Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VMzhT1BZ4BcTtsOXTTOzlmerMZQ.roa
File:                     VMzhT1BZ4BcTtsOXTTOzlmerMZQ.roa (raw, json)
Hash identifier:          61+onlG/MyeH32t4Key3Z1Xuq9LII+ilja0qun8KH6c=
Subject key identifier:   54:CC:E1:4F:50:59:E0:17:13:B6:C3:97:4D:33:B3:96:67:AB:31:94
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0CF1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VMzhT1BZ4BcTtsOXTTOzlmerMZQ.roa
Signing time:             Tue 29 Sep 2020 09:53:59 +0000
ROA not before:           Tue 29 Sep 2020 09:53:59 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.193.223.128/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3313 (0xcf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:53:59 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=54CCE14F5059E01713B6C3974D33B39667AB3194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a5:05:f0:06:a5:06:85:f8:bb:42:59:65:1c:
                    f3:de:a0:2e:1e:a3:82:ec:b4:d6:8d:68:29:c0:1a:
                    fa:66:e8:cb:b6:db:96:25:43:96:0c:8f:de:d1:ea:
                    e0:72:ce:50:2a:34:0c:27:36:ab:d5:04:cb:c5:d8:
                    9a:75:df:22:82:36:c8:3b:35:e3:16:55:02:71:c8:
                    58:96:bd:58:8c:b8:89:da:6a:ed:ac:ac:2d:0a:88:
                    7a:a3:77:a1:b5:74:7c:b6:01:2e:d2:c4:e8:12:f4:
                    34:dd:4d:0a:18:eb:f6:66:3b:c1:40:52:90:44:06:
                    e0:e9:be:4a:87:47:0d:88:57:0d:05:07:aa:a3:02:
                    27:d5:4f:0c:22:fa:42:af:a2:34:87:22:0a:f5:7b:
                    8f:2a:9c:da:09:fd:4f:5a:78:19:32:3a:db:c8:56:
                    75:aa:b8:04:fe:89:14:0f:2e:f3:65:ba:f6:79:50:
                    1f:81:43:5a:cc:5b:db:8d:4d:6c:8b:75:70:0d:2d:
                    a9:6c:b2:fd:58:f0:e9:e6:83:f5:04:19:14:9f:90:
                    31:77:a3:b6:88:f4:85:0f:a4:29:b2:da:bf:f8:98:
                    e3:36:c3:74:9f:bf:ab:99:9a:59:bd:88:5d:dd:6e:
                    d8:a5:02:83:fd:b5:a1:8c:8f:e1:a6:be:9f:bd:53:
                    d0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CC:E1:4F:50:59:E0:17:13:B6:C3:97:4D:33:B3:96:67:AB:31:94
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VMzhT1BZ4BcTtsOXTTOzlmerMZQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.223.128/26

    Signature Algorithm: sha256WithRSAEncryption
         63:a4:02:d8:de:17:4b:0f:bd:0b:b6:86:80:36:27:7f:ee:a6:
         d6:bb:ab:f1:0b:7d:08:2b:ae:8b:83:ef:e5:15:ac:ac:a2:73:
         93:32:74:6d:d9:03:3d:65:4e:c6:8a:73:59:6f:76:a2:79:81:
         13:d7:ad:61:ee:da:e8:66:65:9a:11:fd:74:5b:d7:dc:27:dc:
         4f:ff:de:f0:83:c1:38:65:e9:8a:36:68:91:0c:ab:c7:08:5f:
         61:a5:00:ac:f8:86:7e:b4:56:33:e8:08:b6:0d:5c:eb:85:ab:
         52:06:f8:f8:2c:9e:e0:11:4c:38:86:b2:ed:9a:27:fa:31:df:
         57:25:bc:87:f8:c0:b2:cf:8d:ab:f4:64:fa:1b:2f:75:87:fd:
         84:51:66:88:bf:62:b9:eb:a7:9e:f1:6e:a0:68:fc:21:fc:86:
         5a:af:0e:72:4a:d7:82:e3:15:b9:7b:80:85:86:62:e2:92:10:
         61:70:41:e5:81:ac:fd:7d:71:f5:a3:10:b6:52:9f:00:2c:ed:
         31:9e:49:5a:18:c0:38:52:51:95:20:8e:a3:f0:c2:f7:98:1d:
         11:b1:fb:c5:9a:09:94:de:fa:9a:a0:ad:b8:81:7c:e7:b5:bb:
         f9:7c:e8:92:94:a8:3b:61:0c:18:c3:3a:da:fb:30:ff:10:4a:
         10:a5:66:c9
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICDPEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTUzNTlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDU0Q0NFMTRGNTA1OUUw
MTcxM0I2QzM5NzREMzNCMzk2NjdBQjMxOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUpQXwBqUGhfi7QlllHPPeoC4eo4LstNaNaCnAGvpm6Mu225Yl
Q5YMj97R6uByzlAqNAwnNqvVBMvF2Jp13yKCNsg7NeMWVQJxyFiWvViMuInaau2s
rC0KiHqjd6G1dHy2AS7SxOgS9DTdTQoY6/ZmO8FAUpBEBuDpvkqHRw2IVw0FB6qj
AifVTwwi+kKvojSHIgr1e48qnNoJ/U9aeBkyOtvIVnWquAT+iRQPLvNluvZ5UB+B
Q1rMW9uNTWyLdXANLalssv1Y8Onmg/UEGRSfkDF3o7aI9IUPpCmy2r/4mOM2w3Sf
v6uZmlm9iF3dbtilAoP9taGMj+Gmvp+9U9DlAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUVMzhT1BZ4BcTtsOXTTOzlmerMZQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1ZNemhUMUJaNEJjVHRzT1hU
VE96bG1lck1aUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQZ7
wd+AMA0GCSqGSIb3DQEBCwUAA4IBAQBjpALY3hdLD70LtoaANid/7qbWu6vxC30I
K66Lg+/lFaysonOTMnRt2QM9ZU7GinNZb3aieYET161h7troZmWaEf10W9fcJ9xP
/97wg8E4ZemKNmiRDKvHCF9hpQCs+IZ+tFYz6Ai2DVzrhatSBvj4LJ7gEUw4hrLt
mif6Md9XJbyH+MCyz42r9GT6Gy91h/2EUWaIv2K566ee8W6gaPwh/IZarw5ySteC
4xW5e4CFhmLikhBhcEHlgaz9fXH1oxC2Up8ALO0xnklaGMA4UlGVII6j8ML3mB0R
sfvFmgmU3vqaoK24gXzntbv5fOiSlKg7YQwYwzra+zD/EEoQpWbJ
-----END CERTIFICATE-----