Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LLir25bumbmB9lCP5hNE3LQzdPQ.roa
File:                     LLir25bumbmB9lCP5hNE3LQzdPQ.roa (raw, json)
Hash identifier:          sXedsi42Ju6svDsEqVxK28L0dqnlvStPGGltNfVIcIc=
Subject key identifier:   2C:B8:AB:DB:96:EE:99:B9:81:F6:50:8F:E6:13:44:DC:B4:33:74:F4
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F08
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LLir25bumbmB9lCP5hNE3LQzdPQ.roa
Signing time:             Tue 29 Sep 2020 09:56:25 +0000
ROA not before:           Tue 29 Sep 2020 09:56:25 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        118.232.224.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3848 (0xf08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:25 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=2CB8ABDB96EE99B981F6508FE61344DCB43374F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:74:9a:2f:13:b2:68:c2:c6:22:bd:8d:7a:1c:
                    f1:e2:f8:1a:4a:ed:bd:b6:81:b2:ef:c9:6a:a4:f9:
                    1e:33:65:dd:71:e7:65:63:5f:51:ae:96:71:28:fd:
                    79:ad:76:74:6c:78:d8:3a:aa:3a:3a:5a:26:7b:9c:
                    07:fa:61:b8:c4:b2:ba:51:1f:45:c5:97:c9:dd:8d:
                    82:69:91:16:4b:d0:b9:1e:0a:49:5d:87:aa:82:47:
                    6b:c1:a6:42:c8:f6:ab:10:29:4a:24:cf:e2:1f:75:
                    9c:e0:62:95:8a:7e:6b:ba:be:41:72:30:9c:a5:2c:
                    49:fc:3e:d5:60:3d:81:87:09:52:d0:7e:eb:e1:a5:
                    57:5d:35:40:cf:9d:45:10:d4:29:05:26:cd:9b:13:
                    3d:ed:3f:5a:3f:82:5a:50:e2:45:3a:95:e9:5a:f2:
                    8c:4f:92:08:27:d8:8d:f5:bd:fc:e5:05:77:76:ce:
                    0c:fe:43:83:fc:41:87:d1:42:a6:c4:d0:a0:c7:9e:
                    36:a1:d0:d5:6c:6f:11:0a:bb:eb:cd:9e:bd:0b:10:
                    21:5e:a3:ac:63:d4:9e:27:6c:a3:e6:99:aa:d9:dc:
                    39:53:5b:84:66:6b:a0:ec:e9:27:ba:58:dc:24:e0:
                    e4:58:da:69:b0:08:0f:bf:34:9a:28:3a:15:7b:bb:
                    f7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B8:AB:DB:96:EE:99:B9:81:F6:50:8F:E6:13:44:DC:B4:33:74:F4
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LLir25bumbmB9lCP5hNE3LQzdPQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0c:41:57:78:b2:4b:d0:16:c4:1f:3a:f7:6f:69:6a:8f:32:b6:
         23:19:29:44:ce:cc:e9:10:9b:ed:90:da:a1:e9:3c:b2:4d:09:
         99:c5:b5:5f:73:ed:71:d1:f8:21:e7:50:05:24:7d:88:cf:55:
         d9:a0:54:8f:9e:93:8a:6b:55:4c:02:9a:a0:9a:ef:97:ac:d1:
         25:3b:9c:4b:1b:ae:6f:0d:3a:ba:00:bc:c2:7f:24:da:95:89:
         21:19:ab:19:60:9c:b4:20:a1:ca:6f:a2:d1:81:af:d9:85:63:
         f8:32:44:c7:88:f7:25:18:67:bb:54:c3:a9:cb:c5:ad:b5:46:
         77:7d:b2:f4:e6:cb:b7:04:96:05:cb:39:18:b8:54:34:4f:fd:
         dd:23:92:de:e5:7a:42:a7:e6:45:a0:22:c2:ba:a6:c1:68:b7:
         56:8c:a3:ac:71:8c:66:08:55:51:ba:34:f7:fe:82:be:e7:9a:
         79:12:2f:75:2d:ab:ff:89:cd:cf:0c:8c:8e:d1:c1:4c:8b:13:
         c5:88:f5:ff:36:b2:5f:7b:dd:7a:8a:40:40:e5:be:d4:33:34:
         1a:f5:63:18:6d:34:3c:b7:13:5a:f9:5c:ae:e8:b2:ed:90:da:
         e3:ff:d1:3a:ab:f4:e5:19:f7:8a:01:7e:9f:2a:70:b2:4d:d7:
         32:ce:e3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----