Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/St3ciLk2LimKCrX1R3TFQRwAF8g.roa
File:                     St3ciLk2LimKCrX1R3TFQRwAF8g.roa (raw, json)
Hash identifier:          CmjeVycpCXH+3oVH9Xcw479lL/urr+V5dn7V+2ftJy8=
Subject key identifier:   4A:DD:DC:88:B9:36:2E:29:8A:0A:B5:F5:47:74:C5:41:1C:00:17:C8
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F2B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/St3ciLk2LimKCrX1R3TFQRwAF8g.roa
Signing time:             Tue 29 Sep 2020 09:56:35 +0000
ROA not before:           Tue 29 Sep 2020 09:56:35 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        123.195.236.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3883 (0xf2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:35 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4ADDDC88B9362E298A0AB5F54774C5411C0017C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:43:b4:8a:1f:ee:97:2d:45:b2:ef:46:dc:8f:
                    eb:c8:3a:b7:2e:ca:2d:38:40:b1:7b:58:b4:e4:7b:
                    a3:89:3b:59:b7:96:8d:1b:09:36:5d:95:66:1e:4d:
                    ff:d5:60:85:96:ed:ae:f0:90:ed:f2:fd:fe:90:6c:
                    67:91:81:25:83:d6:70:93:29:49:e9:0b:d9:89:ba:
                    46:fc:b3:2c:82:28:0a:fd:b3:0e:5b:12:b5:7b:1f:
                    4d:0a:7f:cf:b4:33:ce:de:06:a3:82:25:62:fe:eb:
                    49:72:36:62:8f:51:dd:1c:4a:0a:c2:aa:68:f8:66:
                    a2:a7:82:4e:df:77:2e:ef:cb:fb:9b:ef:9f:5a:83:
                    78:84:fe:a1:55:3c:a3:28:5f:5f:d3:44:6d:af:05:
                    f9:5d:79:7d:21:95:3e:9d:72:1c:d9:a2:2e:10:57:
                    8e:65:22:e5:8e:82:68:c6:da:b3:ee:40:bc:93:43:
                    5e:44:db:3c:70:f9:c3:9c:c6:f1:63:36:12:15:43:
                    30:9a:10:d7:f0:3b:d3:7d:61:3b:df:09:da:31:51:
                    f3:65:b4:e7:e8:12:26:13:b8:fd:4b:35:1f:53:f0:
                    b6:d6:56:15:6c:ea:48:79:0e:55:b1:9a:dd:62:2d:
                    23:20:89:f6:8d:60:53:17:7e:3a:96:00:37:83:1d:
                    62:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DD:DC:88:B9:36:2E:29:8A:0A:B5:F5:47:74:C5:41:1C:00:17:C8
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/St3ciLk2LimKCrX1R3TFQRwAF8g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:fd:aa:bf:85:91:12:bf:07:0a:ec:19:ab:5f:e6:52:0b:fd:
         5e:18:c2:6e:77:74:d4:b0:d1:fb:86:d8:3f:a9:eb:52:1d:5c:
         fa:36:cf:1a:a7:c4:97:28:af:4f:c7:38:fd:b0:e0:4a:c7:01:
         d3:14:2e:81:1e:fa:b7:d2:bd:9a:ab:a4:77:97:55:dd:3b:3a:
         f2:31:00:d6:1c:1f:64:12:75:66:2e:4d:36:c2:54:39:44:4f:
         ad:c1:aa:51:d8:2d:76:59:28:2e:35:88:09:00:13:1b:d5:16:
         66:c7:57:33:a2:db:2c:f1:c7:78:3e:80:d3:c2:26:cb:aa:1e:
         04:09:10:14:a8:d3:e0:0d:1a:8d:8d:8b:af:5c:53:1f:34:8a:
         8b:be:2e:7c:16:57:17:35:71:9e:4e:d6:2e:a0:4c:42:a7:99:
         16:68:e7:80:3c:5f:3e:fe:ca:a5:63:af:14:39:6b:6f:c5:89:
         01:70:11:24:c0:f7:40:e0:26:da:26:01:5d:72:f4:59:be:42:
         67:8e:96:6d:51:9f:25:54:37:03:b3:81:84:98:3c:b5:e2:5d:
         d2:ad:7c:22:3a:b4:4b:a7:52:fd:7d:36:58:de:62:91:67:03:
         3f:75:b5:1d:d7:08:e4:d2:16:e2:ac:7f:c4:d2:ba:61:d0:70:
         a1:16:f4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----