Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ScOLx-1zYytNxcnh9tZsXIMqBBY.roa
File:                     ScOLx-1zYytNxcnh9tZsXIMqBBY.roa (raw, json)
Hash identifier:          X8Rkfeql7lXsVtCzpgiDtiJ14JIRKcyUw84ZJGc1KdQ=
Subject key identifier:   49:C3:8B:C7:ED:73:63:2B:4D:C5:C9:E1:F6:D6:6C:5C:83:2A:04:16
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F84
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ScOLx-1zYytNxcnh9tZsXIMqBBY.roa
Signing time:             Tue 29 Sep 2020 09:57:03 +0000
ROA not before:           Tue 29 Sep 2020 09:57:03 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.192.88.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3972 (0xf84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:57:03 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=49C38BC7ED73632B4DC5C9E1F6D66C5C832A0416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:20:f5:d7:3a:68:77:69:cf:61:dd:c8:1b:2d:
                    ef:fe:53:ba:27:14:6b:6a:73:f3:72:05:0d:4a:86:
                    a7:eb:ff:05:c3:f1:ae:b1:32:d3:18:bd:ed:74:13:
                    b1:d8:4d:a7:b9:db:16:e4:ea:e2:0d:de:61:a1:1b:
                    a8:86:6e:b3:ac:68:48:2c:46:c0:ba:f4:1e:8d:f8:
                    98:43:6e:c2:f3:c8:ec:c2:28:28:eb:d0:80:55:91:
                    a7:35:37:3f:bb:f7:83:e5:c0:27:f2:f9:e3:fc:91:
                    05:ff:42:35:f4:79:a8:e8:78:fc:5f:63:18:8e:d7:
                    41:49:42:d6:4b:f3:38:b4:41:46:ff:09:59:0c:95:
                    32:1b:40:d3:90:b4:7f:8d:d1:e4:cb:81:c6:aa:ca:
                    2f:7e:a9:c4:0d:82:4c:74:c4:a5:ad:bf:00:34:bd:
                    a6:62:89:32:ca:28:d4:d8:3f:45:df:66:5d:03:f0:
                    ab:20:13:12:34:0c:c0:5a:27:37:45:c3:2a:1b:13:
                    90:b1:91:26:c6:d7:55:be:c1:00:e0:38:66:8e:9b:
                    27:20:16:ad:f0:eb:0e:5f:bf:c1:72:61:0d:c8:45:
                    ef:c5:82:ed:0d:73:6d:99:28:5a:a4:f7:21:57:2e:
                    18:b0:d9:e1:83:44:2a:95:a1:7b:b8:45:79:74:e7:
                    03:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C3:8B:C7:ED:73:63:2B:4D:C5:C9:E1:F6:D6:6C:5C:83:2A:04:16
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ScOLx-1zYytNxcnh9tZsXIMqBBY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         39:1e:c1:d7:e1:f0:ca:56:2a:12:cc:f6:f3:8b:05:af:11:42:
         fd:5f:ea:34:c0:71:05:aa:ab:c2:c9:72:86:37:97:91:85:31:
         45:7c:97:31:80:6e:85:2d:e7:dc:e9:e9:c4:9e:2e:be:19:dd:
         89:39:30:be:e4:9f:c8:32:e7:06:17:a8:4f:fe:49:a4:8a:09:
         aa:44:bb:b4:8f:21:7f:44:62:e4:aa:fd:02:3a:f1:a4:1f:82:
         1f:03:fd:6d:d5:d0:eb:2d:49:d0:25:0b:c8:df:0a:b2:2e:9c:
         a8:68:d8:e6:13:9f:b6:08:47:11:ed:a8:ef:d2:7a:64:81:02:
         d6:33:f6:1e:d3:15:b4:c0:0c:8d:a2:4b:b3:4e:05:ae:8e:1e:
         1a:1a:d4:25:6a:14:a0:5c:26:f2:7f:a8:be:bb:65:59:db:fd:
         32:e3:1d:2b:62:1a:c8:e9:35:ac:40:59:19:a6:62:e0:5c:d1:
         c8:43:b9:03:e1:1d:8f:e8:9f:11:c2:65:1c:0f:5e:e1:fd:e8:
         10:94:ad:05:e5:16:91:3f:69:2b:ce:34:ba:bb:f4:2f:67:16:
         e7:15:4c:67:69:95:6e:de:60:86:26:aa:ef:5d:e2:f7:98:dd:
         fa:24:46:70:34:e3:89:78:73:af:80:60:16:ad:54:22:c7:47:
         77:ed:0d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----