Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SiUKKxTMWGx0HCudP0D_ilAFs_c.roa
File:                     SiUKKxTMWGx0HCudP0D_ilAFs_c.roa (raw, json)
Hash identifier:          i2TTqFi6lof2k0++sj2gP0GZPf6ajRZEewHsG3OXG2I=
Subject key identifier:   4A:25:0A:2B:14:CC:58:6C:74:1C:2B:9D:3F:40:FF:8A:50:05:B3:F7
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0EB4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SiUKKxTMWGx0HCudP0D_ilAFs_c.roa
Signing time:             Tue 29 Sep 2020 09:56:02 +0000
ROA not before:           Tue 29 Sep 2020 09:56:02 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.232.192.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3764 (0xeb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:02 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4A250A2B14CC586C741C2B9D3F40FF8A5005B3F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bf:c3:12:b4:35:be:14:0a:9c:47:f1:57:62:
                    02:0f:6a:0a:84:8f:68:f8:14:06:8b:6a:ea:2a:dd:
                    7c:0f:e9:f9:0a:a2:15:c0:23:97:51:e9:3e:fd:35:
                    c5:39:db:17:5c:f4:c0:ca:6b:21:ca:a0:e1:db:43:
                    73:cb:f5:40:a8:6c:60:67:8b:be:b4:bd:ca:26:d8:
                    11:b1:e5:d1:77:02:3b:ae:7c:59:13:bd:49:03:bf:
                    23:3d:34:52:68:6c:b0:db:a2:a6:c7:05:5c:b1:da:
                    47:2c:ea:62:f6:e4:ff:37:97:1b:b7:95:62:69:6e:
                    a4:0e:d5:d2:3d:e1:35:fc:fd:00:6f:22:e7:7b:ed:
                    bf:ca:01:8d:fa:f0:7e:55:88:77:f7:bc:97:ae:6f:
                    54:e7:2f:4a:1b:f7:a3:9a:9c:f7:d9:e0:e1:2c:75:
                    21:93:2e:66:f5:95:a8:00:b5:05:2c:85:74:9d:b6:
                    54:74:f8:4f:ef:71:ff:90:aa:47:8e:5c:6a:bd:fe:
                    92:52:55:71:90:ba:11:c4:67:14:98:ea:76:57:25:
                    fd:a8:fb:9a:9b:9a:88:92:c9:f4:26:c6:b8:0b:de:
                    68:2e:b0:e9:cc:03:ec:22:8b:e8:ae:7e:6f:8d:83:
                    90:16:f1:b0:8d:fd:cc:aa:f9:d7:81:2a:42:25:7a:
                    bc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:25:0A:2B:14:CC:58:6C:74:1C:2B:9D:3F:40:FF:8A:50:05:B3:F7
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SiUKKxTMWGx0HCudP0D_ilAFs_c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         97:9f:6f:c9:97:99:dc:f9:5a:9a:a8:67:e3:41:2b:fe:ae:82:
         aa:d4:1f:c7:9e:da:0c:4e:22:9c:4d:14:ca:7e:f0:cb:83:b7:
         91:00:cb:c1:b2:7b:bb:42:88:0d:30:95:27:f3:1e:3a:78:71:
         b1:b0:73:68:24:bd:4b:16:c4:f4:ec:2b:4e:a4:4a:c9:52:19:
         51:37:fe:ac:8d:07:2c:39:26:1b:e7:a1:69:53:63:8f:31:ea:
         40:ab:29:f0:ff:c7:2a:56:70:e3:41:1c:4b:07:83:c4:0f:35:
         61:ac:4a:c8:58:a2:a4:88:38:67:9b:00:32:fd:bc:3f:72:c5:
         82:76:72:b5:a1:17:35:7b:38:96:4c:af:2d:cb:56:4b:ec:1f:
         0c:96:9d:8c:f4:a3:1f:7b:87:91:41:fe:d0:e9:de:1e:e6:84:
         58:fd:57:e1:16:f0:b1:46:9e:eb:1c:32:3d:32:d8:40:53:34:
         d7:3f:b6:f3:0d:58:9c:07:49:07:17:84:6b:62:85:1f:4b:9f:
         c1:bc:4e:a1:fe:68:75:90:c4:7e:69:83:10:59:4e:35:d8:f0:
         1f:99:64:48:80:77:bb:c5:a7:20:bf:1f:8a:1f:4b:a7:33:ec:
         a1:56:cb:f6:f4:ea:62:bd:d1:c9:ad:24:11:9f:80:3f:c5:dc:
         39:05:d1:61
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDrQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU2MDJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDRBMjUwQTJCMTRDQzU4
NkM3NDFDMkI5RDNGNDBGRjhBNTAwNUIzRjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9v8MStDW+FAqcR/FXYgIPagqEj2j4FAaLauoq3XwP6fkKohXA
I5dR6T79NcU52xdc9MDKayHKoOHbQ3PL9UCobGBni760vcom2BGx5dF3AjuufFkT
vUkDvyM9NFJobLDboqbHBVyx2kcs6mL25P83lxu3lWJpbqQO1dI94TX8/QBvIud7
7b/KAY368H5ViHf3vJeub1TnL0ob96OanPfZ4OEsdSGTLmb1lagAtQUshXSdtlR0
+E/vcf+QqkeOXGq9/pJSVXGQuhHEZxSY6nZXJf2o+5qbmoiSyfQmxrgL3mgusOnM
A+wii+iufm+Ng5AW8bCN/cyq+deBKkIlerzDAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUSiUKKxTMWGx0HCudP0D/ilAFs/cwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1NpVUtLeFRNV0d4MEhDdWRQ
MERfaWxBRnNfYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2
6MAwDQYJKoZIhvcNAQELBQADggEBAJefb8mXmdz5WpqoZ+NBK/6ugqrUH8ee2gxO
IpxNFMp+8MuDt5EAy8Gye7tCiA0wlSfzHjp4cbGwc2gkvUsWxPTsK06kSslSGVE3
/qyNByw5JhvnoWlTY48x6kCrKfD/xypWcONBHEsHg8QPNWGsSshYoqSIOGebADL9
vD9yxYJ2crWhFzV7OJZMry3LVkvsHwyWnYz0ox97h5FB/tDp3h7mhFj9V+EW8LFG
nuscMj0y2EBTNNc/tvMNWJwHSQcXhGtihR9Ln8G8TqH+aHWQxH5pgxBZTjXY8B+Z
ZEiAd7vFpyC/H4ofS6cz7KFWy/b06mK90cmtJBGfgD/F3DkF0WE=
-----END CERTIFICATE-----