Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VOHD1t0_f-QlzNUN_L_4wxAXBBI.roa
File:                     VOHD1t0_f-QlzNUN_L_4wxAXBBI.roa (raw, json)
Hash identifier:          FICH1Hb5TzKLe3Odk/LQWDsO2/RKyRLXmCG5Cq/U0WM=
Subject key identifier:   54:E1:C3:D6:DD:3F:7F:E4:25:CC:D5:0D:FC:BF:F8:C3:10:17:04:12
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E82
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VOHD1t0_f-QlzNUN_L_4wxAXBBI.roa
Signing time:             Tue 29 Sep 2020 09:55:49 +0000
ROA not before:           Tue 29 Sep 2020 09:55:49 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        123.194.160.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3714 (0xe82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:49 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=54E1C3D6DD3F7FE425CCD50DFCBFF8C310170412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:63:c7:11:21:1b:3c:03:66:06:db:a7:e9:aa:
                    d6:70:84:27:27:f3:1c:00:c9:33:2a:1f:c4:29:9f:
                    40:c6:6e:b9:fb:ab:bb:78:7b:8a:cf:19:ef:c5:ec:
                    f9:65:d4:51:3e:ba:71:14:87:2f:33:c3:36:33:cf:
                    cf:f8:21:a3:d6:9d:a5:f1:f4:df:ac:02:2e:78:d6:
                    09:a8:0d:01:5f:dd:e8:dc:49:6e:46:72:07:b5:b1:
                    8b:d0:22:47:7c:3a:bc:79:aa:52:12:cb:a3:a4:75:
                    50:6d:40:ff:9f:3a:56:ac:60:12:2f:c1:aa:08:41:
                    d2:c5:74:48:49:55:d5:30:1c:bf:9c:aa:af:7f:26:
                    6f:56:8b:18:3f:05:b1:1c:f6:1b:cb:47:6f:ca:4c:
                    f1:2b:0c:ba:96:8b:7c:f8:f3:c9:94:dc:70:ae:e9:
                    7e:99:3c:3b:5e:d9:04:85:0d:06:0c:c8:e9:e5:ea:
                    55:6a:43:42:63:b2:51:33:e9:75:62:86:44:54:c1:
                    9a:2f:07:16:ab:0f:6a:b1:4b:c1:0d:e8:5c:dc:c5:
                    fc:37:fa:3e:f2:d0:83:cf:98:03:e4:27:ca:3f:a1:
                    f4:44:31:47:b8:43:f1:cf:1b:9c:11:7f:5e:d5:af:
                    7f:62:ed:84:fa:86:a2:27:9d:66:75:56:35:01:39:
                    47:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E1:C3:D6:DD:3F:7F:E4:25:CC:D5:0D:FC:BF:F8:C3:10:17:04:12
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VOHD1t0_f-QlzNUN_L_4wxAXBBI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3e:b0:5b:69:9b:e1:ac:bf:38:92:ed:cc:29:4f:a5:13:b1:97:
         6f:56:35:04:f9:cc:c9:8f:06:6c:f7:94:b6:b7:c8:16:ef:76:
         75:bf:7e:8a:0f:a3:7f:15:6f:ea:bb:d1:a6:15:6d:97:ff:3a:
         93:89:9b:22:c7:6b:5c:88:6a:48:5b:cd:3d:3b:d9:db:c0:99:
         74:dd:72:b8:04:2a:2c:55:c3:2d:58:b0:a9:62:10:c1:92:12:
         95:f9:9d:34:d2:65:2a:f8:7f:5f:34:59:91:2e:62:e9:06:1c:
         5a:7b:ce:26:b2:1c:ea:b6:9d:3e:18:86:a7:30:03:77:07:ff:
         8a:14:d8:17:08:88:e3:4b:39:7d:a4:e3:6c:a0:0e:8a:b3:d4:
         94:d4:50:86:41:c3:2c:93:38:d2:b7:20:ba:49:18:50:05:97:
         09:9e:73:94:2b:5f:3d:33:50:37:ef:67:91:7a:bb:99:62:a1:
         9f:2c:b5:12:41:a6:46:85:3a:ab:9f:75:e0:e1:76:9d:69:3b:
         fd:44:3b:84:45:76:ef:93:bf:9f:90:58:9b:0c:a6:73:cb:57:
         10:0a:69:27:cf:b4:c9:f8:b0:4f:56:cf:19:fc:18:1e:28:f7:
         3f:22:0e:b0:69:e5:b1:0a:22:7f:dd:d5:86:c9:2b:6a:14:01:
         f3:23:33:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----