Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IZGbP2ZFcst9A4tyZM-bNIJMhTc.roa
File:                     IZGbP2ZFcst9A4tyZM-bNIJMhTc.roa (raw, json)
Hash identifier:          6Wfmmh8RdHsyXMS5tfzkNriCDHMtZFevNDY6yWAG3j0=
Subject key identifier:   21:91:9B:3F:66:45:72:CB:7D:03:8B:72:64:CF:9B:34:82:4C:85:37
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       14AD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IZGbP2ZFcst9A4tyZM-bNIJMhTc.roa
Signing time:             Sun 07 Feb 2021 11:59:36 +0000
ROA not before:           Sun 07 Feb 2021 11:59:36 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.192.144.192/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5293 (0x14ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 11:59:36 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=21919B3F664572CB7D038B7264CF9B34824C8537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8b:79:bd:12:d5:f7:f5:7d:df:e9:e6:bb:9f:
                    cc:dd:8e:91:f9:29:04:1e:f8:2d:d6:16:c2:c5:f5:
                    4f:91:c0:b3:47:23:cb:ec:af:f6:4e:0f:f7:0f:0f:
                    ee:65:71:26:8b:59:01:b8:60:1d:2c:1c:b8:c4:fe:
                    f2:74:e3:be:72:2b:ca:20:ed:f2:b7:5f:56:4b:ab:
                    92:8b:c0:8f:84:19:23:89:75:7f:87:c4:5c:28:91:
                    cc:07:37:3e:39:9a:c9:64:92:bc:63:08:da:91:b4:
                    cb:1d:a3:0e:c7:e2:d0:c9:29:37:8f:94:09:e8:7a:
                    4a:20:68:de:b3:7e:ad:ab:3f:32:1c:4f:f8:b1:8b:
                    8e:06:99:c5:ca:42:43:66:d1:96:8e:15:9e:a3:6f:
                    4a:02:bd:d6:96:75:d9:fa:a5:09:f5:8e:5a:56:73:
                    52:ca:9e:88:c4:f2:5d:6b:97:bd:42:86:54:b4:c5:
                    ba:42:87:7a:ab:f8:fa:61:de:8c:ab:d4:8e:b7:ef:
                    d0:31:55:20:90:a5:aa:15:b2:4c:41:f9:83:23:50:
                    bc:f8:6c:b1:af:37:67:b9:86:25:f4:a9:b9:c8:85:
                    15:b6:13:ca:c2:fe:84:a4:48:1a:63:f7:56:03:02:
                    e9:74:a9:23:01:21:b2:85:7d:54:0d:84:4f:7e:41:
                    29:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:91:9B:3F:66:45:72:CB:7D:03:8B:72:64:CF:9B:34:82:4C:85:37
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IZGbP2ZFcst9A4tyZM-bNIJMhTc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.144.192/26

    Signature Algorithm: sha256WithRSAEncryption
         5b:33:b9:c8:13:28:09:c5:30:d3:af:49:59:79:de:a8:ed:02:
         97:d7:54:7e:29:85:66:5e:1e:e3:b6:28:bf:75:88:34:2c:38:
         5a:2c:d6:3c:8f:a7:b9:7f:61:97:81:4c:fd:5e:2c:bc:5b:5f:
         b3:51:fc:88:15:db:22:e3:91:72:f1:d1:9f:b7:d8:e7:80:69:
         46:b2:90:68:5c:b6:50:dd:36:05:8e:68:ac:6e:cb:ca:a1:03:
         d2:8e:64:db:5a:18:89:d4:5b:09:af:a9:2a:d4:be:18:a9:47:
         d4:c2:06:58:6e:e4:a0:36:55:86:43:7d:a8:1e:7f:09:c2:70:
         e9:82:ea:0c:20:2e:1a:a0:98:bf:d7:f9:1c:d7:2d:34:9c:01:
         83:ba:2d:a4:6e:65:c1:93:3d:3c:c7:be:1b:da:c5:eb:fe:d4:
         c8:4f:7a:53:00:60:33:67:ff:40:48:a6:62:c6:47:73:11:e1:
         db:88:c9:62:99:db:37:4e:7f:d7:07:3f:41:f4:70:d1:b0:9f:
         d6:bb:a6:87:39:0c:19:31:c6:2f:f0:5b:93:2f:01:85:93:d5:
         d5:02:e3:08:f9:6f:81:b9:6e:51:6a:5f:ae:dc:e4:d5:cb:18:
         ba:82:a2:4a:bc:b1:e0:83:3e:5a:99:7b:9f:ef:0b:96:95:c0:
         e8:81:e6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----