Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IYD_RrLnjXTf1nnu4MLyw94f8fk.roa
File:                     IYD_RrLnjXTf1nnu4MLyw94f8fk.roa (raw, json)
Hash identifier:          zI0w07euedSgGZHC3PJClAlQZrq2QRivUQUJQ8NOmdk=
Subject key identifier:   21:80:FF:46:B2:E7:8D:74:DF:D6:79:EE:E0:C2:F2:C3:DE:1F:F1:F9
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0DEF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IYD_RrLnjXTf1nnu4MLyw94f8fk.roa
Signing time:             Tue 29 Sep 2020 09:55:09 +0000
ROA not before:           Tue 29 Sep 2020 09:55:09 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.160.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3567 (0xdef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:09 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=2180FF46B2E78D74DFD679EEE0C2F2C3DE1FF1F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:59:59:16:d4:61:e6:4a:92:da:3e:ba:e4:53:
                    32:0e:a1:43:b0:c2:f1:9e:ed:e0:38:18:02:76:1e:
                    10:90:f0:ec:d2:0f:45:39:85:fc:ea:8f:67:c2:8f:
                    0c:b5:ca:65:33:39:a8:8f:83:74:44:40:d3:8b:ef:
                    a1:b4:52:19:8e:51:97:d6:3c:fb:7c:9e:15:b4:7f:
                    06:93:92:db:31:89:9b:11:ae:9e:a6:bf:0b:cd:b3:
                    df:54:c4:45:5c:cf:bd:b6:bc:86:2e:74:42:3a:aa:
                    d8:54:49:53:ad:4f:a3:6d:46:dc:5b:37:16:be:f9:
                    d0:ed:3d:75:a8:cc:3d:69:f7:9e:46:f5:f0:44:ad:
                    68:19:39:4c:0e:a1:5b:13:63:39:8e:2f:64:e9:3e:
                    60:8a:b3:a3:dd:2b:8e:83:28:70:77:dc:b0:95:de:
                    12:f7:e9:8b:64:e7:e6:c0:0a:a1:d6:7e:68:4b:d8:
                    ca:99:b2:0c:c2:6f:82:83:12:f0:5b:2d:b0:3b:a3:
                    29:ab:1c:12:74:d7:da:11:ac:94:31:e2:e3:9b:9e:
                    b7:99:32:8f:01:9d:2c:bc:fa:bd:05:2c:8d:d7:f3:
                    a1:cc:8d:17:44:5e:08:d3:28:56:ad:5d:b1:58:c0:
                    f7:d1:e9:3b:d8:2c:60:16:77:35:71:68:db:d4:11:
                    97:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:80:FF:46:B2:E7:8D:74:DF:D6:79:EE:E0:C2:F2:C3:DE:1F:F1:F9
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IYD_RrLnjXTf1nnu4MLyw94f8fk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         30:05:e3:18:95:70:b7:c2:39:c4:e3:26:30:d2:cc:8e:84:d7:
         40:3f:6e:c8:4e:c8:10:0e:0b:31:78:90:eb:ff:7b:21:b2:de:
         80:53:37:ec:8d:e9:bc:f0:66:c6:c5:2e:05:0b:4f:7b:52:e4:
         64:1f:a6:34:31:48:28:57:2c:37:b3:ff:0b:50:c4:3a:49:48:
         27:b0:c1:a2:1e:51:dd:aa:1d:20:18:76:b6:6a:b7:49:6b:9b:
         5c:4a:e1:85:dd:24:30:1e:de:b2:0f:bd:f4:13:2a:07:e8:3f:
         7d:27:3e:c5:62:e1:6f:e6:dc:10:9a:59:87:f4:cb:5c:7c:d0:
         41:9f:5f:4d:25:9b:fc:db:60:04:1f:46:1c:0f:6b:d6:83:bc:
         28:22:ed:bc:71:f3:37:2f:fc:3d:09:4b:20:fa:1f:c0:6b:32:
         52:a9:f9:c2:2a:2f:d9:4c:f7:98:05:de:dc:4b:09:53:dc:b7:
         09:24:63:37:95:4b:b6:cc:56:4f:ce:10:b7:f2:65:d1:fc:56:
         ae:9e:93:cb:0c:03:4e:65:e3:73:93:14:31:ce:fd:64:79:1d:
         7e:f6:40:6d:c8:b6:d7:ce:d9:85:b9:00:45:63:d1:86:4d:49:
         dd:36:20:23:e4:21:22:f7:97:75:95:a3:26:64:20:24:a8:4e:
         28:94:28:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----