Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LreBrmnzt5rpxgru4d_xK6ju2xg.roa
File:                     LreBrmnzt5rpxgru4d_xK6ju2xg.roa (raw, json)
Hash identifier:          vcUIfzbZ4l1nzwd7i9VqBFTj7q2C4XiQY/sbZH0zJRg=
Subject key identifier:   2E:B7:81:AE:69:F3:B7:9A:E9:C6:0A:EE:E1:DF:F1:2B:A8:EE:DB:18
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F6B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LreBrmnzt5rpxgru4d_xK6ju2xg.roa
Signing time:             Tue 29 Sep 2020 09:56:55 +0000
ROA not before:           Tue 29 Sep 2020 09:56:55 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        211.76.114.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3947 (0xf6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:55 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=2EB781AE69F3B79AE9C60AEEE1DFF12BA8EEDB18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0a:11:51:1f:70:f1:01:57:8a:cd:d9:22:fb:
                    9b:c5:43:e2:94:eb:cc:94:07:e6:8c:ca:ab:c0:d1:
                    3d:0f:88:f6:a9:42:9c:98:a8:e5:d9:24:38:36:c8:
                    fb:59:94:c4:74:55:d5:36:7f:58:60:6f:2d:d7:d9:
                    73:18:2a:2b:6b:3b:c7:e0:ac:dc:89:fa:8c:6d:d6:
                    bb:ff:e4:2e:7a:d9:a2:da:ef:cc:89:0c:b0:cf:b4:
                    76:16:9c:76:6f:71:e5:07:76:a0:26:ab:e2:e0:dd:
                    39:1b:3b:49:7a:c8:1d:51:b7:45:3e:3c:88:30:10:
                    83:d3:8f:6e:95:b8:1c:71:48:9e:1c:c8:14:06:db:
                    be:21:e5:01:4f:23:74:4a:e8:70:00:78:17:e8:67:
                    83:de:f9:f7:e3:5c:3f:ee:01:fe:54:ee:9b:9c:73:
                    28:f9:51:fd:e0:3d:c4:24:89:f1:1f:de:74:db:4c:
                    59:47:b0:59:ca:57:b4:b1:55:b4:a5:bd:25:ab:6c:
                    2d:f7:77:63:7f:6f:da:a4:3d:ae:d5:8d:45:71:9e:
                    68:fa:57:dd:18:7b:8a:28:42:57:af:a0:d9:6e:33:
                    3d:99:7f:e9:75:37:d0:18:bb:9c:de:f0:0e:df:bf:
                    7e:cb:3b:40:7e:51:7e:ea:e1:14:ef:b2:44:44:ba:
                    2f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B7:81:AE:69:F3:B7:9A:E9:C6:0A:EE:E1:DF:F1:2B:A8:EE:DB:18
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LreBrmnzt5rpxgru4d_xK6ju2xg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:4e:a2:d1:7c:5b:4d:48:a9:45:13:01:e7:27:8f:f5:d0:f2:
         fe:4c:e0:24:75:0a:a4:7d:52:76:e0:3b:29:67:f4:53:56:9a:
         10:c8:36:13:ae:10:55:82:e0:d0:87:a8:ae:ef:79:d0:90:48:
         68:c3:23:5a:66:f2:94:81:1d:c2:c9:cc:71:b3:a3:7a:50:e3:
         77:89:b3:e2:4c:2a:15:8c:bb:ea:17:c4:10:b6:f7:8f:c1:4e:
         42:25:80:4c:ea:d3:e1:36:2f:d9:11:0e:7b:93:fb:5a:7d:99:
         c0:20:51:44:94:b6:6a:9f:df:eb:d4:32:58:10:f8:db:90:7e:
         d1:70:72:95:f1:42:d7:c7:c1:73:6d:d2:4d:2b:da:c9:e6:a7:
         12:84:a1:f6:74:7d:2d:00:de:22:b0:11:cb:cd:b2:b9:84:c4:
         03:10:a1:13:bd:e5:57:61:59:87:71:2b:21:16:d8:0a:df:6f:
         f8:99:c0:ca:4b:3d:56:e1:40:18:6b:27:28:66:55:e0:67:29:
         05:39:f7:17:9a:90:f2:a8:b5:3f:97:94:df:b6:41:ac:48:df:
         fd:02:f1:07:19:d1:de:c4:4e:1f:a2:85:9c:e7:23:e2:55:f3:
         b8:b7:e6:da:aa:da:cd:00:26:86:4e:a6:7d:13:0d:ae:3e:cb:
         37:35:ae:b1
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICD2swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU2NTVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDJFQjc4MUFFNjlGM0I3
OUFFOUM2MEFFRUUxREZGMTJCQThFRURCMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcChFRH3DxAVeKzdki+5vFQ+KU68yUB+aMyqvA0T0PiPapQpyY
qOXZJDg2yPtZlMR0VdU2f1hgby3X2XMYKitrO8fgrNyJ+oxt1rv/5C562aLa78yJ
DLDPtHYWnHZvceUHdqAmq+Lg3TkbO0l6yB1Rt0U+PIgwEIPTj26VuBxxSJ4cyBQG
274h5QFPI3RK6HAAeBfoZ4Pe+ffjXD/uAf5U7puccyj5Uf3gPcQkifEf3nTbTFlH
sFnKV7SxVbSlvSWrbC33d2N/b9qkPa7VjUVxnmj6V90Ye4ooQlevoNluMz2Zf+l1
N9AYu5ze8A7fv37LO0B+UX7q4RTvskREui+hAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQULreBrmnzt5rpxgru4d/xK6ju2xgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0xyZUJybW56dDVycHhncnU0
ZF94SzZqdTJ4Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT
THIwDQYJKoZIhvcNAQELBQADggEBAGVOotF8W01IqUUTAecnj/XQ8v5M4CR1CqR9
UnbgOyln9FNWmhDINhOuEFWC4NCHqK7vedCQSGjDI1pm8pSBHcLJzHGzo3pQ43eJ
s+JMKhWMu+oXxBC294/BTkIlgEzq0+E2L9kRDnuT+1p9mcAgUUSUtmqf3+vUMlgQ
+NuQftFwcpXxQtfHwXNt0k0r2snmpxKEofZ0fS0A3iKwEcvNsrmExAMQoRO95Vdh
WYdxKyEW2Arfb/iZwMpLPVbhQBhrJyhmVeBnKQU59xeakPKotT+XlN+2QaxI3/0C
8QcZ0d7ETh+ihZznI+JV87i35tqq2s0AJoZOpn0TDa4+yzc1rrE=
-----END CERTIFICATE-----