C5:E7:C0:1E:77:9B:A5:45:18:17:3B:B0:4F:02:57:C8:35:8B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D8E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GTPF58Aed5ulRRgXO7BPAlfINYs.roa
Signing time:             Tue 29 Sep 2020 09:54:42 +0000
ROA not before:           Tue 29 Sep 2020 09:54:42 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.233.24.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3470 (0xd8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:42 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=1933C5E7C01E779BA54518173BB04F0257C8358B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d9:61:a6:7d:c3:e5:c3:0d:9a:df:f4:e4:15:
                    07:0a:40:6d:86:49:d6:7d:07:15:83:98:a7:ab:eb:
                    51:9a:4b:bb:46:8c:63:1c:b1:22:81:70:4b:f9:2a:
                    33:0c:4b:1a:3d:8d:4c:1c:ef:c3:ea:3c:3f:40:10:
                    c3:cb:97:3a:a8:32:8d:14:fb:69:e7:2a:24:0d:ce:
                    2a:87:e5:e0:92:f3:16:11:6b:31:74:1b:81:fb:f4:
                    05:5e:28:69:d7:b0:09:b2:35:01:02:89:67:72:a7:
                    39:83:61:0f:9a:d8:0d:c5:68:dd:0a:57:1e:b9:79:
                    83:7b:27:65:2a:4f:cc:00:42:a7:25:9e:92:58:b5:
                    27:f6:4f:38:87:15:1f:4d:0f:73:3d:e2:d6:f1:b5:
                    ef:1f:09:9a:7f:e0:75:9b:b1:87:8c:b6:4e:91:a5:
                    e6:af:50:dd:88:af:e3:69:28:07:51:fc:61:39:10:
                    60:ae:f2:19:e1:e3:e8:a3:8e:67:e9:e6:98:0c:0d:
                    75:f6:a3:f2:8b:fd:49:b3:28:f1:de:b7:22:67:aa:
                    00:a2:f5:2a:cd:4e:a1:40:67:75:40:86:9b:f9:1c:
                    e6:8c:0f:d5:81:48:5e:b3:67:90:16:1f:47:da:88:
                    4e:43:eb:27:c3:a3:55:b7:f1:41:ed:c9:db:50:38:
                    45:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:33:C5:E7:C0:1E:77:9B:A5:45:18:17:3B:B0:4F:02:57:C8:35:8B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GTPF58Aed5ulRRgXO7BPAlfINYs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:75:fe:3d:9e:32:39:73:47:92:92:7b:43:8d:ec:58:f9:a3:
         45:15:96:e0:e1:5b:12:fd:84:7d:08:02:2d:3e:e3:d8:4d:4f:
         a3:b2:cd:a5:86:39:53:82:ca:e6:27:bb:26:b1:95:f5:ef:8e:
         23:a6:96:d7:cc:9a:fc:3c:4f:58:12:56:67:c6:d5:b5:db:59:
         c9:19:5c:47:c1:bb:90:03:19:ca:13:f8:df:f7:7d:51:2c:27:
         9d:fd:ac:ab:bc:05:63:e0:84:c5:18:ad:0b:82:9f:b4:86:4f:
         f6:95:b1:ec:de:2d:a9:ba:31:0f:63:cd:15:4a:bc:96:41:74:
         80:a7:8a:a5:ee:b2:7d:ce:cb:ec:ec:aa:2b:2a:76:e6:bc:f8:
         91:fa:c8:d0:08:0d:4d:4b:53:a0:e0:61:01:f9:73:af:34:55:
         18:30:4a:00:c7:f4:dd:62:5e:95:f4:df:7e:f2:9c:ba:6b:e3:
         d2:02:9f:f5:e2:c8:38:1a:f4:93:73:66:6c:a0:a3:90:a3:a4:
         2a:45:31:ea:a6:91:b6:0f:c9:58:35:4f:b4:a5:44:12:9a:2f:
         e7:c7:d7:90:c6:a7:48:cb:a9:23:9d:56:04:6e:90:c6:c3:62:
         b3:0a:79:f7:26:84:e3:71:eb:6b:29:40:f1:ef:e1:dc:ad:d2:
         3d:3d:ef:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----