Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TJCgNrV228-nSzBSTFNdcRNs23M.roa
File:                     TJCgNrV228-nSzBSTFNdcRNs23M.roa (raw, json)
Hash identifier:          DjxCKn/vnYUiAWhy+vKXlhg7Okg1L/U9ojySj+4/IwE=
Subject key identifier:   4C:90:A0:36:B5:76:DB:CF:A7:4B:30:52:4C:53:5D:71:13:6C:DB:73
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D85
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TJCgNrV228-nSzBSTFNdcRNs23M.roa
Signing time:             Tue 29 Sep 2020 09:54:39 +0000
ROA not before:           Tue 29 Sep 2020 09:54:39 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.233.196.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3461 (0xd85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:39 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4C90A036B576DBCFA74B30524C535D71136CDB73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:22:54:60:75:93:dd:88:a9:3e:d1:61:a7:5d:
                    92:43:0b:a8:23:b2:ed:3e:8e:bc:bb:84:a5:34:d2:
                    c1:27:f7:d7:b7:41:b8:d2:36:78:57:ba:16:da:65:
                    57:e9:57:5a:dd:43:a3:cb:08:ba:88:3c:76:6b:31:
                    37:a5:a5:53:f5:62:0e:cc:c6:3b:28:63:97:20:a7:
                    83:f5:71:df:07:6e:e9:93:a7:a6:97:df:12:13:07:
                    f9:65:f4:ed:11:d4:0c:b4:2a:4c:b0:bb:47:3f:87:
                    07:cb:e1:2b:ad:bf:84:c8:08:63:23:5d:bd:87:a0:
                    50:8a:b0:a2:68:af:91:f9:ba:16:a3:44:7e:bf:35:
                    e6:91:fc:0a:75:86:9b:9c:75:88:7a:64:c8:fd:9b:
                    0e:15:d0:2a:ad:61:d6:15:7c:cf:73:d5:52:f9:27:
                    d0:9b:78:82:40:7d:a0:6d:b4:d4:21:a4:48:93:c5:
                    03:b4:51:29:b7:a6:10:16:41:97:41:34:af:04:28:
                    ea:1a:1b:ff:75:d7:70:e5:0a:72:5b:1b:fe:09:e2:
                    e5:a7:5f:28:76:fe:3c:80:b5:e6:bc:2a:bd:d4:d7:
                    08:64:fe:90:89:9a:dd:ef:c8:6a:c4:7e:a3:14:bb:
                    d1:ef:4e:09:8c:ae:88:e9:f1:2f:fd:80:5b:92:80:
                    5e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:90:A0:36:B5:76:DB:CF:A7:4B:30:52:4C:53:5D:71:13:6C:DB:73
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TJCgNrV228-nSzBSTFNdcRNs23M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:d7:1a:e2:cd:18:b0:8e:5a:c2:b3:b8:f3:d1:6f:a2:e0:14:
         74:ca:be:2b:9d:55:6c:2d:9b:fd:ea:5a:fa:83:a2:50:b7:9a:
         5f:94:f5:3a:63:79:cf:ee:dc:34:18:a0:90:87:cb:79:c2:b7:
         83:02:6c:86:45:7f:00:2f:00:47:84:9d:95:26:39:5a:b8:a6:
         06:08:27:65:04:86:e3:0d:28:0d:d1:01:6a:b3:e4:9a:4a:3f:
         71:c4:85:9b:14:82:55:39:e3:9d:e5:a2:a4:50:2e:f5:67:e9:
         41:69:bb:da:e0:e3:10:a1:50:38:3f:32:96:7f:fe:ed:31:97:
         f7:98:4d:30:18:ff:f1:3a:f1:55:94:7b:dc:f7:d6:f7:ad:62:
         5c:c1:74:94:45:3a:a7:66:9e:e2:ca:ad:b7:2c:17:0c:98:7c:
         45:87:aa:17:4f:8d:9a:f0:c3:c5:b6:ed:9f:f4:58:97:86:e2:
         0c:a4:51:70:e0:72:5c:da:d7:9a:6f:01:2e:0e:1c:71:5c:fe:
         8a:00:33:45:1a:5e:f2:3c:f9:3c:f8:f9:15:02:1b:21:68:41:
         38:e5:92:71:bf:82:3a:67:56:f2:10:ef:6a:74:39:57:02:fb:
         b6:24:58:73:84:7f:ce:c1:75:2c:ce:b9:f6:db:a4:5c:c9:a6:
         39:89:cf:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----