Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KUJRDiRKwDnKsRPTfZzxexgDQI4.roa
File:                     KUJRDiRKwDnKsRPTfZzxexgDQI4.roa (raw, json)
Hash identifier:          Ze7UKIlDb6IVAu1Ph950Sl78081vzqHqjbA1KC5Z/4k=
Subject key identifier:   29:42:51:0E:24:4A:C0:39:CA:B1:13:D3:7D:9C:F1:7B:18:03:40:8E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0CFA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KUJRDiRKwDnKsRPTfZzxexgDQI4.roa
Signing time:             Tue 29 Sep 2020 09:54:01 +0000
ROA not before:           Tue 29 Sep 2020 09:54:01 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.232.56.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3322 (0xcfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:01 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=2942510E244AC039CAB113D37D9CF17B1803408E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:79:87:d2:da:74:40:0b:12:84:a3:64:df:b7:
                    55:3d:51:c8:28:46:7b:2d:ab:69:45:f1:ae:e2:e1:
                    6e:8a:02:84:d9:4d:48:ed:2d:a2:94:01:cd:63:83:
                    c4:4d:d1:a9:e0:2d:6e:8c:23:88:b3:54:b1:b2:e1:
                    47:43:a1:8d:f2:5e:11:fc:29:ab:45:61:7a:66:12:
                    83:72:a0:ab:b9:c8:32:cc:3e:a6:b4:40:b2:79:26:
                    e2:2b:b2:de:03:f8:73:1a:8c:3b:30:19:08:30:2b:
                    e8:a6:19:9e:88:fe:03:67:c6:40:a6:4d:a6:52:c8:
                    a6:72:ab:d7:42:09:39:25:dc:06:9d:10:c9:dc:d0:
                    35:85:af:25:68:8b:a4:28:44:32:1c:94:e0:11:7b:
                    73:13:0f:5b:85:bc:ad:5f:03:78:84:0d:0b:5d:ea:
                    9e:a0:0f:45:4c:df:b1:8b:5d:ee:33:39:25:c6:1f:
                    47:3a:6d:2d:43:8c:0b:19:45:a8:f1:c9:f7:d9:c1:
                    54:34:86:e7:0b:fa:4e:b8:6d:60:18:e8:4a:4a:0c:
                    eb:ae:29:c8:54:f0:09:00:7f:13:31:22:65:8c:f3:
                    79:f9:4c:c7:53:63:5a:c8:08:3c:bb:fa:99:91:f1:
                    c4:b6:12:be:82:9c:7c:49:0d:99:2d:97:00:20:6c:
                    05:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:42:51:0E:24:4A:C0:39:CA:B1:13:D3:7D:9C:F1:7B:18:03:40:8E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KUJRDiRKwDnKsRPTfZzxexgDQI4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         64:3e:66:0f:1d:03:66:5f:17:e0:30:3e:e7:b9:3e:47:e1:96:
         4e:c7:0c:e6:02:d5:75:70:70:32:5d:59:38:31:57:91:ee:70:
         c5:41:fe:21:24:98:8f:ac:87:b0:aa:8a:3a:4d:27:aa:9a:23:
         28:79:31:3f:5b:d2:19:7f:7a:86:75:69:f1:f1:88:67:38:d6:
         e9:b4:1f:ed:24:fd:b4:e4:38:69:b3:79:2c:8b:11:58:81:5c:
         4c:94:69:3c:a5:7f:b1:4f:c9:f9:6d:39:a2:dd:be:00:7e:4e:
         cf:77:98:e0:6d:a3:52:57:d3:37:d9:58:ad:1c:1e:eb:f1:7e:
         cc:5d:74:02:89:94:5f:79:53:e2:31:78:b2:2b:20:f7:07:78:
         a9:1d:00:b8:63:0d:45:d4:47:9c:39:4a:28:db:18:93:66:3f:
         75:a3:5f:a4:bb:3c:4a:50:a3:14:8a:08:d3:68:16:f2:26:94:
         34:d0:34:a2:6d:56:43:39:6f:d9:92:39:7a:35:3c:12:03:61:
         da:25:4d:5f:ff:3d:77:a6:a9:b4:3b:98:bb:8f:4b:c7:c2:fc:
         ac:34:fe:11:6e:af:c1:37:8d:0e:aa:d8:c5:61:e4:dc:39:8b:
         04:80:e8:97:42:2f:10:2a:e7:45:62:c3:73:52:21:c5:06:8c:
         cd:d1:d8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----