Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UeSK-vD-PY4eXLn30e0Rkj7H16U.roa
File:                     UeSK-vD-PY4eXLn30e0Rkj7H16U.roa (raw, json)
Hash identifier:          gmtcjJmTiHEQ3/bx+sDXOSK7llTwNkKbCcb2hfc2BlI=
Subject key identifier:   51:E4:8A:FA:F0:FE:3D:8E:1E:5C:B9:F7:D1:ED:11:92:3E:C7:D7:A5
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F0B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UeSK-vD-PY4eXLn30e0Rkj7H16U.roa
Signing time:             Tue 29 Sep 2020 09:56:25 +0000
ROA not before:           Tue 29 Sep 2020 09:56:25 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        123.193.192.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3851 (0xf0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:25 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=51E48AFAF0FE3D8E1E5CB9F7D1ED11923EC7D7A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:14:b8:52:40:2e:a3:0b:06:aa:7c:8a:57:ff:
                    06:f3:de:08:b5:f6:80:cc:2c:a9:47:84:3b:fa:21:
                    44:20:1d:a3:4a:24:d1:f3:a6:3e:bf:83:de:54:7f:
                    17:a8:0b:28:fb:4d:ee:9b:33:ff:8e:ea:8b:ff:1c:
                    fa:a9:56:76:24:fa:b3:03:f3:52:c1:8e:b4:ee:4a:
                    c9:6b:8c:8b:53:d6:2f:0d:b4:c2:80:8e:86:99:54:
                    82:37:15:aa:a9:e2:61:9e:bb:5f:28:bf:9b:a0:1b:
                    b8:35:7e:e4:b4:f9:e9:c6:16:33:54:1b:3e:35:f3:
                    12:e9:fc:89:ec:0f:bb:c7:9c:26:69:65:ef:ea:56:
                    d7:86:41:4f:12:36:65:44:f9:a2:ad:f9:da:59:4c:
                    3a:c6:a3:8f:c2:4b:04:4b:c1:18:f2:79:65:54:bf:
                    77:19:2e:4f:59:a8:28:24:96:c3:b8:4f:98:ca:75:
                    be:01:31:65:8f:1b:ec:de:f0:a8:8f:b0:41:14:a4:
                    99:fb:60:5d:f9:8b:b1:6a:1a:55:d3:62:1a:ec:b7:
                    e5:c5:9d:4a:3e:8a:86:b9:a8:fa:72:32:95:46:f0:
                    75:58:e6:a3:7f:9b:cf:36:7d:02:33:b3:bd:20:a6:
                    7a:de:c3:ac:e6:71:85:b2:6a:ea:ea:6f:31:ef:b3:
                    9a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E4:8A:FA:F0:FE:3D:8E:1E:5C:B9:F7:D1:ED:11:92:3E:C7:D7:A5
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UeSK-vD-PY4eXLn30e0Rkj7H16U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b2:19:8a:07:72:ff:58:61:87:8a:18:34:fe:1a:a9:b1:e1:91:
         f9:e8:95:72:28:84:46:e6:fa:1f:49:c2:ee:dd:47:7c:65:cc:
         ab:4b:54:23:e5:83:0f:49:ec:54:52:4d:ac:91:0d:32:f8:24:
         bd:15:0a:10:d6:8f:5e:1a:e0:cc:70:4d:1d:d8:64:ca:60:b5:
         f2:6b:7f:bf:f9:ac:c2:64:b7:48:4c:47:1d:ca:29:36:3e:a2:
         f6:d5:37:8a:64:f3:a6:bb:2e:71:ea:6f:ce:d2:17:65:99:14:
         d9:4e:ec:b8:69:63:21:37:68:74:13:e6:f4:7c:05:4f:5d:99:
         b7:4f:ee:7a:6b:ba:e8:cc:0d:2d:ac:91:97:95:30:b9:ab:80:
         6c:fb:59:e7:9f:f8:e3:ef:3e:d6:01:82:1e:6f:e0:67:89:0d:
         60:21:08:52:35:91:c7:83:0a:a3:7c:ea:3d:6b:1c:20:5d:42:
         d3:ff:47:76:0a:7b:4f:1b:a5:99:e9:58:be:57:af:7b:ed:52:
         28:ea:3e:ef:6e:53:52:b6:23:70:a2:47:ca:4e:17:8a:23:b8:
         81:1b:7b:b4:8d:a8:fc:d5:49:de:05:46:1b:e0:0c:6d:3f:97:
         cf:fa:c7:25:00:ff:8b:11:cc:d5:61:18:c0:3e:af:4d:b9:cf:
         72:6e:b9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----