Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HHDe9rMzkSIcUmuYa73meP9jlLE.roa
File:                     HHDe9rMzkSIcUmuYa73meP9jlLE.roa (raw, json)
Hash identifier:          KMoycGNRIom6+7aoTNsd37rL5WyOv9EDQIuEr4w9HbI=
Subject key identifier:   1C:70:DE:F6:B3:33:91:22:1C:52:6B:98:6B:BD:E6:78:FF:63:94:B1
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       18F5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HHDe9rMzkSIcUmuYa73meP9jlLE.roa
Signing time:             Sun 07 Feb 2021 12:55:34 +0000
ROA not before:           Sun 07 Feb 2021 12:55:34 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        123.195.32.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6389 (0x18f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:55:34 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=1C70DEF6B33391221C526B986BBDE678FF6394B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3e:23:ab:77:dc:4d:51:c9:f1:96:f1:e8:86:
                    3d:25:73:b2:f0:9a:7a:bd:ee:ea:e5:6d:37:10:e4:
                    3b:79:40:96:48:4a:42:99:ad:8c:1b:75:74:1d:c1:
                    25:78:c2:38:07:2e:6e:d7:a1:1c:c7:28:99:4d:6d:
                    50:73:cb:17:e5:3b:30:7e:64:3c:54:af:99:61:49:
                    c5:c3:57:55:48:fd:80:1c:50:58:d6:14:af:e8:7a:
                    15:2a:cd:73:2c:21:68:8c:d8:1c:72:7c:fb:75:68:
                    68:1a:57:d2:8a:44:f7:29:5d:02:57:e0:97:4f:3b:
                    ae:f9:4b:b7:be:51:d6:46:11:ad:22:09:1a:6b:fd:
                    05:3e:4d:f6:d5:5d:63:e6:01:ba:4b:db:82:73:4a:
                    de:e6:ff:5f:e1:85:64:82:6b:5c:d0:c4:cf:a6:e0:
                    2f:06:a7:87:d0:52:d4:aa:55:21:a0:42:6e:74:8f:
                    90:65:02:28:0b:7c:e8:27:11:d2:1a:1b:77:0f:f5:
                    1a:65:a7:51:3a:29:67:83:25:bf:24:87:56:15:bd:
                    fc:72:2e:92:03:85:f7:8f:f7:f5:f9:00:6e:52:54:
                    d4:da:23:87:7d:e3:10:1e:89:a1:74:9f:bc:bc:2c:
                    e0:31:7d:78:67:42:7b:b2:1e:cc:52:b4:56:5c:dc:
                    72:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:70:DE:F6:B3:33:91:22:1C:52:6B:98:6B:BD:E6:78:FF:63:94:B1
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HHDe9rMzkSIcUmuYa73meP9jlLE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ad:9b:1c:2e:53:8f:71:b5:06:2c:f0:f1:76:e1:a8:80:0a:34:
         54:e6:58:9a:4e:1d:e9:c1:81:99:e9:6d:cc:ee:3a:bf:d5:25:
         b2:42:0e:61:12:d3:57:41:93:33:f7:d8:9a:f9:7b:e8:41:af:
         a5:e2:b5:de:ff:f8:21:0a:9f:5b:13:e8:79:ea:f7:ce:10:63:
         20:d7:7c:74:9d:13:a6:30:12:3f:74:15:b2:db:4b:44:d1:e7:
         5a:46:28:6b:49:20:09:79:96:00:82:10:9e:bb:88:bb:e5:6c:
         c7:3b:1b:28:ae:12:bc:09:51:f4:f9:7a:57:be:b5:da:b9:1a:
         8e:49:0f:8c:3a:74:31:5c:f3:24:9a:6f:35:d0:6b:cc:1f:24:
         f0:ab:98:e6:e5:97:c2:23:7d:ef:68:13:19:c6:f6:9c:2c:38:
         4d:50:c8:41:ca:a0:31:bc:ab:2b:38:1d:a7:2c:1f:bb:3e:8e:
         05:eb:a3:1e:43:a8:59:dd:a0:8c:f3:be:14:58:40:1b:fa:fb:
         ba:31:e3:fe:53:fc:c7:8b:49:de:38:ab:c5:f1:46:23:0c:12:
         3b:0a:88:c9:31:7a:58:aa:05:c9:d3:cc:c9:7a:97:07:0c:13:
         fb:6c:11:53:fc:20:f4:41:dc:55:cd:9b:0a:61:ea:cf:7e:fe:
         42:f2:3f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----