Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VK7lmklkD-lyykBdK09sMzzT9mg.roa
File:                     VK7lmklkD-lyykBdK09sMzzT9mg.roa (raw, json)
Hash identifier:          QY/F8dxWX2Ca+44aC5IC+X+g0vAM1SJke5hiVEVi3tg=
Subject key identifier:   54:AE:E5:9A:49:64:0F:E9:72:CA:40:5D:2B:4F:6C:33:3C:D3:F6:68
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0EE3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VK7lmklkD-lyykBdK09sMzzT9mg.roa
Signing time:             Tue 29 Sep 2020 09:56:15 +0000
ROA not before:           Tue 29 Sep 2020 09:56:15 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.233.240.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3811 (0xee3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:15 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=54AEE59A49640FE972CA405D2B4F6C333CD3F668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7a:74:cb:d4:cb:08:74:4d:b4:85:69:00:cd:
                    6c:75:56:27:6c:94:b5:8c:06:fc:43:42:7c:73:9a:
                    40:62:7a:4e:a7:b5:c2:25:47:c3:55:5f:5e:ac:87:
                    1c:69:8d:a2:30:b3:c2:e5:e8:56:c7:52:fb:1e:ad:
                    4e:05:db:b9:80:a0:25:f7:bb:26:dd:6d:41:c8:cb:
                    b8:57:21:3c:6d:75:53:2a:d2:d3:61:16:32:e8:a8:
                    b0:0c:96:6d:2d:85:39:85:14:a5:f4:c0:b8:8d:52:
                    e3:45:e5:f3:87:ea:19:2f:27:0f:de:3b:04:ac:90:
                    7a:75:b3:b6:5b:29:b1:88:1c:c5:d4:bb:09:80:42:
                    78:bb:4b:fe:4b:46:18:6e:0e:45:05:43:94:73:23:
                    17:44:a4:ac:fe:4f:cc:84:3b:53:ff:1a:43:4e:65:
                    55:db:c5:ef:2d:73:13:c9:e9:4b:19:01:bd:63:ff:
                    88:c6:ab:60:92:1d:04:8c:92:4e:84:21:6f:52:a2:
                    24:d2:6e:f9:22:c6:62:4b:36:35:d5:17:86:ba:1b:
                    e5:c8:83:ff:80:05:27:22:95:37:41:6c:67:02:d8:
                    99:a5:94:46:97:18:46:1a:8d:c3:1a:c3:8e:89:dc:
                    a2:37:d0:45:e4:8a:2a:90:5a:2e:cd:38:d1:21:63:
                    5a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AE:E5:9A:49:64:0F:E9:72:CA:40:5D:2B:4F:6C:33:3C:D3:F6:68
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VK7lmklkD-lyykBdK09sMzzT9mg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:06:a9:bf:dc:23:5f:01:95:39:db:08:47:3a:ec:56:2a:0a:
         12:d2:2b:e1:21:e5:5e:ec:0a:b7:d9:e2:0a:3d:94:a6:0c:b4:
         47:6d:9f:7f:c9:d4:79:30:b9:3d:d5:0e:90:ea:50:92:9f:ae:
         27:84:6f:9e:0c:8a:0b:a4:cb:a2:fe:e9:e6:fc:e5:42:c6:24:
         30:ac:12:00:08:b1:d6:81:20:0e:91:c5:99:ea:35:e2:aa:6c:
         f3:2e:c2:e3:89:00:e7:3c:49:6e:89:78:7c:ed:8d:39:ae:4e:
         96:2b:2d:7e:e7:da:06:e1:d5:86:1b:cd:33:31:c7:95:99:b8:
         d7:07:41:c7:29:9e:f3:01:2d:47:3d:f2:15:ee:9e:e3:5c:8d:
         f3:86:fb:ee:76:20:56:20:9c:6a:2c:75:0f:4e:81:ca:44:fd:
         26:6a:c5:31:40:97:cf:2a:8d:c1:db:0c:f9:52:a6:2c:ce:24:
         4c:ea:c8:85:0e:dc:ce:47:5e:90:df:c6:77:1b:4e:79:66:a3:
         4f:ee:25:20:15:26:d9:2a:a5:ef:75:6b:eb:d6:d6:a1:e3:32:
         79:45:fc:63:9a:6d:a7:c3:f8:dd:8f:28:54:cd:05:b2:8b:76:
         ed:ed:64:0a:8c:00:9e:52:83:51:2b:61:79:b0:3d:e9:30:fc:
         82:b9:ae:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----