Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MFLxuiS8d1tqDfLf_nnleuHTaoo.roa
File:                     MFLxuiS8d1tqDfLf_nnleuHTaoo.roa (raw, json)
Hash identifier:          mr8fkkDMsXinzAZaG44iNOTAX+2c+PjnmY51OeMLHcU=
Subject key identifier:   30:52:F1:BA:24:BC:77:5B:6A:0D:F2:DF:FE:79:E5:7A:E1:D3:6A:8A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0DFA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MFLxuiS8d1tqDfLf_nnleuHTaoo.roa
Signing time:             Tue 29 Sep 2020 09:55:12 +0000
ROA not before:           Tue 29 Sep 2020 09:55:12 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.164.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3578 (0xdfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:12 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=3052F1BA24BC775B6A0DF2DFFE79E57AE1D36A8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4a:27:65:33:65:ba:cb:9e:b1:c2:4c:20:ba:
                    41:12:f9:69:4d:b5:7e:43:8a:91:75:df:92:73:4e:
                    4e:5b:f2:a6:e6:ef:90:de:47:f4:79:4b:60:17:45:
                    7d:73:ec:a7:04:c7:a3:e8:62:66:13:89:dd:74:c0:
                    93:41:b8:56:fa:46:c9:43:9e:a2:0f:2a:0e:3f:23:
                    c2:aa:a2:60:14:c9:39:4c:42:be:41:f4:da:d8:b6:
                    51:46:a9:e5:93:95:8a:8e:7d:36:03:aa:98:40:97:
                    88:93:90:b6:a1:b0:a6:a3:74:e2:1d:fd:32:d5:b2:
                    45:2c:d9:41:86:a2:92:e1:ae:80:e0:d2:36:c7:86:
                    a6:fe:22:75:84:fe:ad:b1:dd:57:c1:12:3d:73:73:
                    0e:de:4b:95:d8:9c:99:83:f9:22:b8:1e:3e:af:f4:
                    ac:4e:87:9e:3b:b1:e8:c9:41:6c:11:54:50:20:a9:
                    d4:c1:cc:bb:50:f3:84:90:3e:75:9c:99:80:38:34:
                    fc:47:f4:f6:9f:00:15:59:cd:e2:da:7a:ca:37:57:
                    79:c3:cc:68:93:7b:d2:b6:0c:ea:50:c2:2a:40:38:
                    4d:f5:b5:db:b3:46:14:0f:6c:43:f9:5d:d6:4b:01:
                    f2:8d:b1:b9:86:8d:d6:de:20:2c:22:3b:d4:b3:e7:
                    23:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:52:F1:BA:24:BC:77:5B:6A:0D:F2:DF:FE:79:E5:7A:E1:D3:6A:8A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MFLxuiS8d1tqDfLf_nnleuHTaoo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:98:4a:11:34:28:7f:bb:02:3e:41:d8:6e:a0:b2:bb:45:40:
         63:7d:34:7b:6f:4d:ec:61:43:c7:eb:61:28:04:d1:71:b0:de:
         b3:87:25:6c:ac:f6:84:58:ad:e4:a8:0a:26:ae:e5:48:87:a8:
         42:0a:c9:27:7b:12:aa:2a:b9:97:3b:f2:90:5b:6c:f7:d2:80:
         7f:f8:c1:65:a2:b0:ee:07:f9:4c:0f:75:83:15:30:09:69:72:
         20:16:5d:a9:67:e1:91:a2:05:a4:10:db:08:f5:9b:f9:6c:b5:
         6b:83:ca:03:ee:c3:17:fc:71:b1:52:6f:6d:02:2e:05:34:43:
         e6:43:0e:95:24:5d:f2:fe:b7:df:5c:c6:18:4e:36:6a:dd:af:
         8c:3c:38:d7:ef:7e:02:07:22:e4:29:83:50:59:cf:4e:ed:26:
         30:49:b1:aa:ff:cd:ee:16:e3:91:5b:0d:30:24:94:ac:49:65:
         e6:3e:4e:71:34:62:77:2c:ad:38:5f:53:17:76:88:0d:77:1e:
         50:22:8b:fa:3a:ce:38:b8:5b:b5:88:78:2d:f6:af:36:c4:1b:
         d7:34:65:fb:ca:59:3a:f8:9a:7a:cf:29:27:e6:53:fb:4f:40:
         02:b4:6b:cb:44:20:1b:2a:85:a7:ac:5e:8e:c9:28:dc:4f:a2:
         ba:02:67:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----