Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KAq2c5-nc1GGRpVH5vCWslULNq4.roa
File:                     KAq2c5-nc1GGRpVH5vCWslULNq4.roa (raw, json)
Hash identifier:          /Ga1zFRRRdtUjrDOFMi/4HL7QVQIdlb/BDqt/wkCHqI=
Subject key identifier:   28:0A:B6:73:9F:A7:73:51:86:46:95:47:E6:F0:96:B2:55:0B:36:AE
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0EE8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KAq2c5-nc1GGRpVH5vCWslULNq4.roa
Signing time:             Tue 29 Sep 2020 09:56:16 +0000
ROA not before:           Tue 29 Sep 2020 09:56:16 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.212.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3816 (0xee8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:16 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=280AB6739FA7735186469547E6F096B2550B36AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8c:a1:f0:20:73:dc:43:36:c6:1c:ed:20:bf:
                    d1:af:68:fe:ce:27:2d:0e:ef:c7:c7:bb:11:7f:a1:
                    81:9d:da:2e:9f:df:c9:7a:5e:2b:a6:38:ac:77:74:
                    0f:c5:18:3f:04:86:23:c3:f2:87:18:c5:ae:05:6d:
                    73:c4:c1:d9:89:d8:e2:ca:c6:5f:a3:30:65:37:1d:
                    da:a8:87:b8:e9:ac:08:20:99:fa:ec:da:b5:f7:31:
                    b6:99:2e:e6:b4:e3:e7:66:88:76:fe:54:16:75:ec:
                    75:26:ee:7b:e2:f8:8c:7f:81:e4:ed:13:7f:d5:52:
                    ae:49:1f:76:46:64:74:8b:9c:7d:28:0b:ac:ac:69:
                    c0:7e:0c:56:3a:c8:3b:4d:70:df:fa:82:09:6a:a8:
                    5a:1b:f7:e7:33:49:2a:63:83:22:6e:36:76:81:53:
                    e2:e3:b4:34:22:7a:f5:2c:43:01:20:11:7e:a9:46:
                    b7:45:ca:4e:0f:b1:ec:35:72:fa:6b:2a:5e:1b:e2:
                    37:5b:55:78:68:4a:c3:6b:5a:94:01:7a:1e:3d:44:
                    e6:c6:7d:a6:f3:20:9c:e1:b6:d5:78:04:4a:0a:f9:
                    92:bf:59:80:ed:c1:93:7c:f3:ad:96:12:41:a8:d6:
                    6b:e4:2c:b4:02:88:e2:2a:35:df:f9:41:f5:1b:1e:
                    29:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0A:B6:73:9F:A7:73:51:86:46:95:47:E6:F0:96:B2:55:0B:36:AE
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KAq2c5-nc1GGRpVH5vCWslULNq4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:90:1e:d8:fe:58:a8:62:20:a9:8e:b0:ec:e6:71:f7:5a:e9:
         bc:97:1a:81:81:4c:f9:d7:a4:34:4a:f6:74:61:c0:73:1a:6b:
         05:64:c2:47:16:fd:c6:f3:92:92:70:59:7d:17:b6:07:41:00:
         92:00:aa:7e:7a:3f:e2:b1:97:94:e7:55:4c:d4:03:9d:d0:2a:
         1e:ef:26:30:7b:b1:fc:15:aa:85:c8:d7:5f:b3:5d:fc:39:4b:
         e2:e9:b1:d9:79:f8:ec:69:98:83:6f:75:b0:e6:54:93:7d:af:
         25:4c:a1:3d:5e:25:7b:47:4e:52:91:01:cd:05:ad:6e:51:9d:
         35:c3:62:a4:90:bd:b3:2b:cd:96:a8:98:56:1d:70:06:6d:77:
         19:12:8f:38:8a:a7:75:f0:1f:58:e2:5f:65:95:b6:6c:19:7b:
         6d:0d:08:e6:ca:23:46:84:ae:cd:99:9f:3a:65:02:7f:97:1f:
         e6:60:e7:6e:1f:7e:8d:0b:56:a8:78:0b:23:71:67:64:43:f1:
         00:17:54:71:df:52:a3:14:b4:6c:94:61:c6:b4:ab:15:d3:19:
         83:4f:f5:c9:e1:80:00:03:d0:ff:bb:cd:bc:2d:0b:72:4a:7c:
         d2:a3:5b:1e:d4:ea:30:33:78:e6:fe:b1:a9:78:8a:38:6e:c9:
         fa:5c:23:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----