Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Gfd5A_Dc5Qy-qxJl9ZYYJ6UEUHE.roa
File:                     Gfd5A_Dc5Qy-qxJl9ZYYJ6UEUHE.roa (raw, json)
Hash identifier:          uPFCu7xs1+QxmtfsD6YV7BF59a9nzgfdkF741Umqxtg=
Subject key identifier:   19:F7:79:03:F0:DC:E5:0C:BE:AB:12:65:F5:96:18:27:A5:04:50:71
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D29
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Gfd5A_Dc5Qy-qxJl9ZYYJ6UEUHE.roa
Signing time:             Tue 29 Sep 2020 09:54:16 +0000
ROA not before:           Tue 29 Sep 2020 09:54:16 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.233.108.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3369 (0xd29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:16 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=19F77903F0DCE50CBEAB1265F5961827A5045071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a8:39:7e:c4:7e:3f:23:b7:3d:68:11:03:64:
                    96:cd:67:d1:38:06:d5:fb:57:6c:c2:56:b9:b9:6d:
                    76:6c:6f:3a:fe:67:01:dd:40:6f:df:c3:d6:08:45:
                    ef:70:22:6c:0a:81:2c:51:94:33:a3:ff:4f:e8:8a:
                    61:b0:53:84:1e:39:c2:12:a9:51:a2:bd:4c:eb:b0:
                    36:73:e7:c0:5b:ab:34:e1:94:6e:44:93:32:5c:95:
                    32:de:6a:d2:18:2b:ee:ea:31:b0:5e:54:96:0e:5d:
                    fc:b3:55:8c:2f:45:b1:3c:f7:21:52:11:e3:af:dd:
                    90:ed:39:dd:8b:ee:63:fa:e2:ef:e0:32:f3:2b:76:
                    59:c8:b1:6e:5e:73:52:f1:5a:d1:c4:2a:ac:4a:25:
                    86:13:0d:ac:b7:a5:0d:83:53:b0:57:f1:cb:03:f4:
                    b1:86:d8:03:eb:c0:9b:5e:54:7a:63:71:9c:70:4b:
                    af:2c:6f:23:f4:1d:31:50:e4:1f:04:77:4f:51:12:
                    9d:53:12:d7:71:dc:26:f4:a2:05:7b:09:5f:31:b9:
                    33:46:45:2e:d6:eb:db:72:d6:f3:1c:04:e1:9f:a3:
                    fc:14:ad:06:c8:31:af:07:37:d5:a8:7b:e9:31:c8:
                    50:90:4e:71:9d:f1:fc:b8:61:2d:3d:ce:d0:70:20:
                    0b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F7:79:03:F0:DC:E5:0C:BE:AB:12:65:F5:96:18:27:A5:04:50:71
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Gfd5A_Dc5Qy-qxJl9ZYYJ6UEUHE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:d6:e8:c4:12:42:0c:9d:c2:d6:12:1b:ab:f7:8c:9f:2e:0e:
         58:33:f0:17:8a:dd:25:01:db:36:aa:2b:ad:5e:c7:f9:81:04:
         95:7b:5d:31:e5:aa:39:1e:8f:b1:95:e1:e0:f3:64:d9:9e:78:
         0f:46:94:f9:62:8d:50:ca:29:e6:d9:20:60:3d:c0:4e:4e:06:
         67:03:d0:c1:78:b6:c6:4c:ba:97:5b:e2:63:84:16:cb:c3:c9:
         43:35:26:77:12:2f:60:20:51:4e:53:8c:65:a3:7c:9b:c2:c3:
         8d:98:5a:c5:8e:b3:1d:a3:a8:bc:40:7b:d6:62:be:32:af:cd:
         37:9f:9f:6f:0d:7d:37:1d:57:2d:29:41:c1:59:6f:f1:be:d7:
         04:36:63:42:03:ab:8c:84:e4:18:c0:1e:53:e8:20:93:6f:d3:
         3b:04:ca:3e:1a:fe:3b:23:f4:04:ee:d3:e9:d5:fa:4c:a9:a8:
         02:22:fa:0a:fe:0a:21:f2:25:5c:2a:d7:82:75:41:24:c7:6b:
         59:16:d0:c4:9d:1f:d4:bd:2d:d4:3f:55:b6:c6:15:8e:67:ea:
         45:6c:d0:a3:66:c4:88:8d:81:a9:aa:8c:d7:be:ad:73:a0:79:
         69:7d:6e:d6:66:12:bd:9c:aa:d1:1d:fd:82:6e:aa:97:9c:02:
         d7:e3:b7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----