Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QdSMLoEibvdaNjhjAUGLwFbVnDU.roa
File:                     QdSMLoEibvdaNjhjAUGLwFbVnDU.roa (raw, json)
Hash identifier:          Fg5BwVqAcyV22kNGB+yUaEPU7U1xjCx+5lzCX2yxpgI=
Subject key identifier:   41:D4:8C:2E:81:22:6E:F7:5A:36:38:63:01:41:8B:C0:56:D5:9C:35
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F50
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QdSMLoEibvdaNjhjAUGLwFbVnDU.roa
Signing time:             Tue 29 Sep 2020 09:56:47 +0000
ROA not before:           Tue 29 Sep 2020 09:56:47 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.168.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3920 (0xf50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:47 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=41D48C2E81226EF75A36386301418BC056D59C35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d4:f8:d7:71:12:a4:1d:7d:a0:7e:63:52:ab:
                    3d:1b:f6:a4:3e:22:62:3d:18:52:ee:da:20:3a:04:
                    6f:e3:a6:aa:ac:4e:32:c4:99:16:77:f2:5d:5f:a0:
                    1b:20:61:fe:1e:2c:1a:74:2f:40:b9:5b:b7:df:0c:
                    3d:e7:ad:a3:df:25:f6:82:bf:40:ad:03:ea:ba:19:
                    38:d7:98:c5:36:77:df:48:8f:e0:62:51:60:4f:a1:
                    1c:28:4f:e1:a3:79:aa:8f:7f:04:d7:e3:4a:6e:17:
                    e4:aa:68:6f:52:19:03:fe:ce:cf:b2:69:1b:85:19:
                    cc:78:7f:b9:31:f4:db:a4:41:c0:f0:88:f0:63:c4:
                    e7:e3:e4:e6:ed:f3:e9:66:5a:7f:61:32:20:87:0e:
                    e1:6d:54:b4:f3:28:77:f8:4e:f8:9a:ad:2b:60:ae:
                    5d:3d:10:26:5d:bc:f8:18:61:f4:e5:a2:39:f4:08:
                    b6:9b:b4:9e:5e:bd:29:5a:d5:38:be:25:b6:9a:d9:
                    72:f8:24:bf:fc:4f:3f:a7:da:c8:ca:5b:c0:1a:c1:
                    a5:66:fa:a6:22:18:f6:be:7c:7d:6f:50:0c:f8:d2:
                    01:26:80:76:a1:fe:da:19:fb:50:e7:d8:41:b1:ef:
                    a8:4e:6e:81:90:ec:bb:62:40:51:8d:f5:f3:8a:9e:
                    17:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D4:8C:2E:81:22:6E:F7:5A:36:38:63:01:41:8B:C0:56:D5:9C:35
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QdSMLoEibvdaNjhjAUGLwFbVnDU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:9d:b2:85:b0:5f:b2:f3:19:a5:2b:a0:16:68:79:fd:99:f5:
         1f:5d:66:6a:0e:e4:9f:70:cd:30:75:e6:4c:fa:51:66:85:b7:
         3a:6c:7c:ef:ee:83:de:c7:24:04:6b:9f:28:6f:8b:2d:0b:97:
         c8:64:da:04:fc:a8:99:26:cd:f4:fa:82:27:5d:c0:87:f1:3c:
         45:fe:d5:27:af:b7:75:21:1e:dc:ce:eb:9f:61:a5:f2:be:be:
         e6:24:e1:35:e5:98:7c:47:9a:ae:21:2c:9c:6b:36:3f:cb:59:
         9d:df:56:f2:4e:d6:1e:59:7b:d5:7e:d9:0a:e1:94:a7:39:0b:
         b2:0e:e4:ea:e7:4d:64:5e:96:3a:5d:2d:e2:8a:4b:10:27:f8:
         e8:89:c5:5a:85:e8:ab:b2:95:1d:24:60:df:d5:6a:60:2b:c1:
         32:69:15:09:7b:7a:4d:1f:9c:97:9f:39:d6:fd:60:b0:d2:c0:
         a0:e7:9c:f7:3d:e4:f2:60:3a:4f:22:0a:ff:4f:97:53:56:d8:
         b6:73:e5:3f:fd:c4:bd:9a:dc:29:c1:05:e0:22:75:80:df:3d:
         af:30:e3:14:4d:83:69:42:2a:2c:94:45:5f:3d:17:f7:68:1a:
         4e:24:d6:a0:81:e6:38:39:c5:b4:f2:b9:82:b1:dd:3f:e5:e6:
         fc:b1:94:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----