Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ojkm9uSE6ASyvgbjbAJNOTp3o4A.roa
File:                     Ojkm9uSE6ASyvgbjbAJNOTp3o4A.roa (raw, json)
Hash identifier:          sbZ7te8bjpQ9I/YFax/c7ClIiSRim/jGKQjD2umbqYA=
Subject key identifier:   3A:39:26:F6:E4:84:E8:04:B2:BE:06:E3:6C:02:4D:39:3A:77:A3:80
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1519
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ojkm9uSE6ASyvgbjbAJNOTp3o4A.roa
Signing time:             Sun 07 Feb 2021 12:02:53 +0000
ROA not before:           Sun 07 Feb 2021 12:02:53 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.193.8.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5401 (0x1519)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:02:53 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=3A3926F6E484E804B2BE06E36C024D393A77A380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:df:e5:e6:53:cb:7e:cf:4b:e9:e4:e0:da:e6:
                    b5:ee:11:e6:f5:ba:f9:21:02:36:ef:48:b8:33:b1:
                    65:3c:11:f9:2b:e9:00:48:c0:92:96:62:59:b6:10:
                    43:d0:e4:1c:21:44:19:18:8f:fe:9b:7a:d3:74:eb:
                    99:1e:15:e8:52:62:d2:98:8c:d6:02:26:32:06:f5:
                    1b:96:37:54:b9:14:a2:f8:7a:c5:08:73:3d:52:0d:
                    99:4c:c1:b0:bf:17:79:2d:7f:d9:62:56:94:66:e6:
                    f7:23:97:ca:3c:e4:7a:fc:2a:65:f0:da:40:ca:38:
                    16:6d:75:b8:f8:2b:f4:23:66:bf:cf:e3:2b:08:42:
                    1d:aa:a5:b7:62:ca:ce:05:37:fe:de:22:b4:25:15:
                    d0:e9:90:6b:92:25:b3:c0:24:ae:73:9b:cd:ae:4f:
                    1f:05:db:f1:05:0c:fd:f1:98:be:e4:83:cc:90:d8:
                    c6:9b:b5:56:c1:a5:12:f5:53:d8:ae:13:55:c5:a5:
                    2e:de:2f:61:83:86:93:30:ae:9e:c2:5e:55:5f:9c:
                    da:d8:60:c3:c9:e5:85:c9:3e:a2:25:29:9c:b8:dd:
                    2f:68:6a:7c:13:36:8b:27:9f:bd:b9:f8:d5:c8:75:
                    bd:b7:b1:c0:6e:66:85:65:63:25:b2:fb:f2:0e:79:
                    d9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:39:26:F6:E4:84:E8:04:B2:BE:06:E3:6C:02:4D:39:3A:77:A3:80
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ojkm9uSE6ASyvgbjbAJNOTp3o4A.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         99:11:04:c7:59:c6:58:0b:c8:22:cd:e2:ca:1f:3e:81:23:f6:
         37:34:bd:6b:3e:f9:48:af:53:31:73:86:8c:d4:3d:ca:d0:c4:
         93:f1:70:b1:1d:49:ce:d7:97:7b:f1:8d:d7:07:66:85:57:35:
         9c:18:f3:eb:2e:88:16:c3:23:5a:63:77:e6:fa:8a:77:4e:75:
         d9:53:01:87:5b:16:7e:e2:9a:e6:87:ea:4e:1f:7f:e6:2d:4e:
         e8:36:a6:a6:cc:62:e7:ab:df:39:19:14:ec:c5:4b:a6:d9:7a:
         9f:3c:12:2e:68:a4:a6:35:03:ed:73:09:ef:10:49:39:5e:3d:
         84:02:bb:b3:ca:ce:9a:76:07:f9:e3:a0:c7:35:c2:42:5a:46:
         f4:49:04:8b:0b:3b:bf:81:07:a6:d8:4a:8c:7d:3b:dc:53:d4:
         5a:bf:ff:d0:c4:5a:a1:3a:da:98:ff:d0:b5:e3:9a:26:48:4d:
         5f:f8:ce:6d:47:23:35:e4:92:f7:00:96:b0:4f:29:81:c3:4b:
         e2:ff:e8:f8:08:7d:86:21:b3:e7:ad:9c:2a:fa:89:06:72:a4:
         31:3e:e0:a5:89:f7:b9:4a:96:34:66:ce:e1:b9:66:66:9c:fa:
         ea:e0:62:a6:dc:ff:63:ca:09:74:04:91:02:c2:dc:46:bb:0a:
         c0:53:cd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----