Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lvvntsn6JHPLarvYvepRlmbWsz8.roa
File:                     Lvvntsn6JHPLarvYvepRlmbWsz8.roa (raw, json)
Hash identifier:          XgdjWvK7l/qG6fIsPjRm3XkJ/ld7rNamXu5HNuXA1f8=
Subject key identifier:   2E:FB:E7:B6:C9:FA:24:73:CB:6A:BB:D8:BD:EA:51:96:66:D6:B3:3F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E94
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lvvntsn6JHPLarvYvepRlmbWsz8.roa
Signing time:             Tue 29 Sep 2020 09:55:54 +0000
ROA not before:           Tue 29 Sep 2020 09:55:54 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.144.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3732 (0xe94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:54 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=2EFBE7B6C9FA2473CB6ABBD8BDEA519666D6B33F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:aa:aa:cb:30:41:3f:1f:0d:ae:78:f0:cf:a3:
                    39:a4:e7:0c:3f:6b:14:18:85:8b:a9:05:5b:09:80:
                    4a:f4:e9:bb:6a:98:3d:e7:ab:bf:4d:22:3a:c9:17:
                    bb:f9:21:24:fa:63:6b:77:eb:0c:74:0a:fc:c4:36:
                    7b:c8:31:db:3c:3e:b7:2c:e2:b7:4f:c1:56:32:6c:
                    a8:7d:d5:b9:00:86:57:69:cc:71:69:ce:a5:1d:d9:
                    49:06:c7:08:71:6b:85:4f:64:f0:46:db:a7:85:52:
                    8d:d4:eb:f8:c2:6b:aa:b6:0f:d1:4f:f3:4f:ab:02:
                    54:87:30:1a:fa:24:b1:c9:7d:f7:fa:15:fa:42:07:
                    79:eb:e9:67:d3:34:ec:74:35:18:4d:01:c2:b0:8d:
                    37:a7:9c:d0:ae:e1:29:f5:4d:82:64:19:f3:16:d4:
                    bf:a6:0d:93:5d:98:30:8f:8b:05:f8:15:36:f6:b0:
                    b1:41:c0:d1:de:c1:b1:7b:99:4c:1e:c8:cb:b1:b8:
                    0c:b0:3c:4d:de:1f:59:23:4b:db:27:63:63:b1:1a:
                    6a:05:1c:c7:f4:61:da:61:86:98:49:f3:f1:24:f0:
                    a8:d4:97:f1:fa:67:bb:29:5c:c5:21:e4:04:72:79:
                    44:d2:2a:3e:65:d2:2a:60:e8:e5:85:2f:2c:e5:9c:
                    ad:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:FB:E7:B6:C9:FA:24:73:CB:6A:BB:D8:BD:EA:51:96:66:D6:B3:3F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lvvntsn6JHPLarvYvepRlmbWsz8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         05:08:0e:f6:ac:f8:a0:7e:3b:95:2e:9f:d6:b7:61:e9:50:68:
         a8:cf:9d:2a:1b:db:36:f4:16:39:75:87:7d:5f:ba:18:a5:78:
         ef:89:0c:b3:96:5b:2f:12:92:25:ee:2c:48:33:a0:28:eb:bc:
         c7:eb:64:2d:2f:69:9b:22:8d:ce:0d:a7:d1:2d:c1:d6:fe:95:
         38:fe:11:7d:62:0c:50:27:ac:4f:c5:2f:97:92:2e:12:b0:0a:
         a8:02:46:19:96:bd:56:49:aa:b9:7a:66:3e:07:83:98:43:b7:
         1e:91:d4:03:3f:eb:3c:04:a4:fd:8e:97:83:cd:b1:66:10:1d:
         fa:54:0f:0f:af:1f:fa:c5:43:e1:e6:c0:89:d5:11:e7:82:59:
         bb:0b:76:f6:6b:15:ba:4c:c9:14:88:b0:d1:d5:c2:6c:8b:c0:
         6d:4b:85:98:97:b2:98:99:a9:98:98:b6:6b:58:cf:c7:e1:7c:
         b1:1b:9f:6d:77:b6:40:a6:76:87:01:64:58:2c:5c:9f:d0:1c:
         00:64:29:ef:79:c1:33:b9:4d:88:28:b2:51:31:45:4b:2c:ee:
         a1:33:d8:d8:19:2b:47:91:1e:cb:a7:8c:10:a2:3a:58:6a:de:
         68:25:ba:45:a7:dc:58:03:28:3f:1f:72:56:98:90:4e:f0:81:
         33:46:61:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----