Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lu0sdJdzTvyXjQjk7K8RX056zrE.roa
File:                     Lu0sdJdzTvyXjQjk7K8RX056zrE.roa (raw, json)
Hash identifier:          OEgkW4wmTpASO92Hu9CEE8df+ycoPY3dbnorv/YC9I4=
Subject key identifier:   2E:ED:2C:74:97:73:4E:FC:97:8D:08:E4:EC:AF:11:5F:4E:7A:CE:B1
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D55
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lu0sdJdzTvyXjQjk7K8RX056zrE.roa
Signing time:             Tue 29 Sep 2020 09:54:27 +0000
ROA not before:           Tue 29 Sep 2020 09:54:27 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.233.36.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3413 (0xd55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:27 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=2EED2C7497734EFC978D08E4ECAF115F4E7ACEB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:63:4d:6d:3a:93:1f:de:5b:ed:ae:69:7f:04:
                    e4:25:c3:b5:df:9a:fd:87:4c:44:88:cd:d2:8d:52:
                    22:a2:6e:91:0e:d4:15:f7:fd:b1:a2:1f:a1:ae:61:
                    07:58:7c:90:77:3a:27:eb:d9:66:21:f4:6d:03:db:
                    a7:53:d7:21:41:58:99:53:05:a1:5f:de:2a:36:68:
                    00:52:bc:73:26:c8:80:b3:56:15:70:a4:ed:75:5b:
                    56:99:dd:0e:a6:65:b7:86:27:76:bd:d8:86:e7:24:
                    1a:ac:d0:66:b4:f8:ef:7a:15:d2:d3:e2:10:4e:b1:
                    12:ae:4c:39:9f:a1:dc:b7:5b:bc:37:9c:91:80:f6:
                    39:9e:f2:94:33:63:d6:09:0c:cd:a1:94:dc:77:2d:
                    73:ae:8f:20:d6:00:d5:66:3a:d6:39:10:3d:05:c3:
                    9e:62:34:be:b6:b9:98:46:56:f7:f1:29:db:07:9c:
                    fb:b1:0d:7f:0f:a0:13:60:eb:18:b1:d4:04:93:e9:
                    b6:9f:dd:35:bb:61:a2:7b:d8:8f:df:b1:0e:cb:39:
                    08:66:45:22:68:03:0e:ba:82:56:55:f2:f1:f2:8d:
                    88:04:8b:ee:bf:2d:90:07:10:b0:b0:8b:be:39:4c:
                    5b:3b:d9:59:6a:8a:0b:49:15:73:b0:0f:a5:d8:83:
                    ba:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:ED:2C:74:97:73:4E:FC:97:8D:08:E4:EC:AF:11:5F:4E:7A:CE:B1
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lu0sdJdzTvyXjQjk7K8RX056zrE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:ed:ce:e2:27:01:32:3e:34:4b:d5:e3:4d:c1:d4:6b:ed:95:
         bc:f7:55:4b:01:f5:46:92:fb:b7:f5:0c:9f:c7:83:18:f6:ca:
         6d:33:06:5d:e6:51:57:c6:f5:15:e4:18:cd:7c:45:cf:c7:21:
         20:63:ab:8f:53:c1:df:2f:0b:96:3b:35:d9:6d:40:ce:ba:86:
         f8:34:6d:90:da:78:f4:34:85:f8:f6:4d:60:d0:56:24:78:4a:
         95:95:74:05:2a:6f:e0:2b:2b:36:03:f6:66:60:65:6c:d6:5b:
         14:b8:79:0f:5d:2d:37:6c:c7:dc:ce:22:68:cd:01:e8:e7:9a:
         c0:ef:fb:ec:97:a0:1d:c4:10:d1:50:64:9e:9c:26:06:32:b0:
         24:78:e7:c2:c0:5f:21:62:ac:4a:85:02:47:a9:fd:bf:03:70:
         01:9a:22:ba:8c:1a:08:e6:4c:a6:c6:00:1d:de:85:63:97:c9:
         a9:43:03:7d:00:db:3f:20:65:20:f8:b1:17:7b:f0:43:53:09:
         dc:96:40:1a:38:96:46:d0:66:b8:5c:bb:dc:4c:ca:3e:75:2f:
         0b:8c:6a:5f:23:99:76:eb:1a:f8:a2:c8:23:2f:69:66:61:2e:
         11:3d:35:b6:a6:af:3b:4c:fb:2c:91:1d:31:1a:df:23:79:d9:
         64:97:a4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----