Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S_PtBo6ZRlpskalLsotB0sao6Dk.roa
File:                     S_PtBo6ZRlpskalLsotB0sao6Dk.roa (raw, json)
Hash identifier:          5pmFvF0BZgjyBt9oRTBiAgObr9tIjV9zyjOs10cEID4=
Subject key identifier:   4B:F3:ED:06:8E:99:46:5A:6C:91:A9:4B:B2:8B:41:D2:C6:A8:E8:39
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D07
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S_PtBo6ZRlpskalLsotB0sao6Dk.roa
Signing time:             Tue 29 Sep 2020 09:54:06 +0000
ROA not before:           Tue 29 Sep 2020 09:54:06 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.240.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3335 (0xd07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:06 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4BF3ED068E99465A6C91A94BB28B41D2C6A8E839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:75:6f:79:87:fd:41:b9:72:a8:3f:89:15:0c:
                    4c:5a:69:db:cb:48:ce:fa:43:a8:dc:bb:7e:e0:0a:
                    f2:d7:c4:62:5c:c6:54:fd:25:e8:e9:97:f9:9b:a6:
                    c6:11:c9:e1:fd:c2:76:36:03:6c:b9:66:5d:f8:86:
                    5f:e8:79:fe:6f:af:97:1e:5b:bf:2b:ad:2d:d5:f0:
                    33:1b:a9:34:44:10:51:88:31:28:62:d2:fe:31:74:
                    4e:de:60:35:22:5f:d7:43:42:c2:86:ff:3c:80:b7:
                    fa:9d:ee:5b:1b:e9:f5:36:b9:67:40:5d:88:a8:e1:
                    d4:80:9d:56:8c:ab:3b:b1:28:c0:86:27:41:be:63:
                    c8:7f:69:5a:50:99:ff:23:a6:df:4c:d1:fb:f1:1a:
                    ec:d2:70:87:fb:60:60:7d:2d:e0:eb:65:96:95:5d:
                    f6:61:1a:ec:76:97:f8:72:b6:5c:1d:c1:af:c7:36:
                    7e:d6:d9:19:0a:1f:59:fb:33:c6:03:93:9a:8c:57:
                    4e:af:3e:05:80:6c:7c:07:73:0c:9c:bb:c1:4c:4d:
                    0f:52:00:3a:10:4a:df:c2:ac:d2:d1:77:b2:f7:77:
                    9f:33:1d:62:5a:02:91:5e:db:1a:bd:21:32:74:54:
                    d4:99:61:a7:a5:16:af:38:69:ed:c5:8f:1d:ca:e6:
                    dc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F3:ED:06:8E:99:46:5A:6C:91:A9:4B:B2:8B:41:D2:C6:A8:E8:39
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S_PtBo6ZRlpskalLsotB0sao6Dk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         72:0b:49:2f:e1:57:fa:a3:39:a8:14:05:60:ff:88:5a:ff:77:
         95:37:b5:31:fd:6f:37:53:1f:82:b2:0b:1d:71:57:07:8f:51:
         9e:1a:90:1e:1c:63:61:87:6e:73:77:23:10:18:73:b6:e4:4e:
         ad:89:3a:2c:95:1d:08:a0:4b:63:da:76:da:30:59:fc:84:a0:
         aa:9d:c6:77:ed:26:7e:a0:5c:6f:d4:84:3b:82:89:0f:88:06:
         59:a8:8a:c9:ef:6b:b0:84:86:61:bd:b1:8f:21:eb:29:35:cc:
         26:a3:a5:e1:d6:90:50:57:1c:39:29:13:48:85:44:06:b8:5a:
         c2:26:92:5a:2a:6b:bb:ab:4d:65:95:c9:ae:fc:a9:af:bd:9d:
         55:bd:ed:ba:a1:a5:a1:8e:24:c4:75:f4:d8:c1:1c:5f:22:c2:
         fe:65:67:1d:63:c6:d1:d2:d8:b7:69:db:46:7e:fa:ff:8c:16:
         dc:dc:23:63:97:bc:fa:41:19:78:05:54:d3:45:80:1f:cf:50:
         fe:7c:cb:5e:f4:b0:c9:7a:ec:87:b5:42:73:a1:a1:0b:b8:b5:
         a1:5e:4e:30:76:44:cf:38:03:19:cb:62:36:ea:82:84:20:30:
         8c:24:60:9e:37:c3:e1:9b:dc:29:37:e8:ac:33:d4:fa:0c:0b:
         ff:02:bb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----