Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MeUTw95EHca4GA9LwWPKJ-BCc6Y.roa
File:                     MeUTw95EHca4GA9LwWPKJ-BCc6Y.roa (raw, json)
Hash identifier:          whK2q5B4+PDW2R/l/zp1IcsLwxuOo7mo1bozqmDlzxg=
Subject key identifier:   31:E5:13:C3:DE:44:1D:C6:B8:18:0F:4B:C1:63:CA:27:E0:42:73:A6
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F4D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MeUTw95EHca4GA9LwWPKJ-BCc6Y.roa
Signing time:             Tue 29 Sep 2020 09:56:46 +0000
ROA not before:           Tue 29 Sep 2020 09:56:46 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.193.0.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3917 (0xf4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:46 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=31E513C3DE441DC6B8180F4BC163CA27E04273A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:92:3a:2e:eb:fb:9a:85:62:46:e8:2a:e6:4b:
                    f7:80:7b:25:ff:7c:47:51:56:0a:8b:2d:fa:ae:7c:
                    26:fa:82:4b:0e:d6:54:a3:45:9c:69:d5:89:9c:e0:
                    13:5d:54:0a:9d:ba:ff:9d:2c:f0:d0:86:10:7b:0a:
                    0d:26:5c:7e:6c:98:3f:a7:cc:84:01:78:c8:93:4a:
                    c7:3c:eb:d4:63:75:2b:c9:59:a1:43:8f:ee:3d:1b:
                    d6:ce:95:ce:6f:51:e4:b5:41:75:b8:ce:92:76:19:
                    f5:de:7f:75:5d:5f:a4:02:f4:49:54:e9:d7:f4:5f:
                    a2:eb:d4:63:a3:56:94:24:ba:97:1b:97:37:15:fe:
                    59:5b:5b:3d:1e:4a:15:0c:98:0c:7b:a0:72:a1:fa:
                    61:83:dc:e0:5c:8c:02:fe:46:c9:23:28:91:1f:72:
                    3c:36:57:6c:b0:08:d8:21:15:ed:50:e0:f3:9e:8d:
                    bc:8c:d7:16:e5:78:2b:16:a0:22:fb:a7:d7:45:bc:
                    71:75:de:29:69:33:25:85:fa:17:1c:48:84:b4:17:
                    26:8f:b7:a8:10:f9:2c:5e:db:9a:0f:61:63:44:fc:
                    21:f7:6a:92:77:e2:93:b5:69:88:7d:23:b6:d7:73:
                    25:e4:82:cb:c6:6d:7e:c6:93:0d:c5:c5:69:62:db:
                    02:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E5:13:C3:DE:44:1D:C6:B8:18:0F:4B:C1:63:CA:27:E0:42:73:A6
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MeUTw95EHca4GA9LwWPKJ-BCc6Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         14:67:04:97:c2:84:f6:2d:6a:f8:a8:83:a2:e1:50:80:89:3b:
         b2:d3:68:69:17:8f:43:41:2c:e8:d1:4b:a0:2b:d7:0f:62:62:
         0a:6c:82:3b:30:76:cd:f8:74:1e:cd:e4:20:56:05:34:13:75:
         72:e5:ac:86:c9:cd:1e:f5:69:75:1b:4c:cc:e4:b3:ee:a1:f4:
         ad:b4:97:a9:17:d1:77:3b:1b:b7:56:a0:da:ab:7b:04:9a:72:
         55:83:73:8e:58:aa:22:60:8a:18:16:65:e6:11:80:24:58:cd:
         29:c5:dc:eb:37:ec:91:96:06:07:df:c3:7a:41:84:6a:8b:42:
         42:47:5f:2b:bc:79:39:25:9a:77:d9:fd:a8:23:5f:20:17:93:
         cf:ea:6c:5f:18:be:76:b1:f6:82:95:9f:7c:6e:fc:8d:88:78:
         75:09:71:98:aa:6f:40:12:5c:63:e2:1f:d9:33:4c:df:4f:24:
         b7:5a:d3:d3:df:18:eb:73:1b:10:6c:48:d0:ba:cf:2b:09:91:
         15:92:c1:15:6a:fe:29:e4:9d:14:0a:88:8a:fc:5d:36:be:03:
         2b:ae:40:c4:3c:53:75:78:67:24:94:54:63:b9:b7:5c:31:4a:
         0f:b5:97:c2:d4:6b:2f:fb:1d:28:a8:66:41:cd:a5:bf:6d:da:
         bd:76:50:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----