Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SyNs1KCmW0ohTtVm6cqL5_eJ0x0.roa
File:                     SyNs1KCmW0ohTtVm6cqL5_eJ0x0.roa (raw, json)
Hash identifier:          K/v4vvHiignuvSYYjHx0O3ShNOrwfBcKnB0UUMNfviI=
Subject key identifier:   4B:23:6C:D4:A0:A6:5B:4A:21:4E:D5:66:E9:CA:8B:E7:F7:89:D3:1D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0CEB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SyNs1KCmW0ohTtVm6cqL5_eJ0x0.roa
Signing time:             Tue 29 Sep 2020 09:53:57 +0000
ROA not before:           Tue 29 Sep 2020 09:53:57 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.193.248.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3307 (0xceb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:53:57 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4B236CD4A0A65B4A214ED566E9CA8BE7F789D31D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7b:57:ac:d6:a3:3f:25:52:15:b7:60:e8:02:
                    cb:98:64:a7:fc:6b:03:ef:66:41:ff:e4:b4:15:fd:
                    26:60:5c:5d:89:f5:fe:ba:c5:bf:52:cd:5c:ef:10:
                    29:f9:00:47:a0:c8:99:4f:85:67:ef:d0:db:8f:ba:
                    a2:aa:eb:2b:e3:e6:69:cb:1e:2b:45:81:84:4b:2e:
                    75:55:df:ca:d9:51:21:d6:f3:bc:7f:9d:13:d0:ff:
                    d2:11:9c:cf:f5:0e:6d:ac:49:7b:19:3b:dc:e0:9a:
                    3a:5f:7f:a1:32:7e:27:1a:06:8b:e2:63:47:81:1a:
                    67:9b:95:f9:06:38:2b:85:ff:57:8e:cc:3f:c8:d6:
                    74:ea:54:fc:ba:b1:2e:88:77:4e:bc:93:05:6b:c4:
                    f4:00:bd:15:55:33:e9:78:8c:98:e8:0d:83:56:5b:
                    d6:db:f9:7f:01:b1:60:88:70:f6:3e:e6:23:ca:0a:
                    61:1b:e6:b3:58:53:85:93:d1:fe:af:98:92:70:8a:
                    af:5b:58:29:3b:59:38:fb:44:57:a3:d2:9b:fb:64:
                    ff:0e:fc:0a:db:44:19:f0:0e:a4:31:f7:73:54:e3:
                    e7:61:84:1b:1e:61:32:bc:3f:a8:53:20:f7:f2:ad:
                    8c:52:c4:90:3d:71:aa:bb:57:ba:72:be:83:2e:33:
                    8e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:23:6C:D4:A0:A6:5B:4A:21:4E:D5:66:E9:CA:8B:E7:F7:89:D3:1D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SyNs1KCmW0ohTtVm6cqL5_eJ0x0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         91:a0:ac:56:34:bb:d5:93:58:82:79:50:c2:4b:09:8d:57:1c:
         5c:9a:bb:94:88:26:39:c8:a7:2b:9d:bd:89:0e:58:34:9e:e5:
         19:29:9a:3d:65:5c:fa:9f:00:71:e5:f4:2c:22:7d:ee:ec:0e:
         32:be:ef:92:13:82:64:4f:34:4e:a3:04:e6:ea:64:4f:d6:80:
         c1:bf:84:e5:7d:d6:8d:44:1b:19:dd:f4:85:b0:ab:a5:41:27:
         2b:5c:fa:10:f4:6f:67:a9:e3:e8:11:f3:38:e4:2a:b1:17:62:
         10:bb:95:3e:29:4e:c1:95:34:5c:64:9c:20:ff:72:7a:06:de:
         d0:a1:d1:e8:ca:76:e2:63:98:f9:8f:67:92:96:54:99:0f:49:
         9c:14:53:b0:0c:e4:04:ea:c9:68:61:0e:a8:a2:41:ff:db:1b:
         00:d6:a8:95:ce:b4:b4:95:d3:31:a1:58:5b:1d:8d:ee:d6:d4:
         96:0f:53:8e:4f:5f:1b:b6:d8:70:b8:98:1e:fb:72:72:45:2a:
         05:01:e1:07:60:f8:d9:8d:53:02:c6:a2:fb:44:5a:c3:e1:20:
         54:19:79:a7:b9:82:d9:ca:77:d9:2d:aa:df:db:58:c8:16:9c:
         db:10:4a:99:83:f9:4a:e0:82:3c:d7:69:ca:48:20:44:21:d3:
         63:ee:e5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----