Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U4K1W_sG0gJ3BPQZMUNeCVaF9us.roa
File:                     U4K1W_sG0gJ3BPQZMUNeCVaF9us.roa (raw, json)
Hash identifier:          QHbNDCdcer/4Qzmj266w8BBCUK8rmWOoy/wvzxkCRxs=
Subject key identifier:   53:82:B5:5B:FB:06:D2:02:77:04:F4:19:31:43:5E:09:56:85:F6:EB
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E96
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U4K1W_sG0gJ3BPQZMUNeCVaF9us.roa
Signing time:             Tue 29 Sep 2020 09:55:55 +0000
ROA not before:           Tue 29 Sep 2020 09:55:55 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.193.32.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3734 (0xe96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:55 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5382B55BFB06D2027704F41931435E095685F6EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b6:62:13:9d:21:32:46:96:b1:e3:63:dc:12:
                    9e:fd:f2:c2:6a:d0:0b:e1:47:be:f8:76:e3:19:e7:
                    05:70:02:85:d4:b7:4c:24:2f:ab:c0:e8:36:a5:e1:
                    d7:af:66:98:32:e5:64:1f:f5:28:91:9d:f3:54:ba:
                    35:77:18:28:87:41:62:2f:0e:01:9e:ba:33:a5:05:
                    7d:5f:5e:c8:58:93:64:13:c2:de:b1:c6:1d:68:11:
                    54:34:36:dc:5d:10:4c:7f:46:3a:23:64:5a:ef:c5:
                    0f:3b:33:55:93:5e:76:30:45:ba:29:04:85:c9:3d:
                    f7:b4:a9:d9:ab:d7:0c:a4:48:a8:81:dd:62:6b:c0:
                    31:ec:17:a6:57:f7:60:d7:9f:7c:a4:55:39:67:d6:
                    ff:c2:d1:a3:6b:4d:44:46:be:ef:e9:b1:4a:b9:1d:
                    56:42:c8:b6:38:9c:ae:7b:9b:2d:58:ec:c7:d8:35:
                    15:df:a3:8c:1c:69:24:14:07:c0:fb:a0:4f:f5:9b:
                    d3:25:4f:b7:14:cf:2e:93:7e:e7:4a:fa:f5:ae:84:
                    a6:0f:ff:68:8a:2e:18:b1:1f:a2:0d:1a:25:8a:33:
                    1b:15:00:99:cc:f4:fe:67:10:10:80:18:57:c8:88:
                    e0:6a:df:d8:e7:c5:57:b4:d2:48:88:83:8c:eb:bd:
                    3e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:82:B5:5B:FB:06:D2:02:77:04:F4:19:31:43:5E:09:56:85:F6:EB
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U4K1W_sG0gJ3BPQZMUNeCVaF9us.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ac:75:47:1a:0b:ef:b0:74:4a:8d:3f:ef:f8:9a:06:14:ce:a7:
         0b:5b:8c:70:aa:c6:c0:9f:a3:ce:95:d8:07:c2:f8:4e:4c:2e:
         43:8b:70:c9:98:5b:fa:99:44:79:ab:ac:72:75:42:2a:63:67:
         73:9c:5b:d4:11:34:5d:e7:1f:c8:88:b5:4e:3a:c2:1c:16:fe:
         f2:e1:2a:98:e2:a7:c0:31:16:c8:c3:5b:c9:68:5f:5f:a8:a0:
         47:6b:58:b4:80:a3:e1:a8:0a:bc:b2:fc:92:b1:85:d6:f4:8c:
         58:73:40:2e:38:fb:6a:e3:4e:ec:d6:b4:31:85:45:26:5a:16:
         c1:bb:c4:92:46:ee:d9:68:e5:21:8c:ca:95:4a:3e:bc:89:0c:
         2f:6d:4f:62:5a:f9:54:11:91:61:4e:76:da:7f:51:97:1d:bc:
         f9:3e:e1:6e:4c:87:2b:fd:28:6b:fc:e0:12:2b:37:f6:2e:46:
         6f:3f:19:04:71:85:da:48:3e:5a:32:4d:76:7e:cf:9c:77:df:
         c8:2e:6b:b3:02:0e:f7:fb:28:d5:cb:2a:58:81:57:13:17:cd:
         d5:9f:75:fe:f9:09:92:69:19:6c:c7:bc:0a:91:51:5c:f0:68:
         52:17:7e:99:b6:e8:de:dd:67:2d:75:3e:d4:0a:4e:de:01:2b:
         3f:6d:8c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----