Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UR9FVhm8x1kmnCFU2I2Mdi_oj9c.roa
File:                     UR9FVhm8x1kmnCFU2I2Mdi_oj9c.roa (raw, json)
Hash identifier:          J6FJItFwWGHJmffPgvf/DMB3eLjfU4Qty2XaooX7CMI=
Subject key identifier:   51:1F:45:56:19:BC:C7:59:26:9C:21:54:D8:8D:8C:76:2F:E8:8F:D7
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D26
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UR9FVhm8x1kmnCFU2I2Mdi_oj9c.roa
Signing time:             Tue 29 Sep 2020 09:54:15 +0000
ROA not before:           Tue 29 Sep 2020 09:54:15 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.8.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3366 (0xd26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:15 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=511F455619BCC759269C2154D88D8C762FE88FD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:33:fe:04:31:53:28:d7:d4:6e:b3:b7:77:1f:
                    ed:6b:38:03:1b:ef:57:33:e8:8a:9d:32:6c:93:6c:
                    3e:89:b7:d9:e5:0a:bc:1a:d2:6b:9c:73:51:8b:ad:
                    89:b9:c2:21:0b:a0:f9:6e:62:22:b0:d3:d3:ac:cd:
                    5a:ec:1d:86:5e:bf:7c:8b:ab:61:a7:bd:8b:0c:81:
                    47:64:1f:a6:d2:cd:c1:3f:49:ef:ad:f8:d0:f7:fb:
                    ee:b4:84:5a:91:78:b2:28:93:74:95:17:75:f7:ac:
                    5e:47:12:b8:3a:d1:7d:86:52:0f:db:7f:ee:a8:ea:
                    a2:f8:26:4d:1b:b3:c7:f9:01:27:d3:17:aa:8e:28:
                    f9:32:34:7a:6b:bb:08:03:e1:68:60:46:87:2b:8c:
                    96:4c:e4:a2:a5:e9:98:58:2c:1e:52:ac:a2:c4:7b:
                    ad:c6:3c:e7:43:89:71:4c:e0:bd:54:52:b9:3f:9b:
                    58:89:ba:ad:dc:ea:59:14:97:37:88:c5:ba:c1:da:
                    a0:b1:9a:af:7e:dc:5d:36:8d:e4:1c:db:8d:77:28:
                    94:47:b1:31:6b:44:97:3a:f2:44:e5:33:17:f3:2f:
                    24:05:7e:9c:a5:19:eb:78:5e:6e:fc:32:0d:15:db:
                    e9:4c:45:83:c3:c9:71:aa:63:6c:19:8c:c6:29:2b:
                    1a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1F:45:56:19:BC:C7:59:26:9C:21:54:D8:8D:8C:76:2F:E8:8F:D7
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UR9FVhm8x1kmnCFU2I2Mdi_oj9c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:52:be:4a:ec:34:bd:9e:18:f9:9e:5f:29:0a:50:72:94:b0:
         30:16:d4:09:7f:31:7f:11:e4:a2:d0:b9:6b:4b:c7:15:ff:ab:
         6f:5c:c1:86:f6:ed:38:b1:b8:6a:56:8e:b7:82:62:ba:b4:20:
         0d:fe:5b:95:53:78:90:13:dd:70:f5:db:2b:ba:55:83:ed:f2:
         c7:1b:f7:47:92:8c:eb:0c:1b:01:de:8a:0a:32:fa:d1:4c:52:
         4c:5e:ea:bf:f7:9d:fe:a0:1b:ab:ee:b9:a6:2c:b0:97:56:06:
         5c:7a:76:9c:71:0c:ed:5f:e1:f2:79:bb:a9:1e:ee:ae:81:1b:
         58:f9:52:94:1b:30:ec:60:e7:e8:57:bc:1c:90:73:49:97:ac:
         c2:57:14:a7:df:b0:01:f2:25:e6:1b:5c:43:59:26:f5:ce:61:
         48:49:15:1d:db:01:0e:df:48:be:6a:51:d7:fa:1d:58:48:14:
         af:cc:01:5f:6f:68:9b:11:51:08:12:bb:44:7d:57:2f:7a:5d:
         fa:04:cd:9d:15:ab:34:a4:92:a5:05:16:1c:41:25:23:e0:21:
         c8:d9:7c:52:f0:ab:6d:ac:5f:b9:ac:a2:6c:00:13:0b:26:18:
         1e:be:71:6b:db:fd:db:a8:1d:a7:33:58:89:14:27:59:9b:4b:
         de:23:e3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----