Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NoEBHnWlOhQXR3fCANkjMswPr-U.roa
File:                     NoEBHnWlOhQXR3fCANkjMswPr-U.roa (raw, json)
Hash identifier:          7oJuR0e4C0vbON3dK24bI1jpGZunXNB0uQBiu9fFBs8=
Subject key identifier:   36:81:01:1E:75:A5:3A:14:17:47:77:C2:00:D9:23:32:CC:0F:AF:E5
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E79
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NoEBHnWlOhQXR3fCANkjMswPr-U.roa
Signing time:             Tue 29 Sep 2020 09:55:46 +0000
ROA not before:           Tue 29 Sep 2020 09:55:46 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.238.0/25 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3705 (0xe79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:46 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=3681011E75A53A14174777C200D92332CC0FAFE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:68:63:f5:7f:54:0f:af:1e:8a:a8:ab:e6:1d:
                    fc:fa:01:78:56:c2:70:75:30:fb:d9:30:d0:9a:34:
                    19:b0:de:8e:41:87:2d:96:cd:51:b0:5a:68:30:4e:
                    2b:b2:14:f3:d5:10:76:9c:1e:d8:6f:2c:77:fa:b9:
                    2e:f3:a2:bf:45:fc:28:ae:b2:5a:9c:40:48:6d:64:
                    b8:a1:72:a9:0c:8a:07:3e:d5:8f:29:12:1f:ce:c0:
                    36:5f:d5:8a:6c:e6:0b:6d:39:4b:d6:4f:88:ce:2e:
                    cf:88:b4:ad:ec:c5:3d:50:67:de:69:d7:91:8f:66:
                    42:ef:d6:da:05:45:4f:93:33:4d:a4:86:d7:e7:ab:
                    b0:02:87:52:42:f4:cf:d9:89:04:71:aa:1c:e6:eb:
                    36:ab:1d:87:00:e6:c2:0e:af:35:42:de:8b:8d:e9:
                    61:3a:d0:bb:1c:b4:7b:e0:a4:6e:46:2d:ce:19:a0:
                    40:8a:61:b4:47:af:f3:11:e7:e1:1c:45:2d:ef:b3:
                    d5:36:00:08:04:a9:aa:7f:c0:5f:85:82:68:7f:51:
                    e4:ec:77:01:c8:0a:a0:98:dc:78:40:83:35:2d:7a:
                    7f:35:34:43:8e:4e:52:42:04:12:23:49:18:35:95:
                    a1:ef:39:b9:07:ae:e4:91:51:3d:6e:b6:08:5d:ee:
                    ae:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:81:01:1E:75:A5:3A:14:17:47:77:C2:00:D9:23:32:CC:0F:AF:E5
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NoEBHnWlOhQXR3fCANkjMswPr-U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.238.0/25

    Signature Algorithm: sha256WithRSAEncryption
         56:09:0a:72:9f:00:2b:cf:d6:8f:f7:53:85:86:07:3a:c7:fc:
         a7:27:38:ca:62:79:eb:d8:c2:28:17:25:f1:3d:d6:0a:f1:21:
         f1:17:76:7a:97:e2:f6:25:bf:37:cc:a7:8d:db:cb:7b:51:7c:
         14:67:98:62:cc:b3:19:25:5a:eb:3f:2f:b2:13:5f:40:f1:47:
         22:24:eb:3a:29:bd:ac:57:a3:89:92:cc:ed:64:b6:ce:66:7d:
         1d:d4:95:80:59:6f:47:33:9e:34:c8:64:85:0f:e2:36:a6:e5:
         6b:27:0c:11:8d:f3:25:de:98:91:a0:a2:e9:bf:d5:ef:a2:7e:
         0d:1a:37:91:63:bf:4c:02:89:1a:c5:2c:9a:e2:07:45:fc:0a:
         47:b8:61:34:d3:df:75:ac:3b:60:d1:9b:4a:41:bd:f6:ce:ab:
         c6:58:3e:3d:68:0d:e9:55:31:68:5c:95:a9:8c:a0:35:e2:f9:
         40:ee:b2:40:d5:93:21:15:9f:94:52:ca:56:e9:2f:aa:42:81:
         25:d0:85:a4:c8:a6:83:a6:6b:a6:0b:d0:c2:48:94:fe:02:1a:
         cc:d3:ec:26:7e:03:aa:67:92:32:c3:dd:8b:2e:7f:1b:f3:02:
         42:3f:ea:5d:dd:a8:1c:29:ed:25:44:00:7e:f8:25:cd:f5:5f:
         59:cd:72:f7
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICDnkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU1NDZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDM2ODEwMTFFNzVBNTNB
MTQxNzQ3NzdDMjAwRDkyMzMyQ0MwRkFGRTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCfaGP1f1QPrx6KqKvmHfz6AXhWwnB1MPvZMNCaNBmw3o5Bhy2W
zVGwWmgwTiuyFPPVEHacHthvLHf6uS7zor9F/CiuslqcQEhtZLihcqkMigc+1Y8p
Eh/OwDZf1Yps5gttOUvWT4jOLs+ItK3sxT1QZ95p15GPZkLv1toFRU+TM02khtfn
q7ACh1JC9M/ZiQRxqhzm6zarHYcA5sIOrzVC3ouN6WE60LsctHvgpG5GLc4ZoECK
YbRHr/MR5+EcRS3vs9U2AAgEqap/wF+Fgmh/UeTsdwHICqCY3HhAgzUten81NEOO
TlJCBBIjSRg1laHvObkHruSRUT1utghd7q7JAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUNoEBHnWlOhQXR3fCANkjMswPr+UwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL05vRUJIbldsT2hRWFIzZkNB
TmtqTXN3UHItVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQd7
w+4AMA0GCSqGSIb3DQEBCwUAA4IBAQBWCQpynwArz9aP91OFhgc6x/ynJzjKYnnr
2MIoFyXxPdYK8SHxF3Z6l+L2Jb83zKeN28t7UXwUZ5hizLMZJVrrPy+yE19A8Uci
JOs6Kb2sV6OJksztZLbOZn0d1JWAWW9HM540yGSFD+I2puVrJwwRjfMl3piRoKLp
v9Xvon4NGjeRY79MAokaxSya4gdF/ApHuGE00991rDtg0ZtKQb32zqvGWD49aA3p
VTFoXJWpjKA14vlA7rJA1ZMhFZ+UUspW6S+qQoEl0IWkyKaDpmumC9DCSJT+AhrM
0+wmfgOqZ5Iyw92LLn8b8wJCP+pd3agcKe0lRAB++CXN9V9ZzXL3
-----END CERTIFICATE-----