Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TMBWKiqC6sxz5OT-OEvqLElWDIM.roa
File:                     TMBWKiqC6sxz5OT-OEvqLElWDIM.roa (raw, json)
Hash identifier:          Lp4oXFaLOGoMVj/Qb8M2zn2+9So8PLtwHIu3H80ip7E=
Subject key identifier:   4C:C0:56:2A:2A:82:EA:CC:73:E4:E4:FE:38:4B:EA:2C:49:56:0C:83
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F0A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TMBWKiqC6sxz5OT-OEvqLElWDIM.roa
Signing time:             Tue 29 Sep 2020 09:56:25 +0000
ROA not before:           Tue 29 Sep 2020 09:56:25 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        123.193.160.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3850 (0xf0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:25 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4CC0562A2A82EACC73E4E4FE384BEA2C49560C83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:80:93:ec:fb:7f:c8:8f:93:19:e9:37:e6:fd:
                    ab:0f:62:1e:cc:1a:14:70:77:7c:6f:42:8a:12:46:
                    ba:d4:4d:63:c1:c1:c2:4f:4a:ed:e2:ed:cb:2a:57:
                    df:ab:b9:e6:31:8c:8b:55:21:4e:09:d8:04:7c:b8:
                    a2:c2:31:55:87:bb:8c:e2:8c:b3:f4:57:37:48:3d:
                    86:b0:e1:c3:5f:74:3f:2f:9e:58:a7:bf:1c:50:33:
                    bb:7c:73:4f:52:18:4b:62:ec:0b:5f:92:c2:19:af:
                    2b:54:1d:8d:a3:6b:c8:d0:4b:08:82:8a:1b:c1:cd:
                    e8:aa:1f:b6:48:67:52:3c:ad:11:92:c7:24:fd:14:
                    43:f8:fc:90:ed:f6:ab:26:a1:e4:a1:df:b7:c7:c7:
                    c6:9f:c2:de:bf:88:9b:7b:53:77:9c:fe:e9:31:c4:
                    6f:55:2e:c8:a2:f1:15:e0:ba:14:9c:eb:e3:6a:cb:
                    83:28:72:b5:66:af:b2:f8:a7:8c:15:1d:99:76:42:
                    ff:9f:5b:a0:c6:6a:37:a1:a9:ce:12:74:7b:ed:92:
                    91:b6:f8:81:f7:5e:4f:22:1f:bc:06:92:4c:3a:a9:
                    ff:ee:f2:0b:fc:a5:d4:49:10:23:3a:4e:f4:66:9d:
                    1a:ca:fe:89:ec:3c:d3:55:c5:62:87:8e:f4:1f:23:
                    0f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C0:56:2A:2A:82:EA:CC:73:E4:E4:FE:38:4B:EA:2C:49:56:0C:83
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TMBWKiqC6sxz5OT-OEvqLElWDIM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         05:57:b2:cd:fe:fb:67:76:35:19:6a:0d:e6:5f:0c:8c:17:03:
         e2:ca:0c:2c:45:8e:c6:e1:19:f5:ac:e4:22:41:14:2f:06:67:
         16:9a:34:3a:78:90:fb:52:21:55:d4:be:1d:15:f7:0e:c7:e9:
         16:ab:5a:b7:af:28:19:e7:94:1b:30:66:8a:ba:44:52:9f:70:
         68:2d:7c:a2:55:93:53:50:5c:51:1e:91:77:6a:02:e4:b2:c2:
         7b:11:12:25:8e:e2:2b:64:75:d4:51:8a:0b:f9:d7:37:34:49:
         74:6c:25:93:84:11:2f:c9:38:19:95:77:c8:2b:2e:60:76:4b:
         ae:43:51:4c:25:35:cd:5a:15:e4:0e:fc:10:17:85:e3:c7:e0:
         ae:9b:97:d5:68:14:e1:54:fe:f5:49:36:7c:33:d0:81:51:c7:
         d2:90:64:f5:ec:a4:d1:07:39:3e:34:b7:3d:d9:7f:a5:9e:b0:
         fd:e2:78:de:2a:24:89:f5:33:0a:af:25:b6:cd:46:0a:b2:26:
         79:03:34:b0:29:f3:94:03:82:88:25:81:ea:0e:6f:41:15:be:
         f8:27:3a:c2:d6:da:b0:6a:f8:54:65:a7:7c:ba:73:42:ed:e3:
         bc:1e:b1:28:c3:f2:c5:e6:72:2c:9c:9e:fd:ca:46:93:23:65:
         08:91:26:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----