Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TUXw-tMDA7h6OG1-mpa5W5ndnzw.roa
File:                     TUXw-tMDA7h6OG1-mpa5W5ndnzw.roa (raw, json)
Hash identifier:          arTjMnNsm4gpesVkGMvhf8s0snv1EpfuKuPYuXPXjBY=
Subject key identifier:   4D:45:F0:FA:D3:03:03:B8:7A:38:6D:7E:9A:96:B9:5B:99:DD:9F:3C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       188F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TUXw-tMDA7h6OG1-mpa5W5ndnzw.roa
Signing time:             Sun 07 Feb 2021 12:30:31 +0000
ROA not before:           Sun 07 Feb 2021 12:30:31 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        211.76.124.0/25 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6287 (0x188f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:30:31 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4D45F0FAD30303B87A386D7E9A96B95B99DD9F3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:90:0c:2c:ef:89:e4:00:3d:c7:0c:ac:75:99:
                    2b:03:06:b0:96:38:f0:86:ff:de:5a:14:70:a4:6f:
                    22:ee:4f:b9:1c:81:36:cd:2b:e2:20:6c:69:27:7a:
                    fe:45:ff:cd:4f:2f:56:c2:f3:56:1a:41:df:3d:cc:
                    42:8f:4b:e0:d3:b2:c1:30:c3:bc:5c:c9:b0:7e:f3:
                    9c:e2:4f:fa:10:07:96:f6:9e:dd:47:76:83:e7:55:
                    b7:1c:a3:6f:d7:ae:c9:9e:63:bb:1b:4a:7b:aa:f6:
                    d3:63:6b:9a:05:43:b1:8e:22:52:27:ed:99:72:b5:
                    2c:c4:2a:f1:95:20:8c:a6:f0:62:c7:b5:c5:81:57:
                    d4:e2:1d:5e:a4:b4:16:99:13:7e:3e:f0:b0:e3:72:
                    89:31:5e:af:53:e4:2c:f3:ae:a6:98:34:37:ab:84:
                    f6:b3:c8:71:b9:16:1e:f1:e2:ea:f4:e2:4a:da:1b:
                    a2:80:d2:d7:34:86:92:04:3e:01:cd:97:ec:3b:7a:
                    03:17:21:c1:fb:f0:bf:72:83:44:c1:47:e2:cb:8a:
                    8c:4b:1d:69:71:30:1a:e4:e3:d4:ec:68:30:cb:38:
                    74:e8:7b:09:ba:f6:81:49:09:24:a7:1c:37:2a:10:
                    9a:35:2a:d8:36:1e:bf:8c:fb:0f:fd:ce:bf:04:4a:
                    10:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:45:F0:FA:D3:03:03:B8:7A:38:6D:7E:9A:96:B9:5B:99:DD:9F:3C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TUXw-tMDA7h6OG1-mpa5W5ndnzw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.124.0/25

    Signature Algorithm: sha256WithRSAEncryption
         61:b9:ee:28:3e:c0:70:3d:3b:17:7e:de:81:e9:35:ab:69:ef:
         13:57:1d:79:82:9b:50:ec:9d:99:63:32:2d:00:a5:0e:dd:b3:
         97:4e:dd:10:36:b9:e8:d7:fc:d0:83:be:89:7e:23:fd:7a:b4:
         f2:f6:97:ee:95:c2:f8:5d:13:c6:e5:9d:f3:de:c2:47:9f:b3:
         ea:8a:9d:8b:13:a4:ce:17:22:e2:c9:ad:44:41:e8:91:a8:02:
         91:3a:22:f4:47:52:c2:88:12:ee:46:42:57:38:1a:83:4d:3a:
         58:4a:f3:ac:64:4e:49:7d:c8:2f:1a:e8:a9:8c:d1:6b:0b:eb:
         55:e3:94:30:1d:2d:f6:74:d0:6c:3f:c4:f8:68:9e:a2:f1:ff:
         2d:60:ae:0d:a9:d4:6a:17:f1:c3:d6:a3:8f:b3:88:05:c2:d0:
         58:ee:26:76:15:95:92:ba:44:9a:c6:76:1f:7e:2f:03:43:e9:
         15:c1:68:b7:56:e6:d4:b1:fd:aa:7b:b4:11:62:0b:9e:0b:e9:
         b9:e3:a5:02:ec:4f:fb:c2:d1:fa:e1:c9:78:08:1b:22:a1:c0:
         f6:74:af:6f:f2:38:fb:4f:86:cc:24:ed:11:2a:c0:ab:ee:bb:
         b1:0f:03:f8:bf:9a:c6:27:7b:0e:fc:08:3f:4b:0e:1b:f2:66:
         87:72:4c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----