Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Pd73QsNf3RRonkPhzR4rXDFE0J4.roa
File:                     Pd73QsNf3RRonkPhzR4rXDFE0J4.roa (raw, json)
Hash identifier:          cVU51xLklOcT3fDO8ihsEMQiyoEsyQ2A0MLH6zHqa7w=
Subject key identifier:   3D:DE:F7:42:C3:5F:DD:14:68:9E:43:E1:CD:1E:2B:5C:31:44:D0:9E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0CE8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Pd73QsNf3RRonkPhzR4rXDFE0J4.roa
Signing time:             Tue 29 Sep 2020 09:53:57 +0000
ROA not before:           Tue 29 Sep 2020 09:53:57 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        211.76.115.128/25 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3304 (0xce8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:53:57 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=3DDEF742C35FDD14689E43E1CD1E2B5C3144D09E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c2:4b:eb:bf:ce:31:57:20:15:b8:29:83:2b:
                    65:c1:49:58:e5:6f:55:76:27:69:73:79:c4:f1:0d:
                    49:05:cc:a5:ac:98:b9:3c:99:95:28:1b:0b:e2:a3:
                    d5:c6:2d:e4:53:6d:cc:7e:75:97:54:a5:d2:cb:18:
                    43:66:79:0d:02:28:bb:a2:e5:e0:80:86:5b:10:e3:
                    90:a2:04:a9:37:f2:29:ea:2f:26:86:b6:37:e3:8c:
                    b5:3a:6c:15:6d:ab:ec:49:4f:b9:b3:e9:7b:cb:85:
                    34:b8:7c:ae:40:92:4f:07:ed:1e:2e:a9:f1:4b:9f:
                    0e:c8:37:76:3b:5b:18:6b:2e:58:fd:57:55:35:da:
                    54:61:a2:5b:22:70:d0:73:d1:40:1e:8e:7c:35:9a:
                    1d:c9:f8:b7:f9:8f:dd:c6:ca:14:fe:29:a0:75:82:
                    cf:72:2d:db:23:74:af:94:f6:19:d3:7d:ae:d8:8f:
                    07:20:3d:44:1f:c1:5c:4d:52:77:48:66:ca:c0:83:
                    2b:f5:29:b7:2c:e5:d8:59:a1:ec:9e:87:98:b8:21:
                    e9:b3:9e:e4:4a:bb:ba:f9:33:e7:34:a0:45:c6:68:
                    b9:50:33:cc:a6:e8:a5:7f:95:2b:d6:fb:00:0c:5d:
                    fa:4e:f6:3c:ee:82:d9:74:1b:2c:79:35:46:e2:b9:
                    2d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:DE:F7:42:C3:5F:DD:14:68:9E:43:E1:CD:1E:2B:5C:31:44:D0:9E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Pd73QsNf3RRonkPhzR4rXDFE0J4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.115.128/25

    Signature Algorithm: sha256WithRSAEncryption
         87:4c:ac:a9:89:23:4a:6b:ac:83:21:88:1e:78:e2:07:bd:e2:
         b8:77:8c:4f:8a:f2:b2:85:24:dc:ec:24:06:cf:fe:90:27:5c:
         98:67:7d:8f:c9:ce:8c:fe:aa:cc:e7:c5:b1:ff:06:d5:22:3f:
         5a:7d:69:60:a3:16:34:33:77:dd:eb:65:89:92:85:d5:74:c3:
         5a:93:f4:b9:11:0d:71:97:61:4b:9d:24:0e:cf:a5:fc:a4:cd:
         de:f5:c4:3e:6f:94:44:48:8e:42:9e:47:23:4e:1a:d6:97:94:
         15:84:ec:30:c5:d2:2f:70:ea:66:60:1d:9b:cb:e1:ce:cb:81:
         60:3f:13:a7:89:ea:b2:e8:da:2f:cf:3c:71:33:66:73:31:a3:
         57:57:bf:93:78:de:6b:73:0d:1a:20:e0:df:4a:3b:1c:d1:8d:
         6c:98:59:ca:6a:4b:57:7c:eb:1e:6f:12:e7:40:87:74:03:a6:
         f0:95:76:27:8e:98:67:8f:45:33:23:10:12:b9:07:3e:ab:e8:
         fb:76:b6:89:70:78:fc:76:6e:ac:57:81:c6:96:58:cf:43:ed:
         55:66:55:77:ae:fe:f6:c9:6c:5e:72:c5:7a:02:30:26:2b:44:
         c6:9f:80:9f:fa:d7:ca:b4:b6:4f:89:52:e8:ea:ca:8c:da:49:
         8b:5f:52:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----