Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NJQ6tar__8eQe2gUbfMEuYykU_E.roa
File:                     NJQ6tar__8eQe2gUbfMEuYykU_E.roa (raw, json)
Hash identifier:          YjMF8eHrXkmR91tkMZFVCVO2qIYgTQq8Hk9mDTPeHeQ=
Subject key identifier:   34:94:3A:B5:AA:FF:FF:C7:90:7B:68:14:6D:F3:04:B9:8C:A4:53:F1
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F2A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NJQ6tar__8eQe2gUbfMEuYykU_E.roa
Signing time:             Tue 29 Sep 2020 09:56:34 +0000
ROA not before:           Tue 29 Sep 2020 09:56:34 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        118.232.0.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3882 (0xf2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:34 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=34943AB5AAFFFFC7907B68146DF304B98CA453F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9e:cb:46:9e:9f:99:80:46:66:36:cf:47:7c:
                    50:56:60:d7:69:4f:09:eb:31:2d:8c:9a:75:45:44:
                    0d:b2:0b:45:d9:e1:d4:c1:48:10:88:a2:87:a3:13:
                    72:95:bd:2f:56:63:79:15:91:09:5a:cc:b4:c1:a3:
                    ba:04:18:72:bf:d2:9d:2e:bd:04:6e:3b:97:6e:18:
                    36:dc:51:5a:a9:4a:e3:07:91:94:06:a6:75:57:21:
                    06:40:e4:8e:55:2b:b1:b7:bc:66:89:eb:a1:83:1a:
                    b8:25:74:ee:bb:2a:ee:71:d6:ad:8e:d7:33:4a:5c:
                    6a:9d:6f:33:d9:78:37:ed:03:19:87:a3:fa:e2:77:
                    8a:68:ce:a7:c9:3c:72:df:5a:33:1f:90:da:b3:dc:
                    03:e4:90:1a:34:0c:85:37:e1:6b:88:95:6a:d8:ba:
                    5a:79:da:d4:d0:a2:52:4e:99:cd:c1:3b:ce:f6:9f:
                    f4:1a:67:9b:dd:3f:83:a7:74:1b:51:90:92:09:22:
                    c2:c3:42:fb:7b:88:46:71:0b:0f:ea:37:d3:99:2a:
                    8c:b6:4d:18:89:76:85:b1:cc:eb:22:ae:bc:3f:90:
                    fa:d6:83:1e:f6:ed:9f:5d:5b:4a:a7:00:25:96:0a:
                    e9:5c:87:2b:86:c8:96:84:2a:8d:c1:cf:0c:30:2f:
                    7e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:94:3A:B5:AA:FF:FF:C7:90:7B:68:14:6D:F3:04:B9:8C:A4:53:F1
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NJQ6tar__8eQe2gUbfMEuYykU_E.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3a:96:33:1e:3c:29:af:a7:cc:02:5b:85:13:6c:68:e8:f9:c5:
         5b:f5:11:e1:5a:81:c2:30:7f:91:6a:82:50:6a:50:da:b9:d5:
         e3:2b:5e:f0:bd:2c:cd:49:46:d9:f5:25:a2:91:19:45:36:a1:
         3f:95:d8:6d:55:c2:f8:8d:a2:d4:75:29:73:71:ee:5d:26:46:
         cb:12:f1:fe:00:09:66:aa:1b:2f:26:e0:53:f2:fc:51:55:16:
         be:df:b5:2f:8d:b3:70:6e:2d:1d:e2:5b:f4:34:be:83:7f:40:
         f2:e9:f3:ff:99:c3:cb:60:e3:9c:08:71:e1:3e:40:44:6b:cf:
         61:04:1b:f5:4f:a0:69:be:a0:08:d4:4a:a3:42:e7:18:82:60:
         f0:70:5f:a7:1e:08:5d:b3:3a:4f:07:f3:ad:ba:ec:94:5b:73:
         2a:a9:1b:42:96:7d:f2:e4:4c:3e:10:2a:0b:5a:7b:ee:12:a2:
         04:3b:6e:b2:43:d9:a6:d9:7f:00:c7:c3:cd:16:7a:60:da:40:
         39:e4:d7:6c:2b:6e:41:12:fa:74:1d:38:e6:c9:6a:cc:4b:60:
         a8:1a:e1:aa:2e:d2:29:d9:17:65:79:b8:03:65:a9:16:c2:6b:
         8f:f1:f5:5e:6f:17:86:b8:95:41:35:4a:f7:46:67:96:c6:fb:
         91:c9:01:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----