Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S-fLeCELLMhuOmPZlbvsLaFsarY.roa
File:                     S-fLeCELLMhuOmPZlbvsLaFsarY.roa (raw, json)
Hash identifier:          sXtn9g/NZBt+o+BVLXRY8vTrF7/Ze2WcgtKN1Ovklig=
Subject key identifier:   4B:E7:CB:78:21:0B:2C:C8:6E:3A:63:D9:95:BB:EC:2D:A1:6C:6A:B6
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1729
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S-fLeCELLMhuOmPZlbvsLaFsarY.roa
Signing time:             Sun 07 Feb 2021 12:17:06 +0000
ROA not before:           Sun 07 Feb 2021 12:17:06 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.205.144/28 maxlen: 28

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5929 (0x1729)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:17:06 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4BE7CB78210B2CC86E3A63D995BBEC2DA16C6AB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1e:8b:6e:2d:88:c7:ed:7b:a5:85:b9:8b:96:
                    02:d7:e8:8a:13:09:20:b2:29:b6:30:3d:6c:13:5a:
                    74:4c:47:67:3c:29:7b:d3:d8:e3:62:da:7a:0f:d3:
                    14:25:73:89:4b:9c:7b:8a:64:18:74:90:73:e7:f1:
                    3a:e0:e5:a7:75:51:fe:ed:df:e0:1b:cb:33:5e:ca:
                    1f:11:ee:70:90:ff:77:83:c1:56:d8:a4:e2:a1:41:
                    5e:b8:e3:67:82:15:86:6d:92:2e:ba:82:85:8d:ae:
                    58:06:80:08:be:cf:79:aa:c3:e5:10:4f:b1:ff:12:
                    61:5c:6f:a4:4e:52:13:cd:fd:c3:4b:ac:b1:7a:0f:
                    3e:bc:2e:16:bd:c3:33:fa:d4:53:0c:f9:44:e4:65:
                    2b:3a:19:5a:35:71:af:fa:58:26:7b:32:46:d6:1a:
                    51:d3:ff:ca:ef:18:85:6e:df:03:82:d5:2d:ac:9b:
                    22:19:64:4c:49:63:4e:86:65:2b:7f:a7:60:16:3d:
                    17:af:5f:a9:e7:73:94:88:05:52:45:dc:08:52:6c:
                    bb:d1:f7:b8:a6:73:87:20:46:40:41:e5:4c:ca:ea:
                    f4:be:63:83:59:74:48:ff:3b:6b:59:8b:97:96:d8:
                    60:ad:c5:2e:81:d2:ea:1d:86:ca:a5:53:7b:f6:e3:
                    08:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E7:CB:78:21:0B:2C:C8:6E:3A:63:D9:95:BB:EC:2D:A1:6C:6A:B6
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S-fLeCELLMhuOmPZlbvsLaFsarY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.205.144/28

    Signature Algorithm: sha256WithRSAEncryption
         a8:e3:ef:7f:37:1a:63:72:cc:a7:1b:ee:88:4a:6c:02:5a:9b:
         ac:eb:bd:a2:8e:f1:4a:68:e0:01:1a:5d:98:2f:b9:c7:87:82:
         44:00:e6:ce:f0:c8:85:ba:9d:be:83:db:8d:32:7c:5e:7c:81:
         80:89:fe:6c:94:96:71:16:e0:f7:f7:5a:37:52:64:ff:74:78:
         59:2f:2b:fe:6c:28:39:f5:97:85:c5:b6:01:ee:21:58:8f:04:
         d8:82:d4:0a:f9:6b:2f:8e:72:aa:6b:fb:7f:ef:17:92:19:7e:
         cd:38:aa:3a:95:8c:0e:4d:ef:f4:23:3b:65:af:a3:2f:e5:8f:
         42:23:3b:dc:8f:6e:83:bb:b9:5c:71:18:07:56:fa:94:b9:78:
         ff:10:94:06:03:26:95:54:92:4f:a0:92:f7:ae:01:2f:d6:38:
         3e:9f:7f:b2:a0:62:2b:d1:66:f1:31:0e:62:cb:9b:0e:34:a9:
         22:29:e6:b0:33:57:31:ee:a6:f9:7b:90:2b:92:25:c1:77:e8:
         49:7b:c1:d6:c7:21:5e:7e:20:41:0a:9c:b3:49:3b:af:90:c7:
         e7:d9:8a:c4:49:cc:23:f6:6b:40:d1:a9:68:9c:af:f9:97:97:
         3d:d4:c5:bd:96:96:7a:18:ed:89:f1:70:e2:56:c1:c3:20:d3:
         d1:9a:27:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----