Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WOPHywUZ-umWDDzHyqv7uj5bseg.roa
File:                     WOPHywUZ-umWDDzHyqv7uj5bseg.roa (raw, json)
Hash identifier:          E3Z3JFqQ5TVM8Wo8q2h6NQJ1Axru+WWCxjeJKaupxSk=
Subject key identifier:   58:E3:C7:CB:05:19:FA:E9:96:0C:3C:C7:CA:AB:FB:BA:3E:5B:B1:E8
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E22
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WOPHywUZ-umWDDzHyqv7uj5bseg.roa
Signing time:             Tue 29 Sep 2020 09:55:22 +0000
ROA not before:           Tue 29 Sep 2020 09:55:22 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.193.72.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3618 (0xe22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:22 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=58E3C7CB0519FAE9960C3CC7CAABFBBA3E5BB1E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d9:a6:4e:56:41:07:e2:fe:30:fe:ee:d7:13:
                    de:6d:e7:8e:5b:22:86:50:dd:d9:b9:45:03:8c:7d:
                    ac:1a:f9:4b:40:b0:5f:56:b8:82:03:21:2c:37:26:
                    a3:6c:0d:8b:09:03:8b:3f:c2:76:45:4b:47:07:fc:
                    af:13:7e:68:3c:fe:3c:2d:7b:23:90:49:3e:56:51:
                    cb:26:a2:71:1a:5b:a4:2d:98:59:ae:26:eb:7c:2a:
                    93:5b:8e:65:00:4c:ed:78:2b:10:4d:35:85:a0:65:
                    ff:21:cd:59:5d:ba:3d:6a:24:c8:fe:1e:57:c3:b2:
                    9b:9c:98:0c:bd:3c:d4:27:e3:94:cf:a7:61:7e:74:
                    41:1b:5f:51:e0:23:27:1f:60:f3:36:34:42:23:89:
                    68:d7:3e:30:9b:81:e1:1f:60:90:51:4a:2f:9e:54:
                    0b:e6:49:a9:32:ff:cd:43:89:88:3c:12:99:ee:6c:
                    c0:31:91:39:a2:6f:73:f4:fa:29:92:c6:00:50:e0:
                    39:84:ff:35:75:c7:f5:25:d0:a5:44:84:96:f4:11:
                    f1:61:3d:e0:5d:de:ec:2d:8c:f9:24:92:89:9d:2e:
                    e0:bb:3a:af:50:42:dc:4c:10:25:ac:ec:ae:31:80:
                    a5:85:b5:ea:16:da:41:65:e5:0a:1a:fa:17:05:18:
                    e7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E3:C7:CB:05:19:FA:E9:96:0C:3C:C7:CA:AB:FB:BA:3E:5B:B1:E8
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WOPHywUZ-umWDDzHyqv7uj5bseg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3d:db:81:fe:fd:16:cb:80:3d:dd:1a:13:b2:a3:78:dc:48:53:
         7a:a5:92:61:87:30:50:33:16:56:4e:78:98:04:6b:12:16:96:
         9b:8b:c8:71:57:f6:e3:76:c2:9f:74:1c:6a:7f:55:87:64:7a:
         6f:95:ca:72:fc:f2:e1:e9:43:b9:e5:61:98:9a:0c:a3:7f:9b:
         1b:4b:7d:b2:e1:c9:4f:62:90:3d:97:fc:d6:03:ec:b9:c9:d5:
         73:a9:34:7a:d5:84:d3:1c:ac:22:89:dd:76:2e:5b:46:a6:9d:
         4e:2f:e5:e5:aa:92:e9:b9:db:3f:37:26:e4:9f:d9:50:79:98:
         a3:b0:24:21:87:b4:54:9e:07:37:89:9b:92:45:5e:1c:2c:52:
         90:cd:9b:59:e1:c9:8a:dd:d8:62:3d:d0:76:a1:58:17:4f:a2:
         75:59:15:b3:8d:97:3f:72:46:24:db:ac:0e:12:db:17:62:a1:
         df:5b:89:0b:27:7b:78:27:0a:9d:e0:0e:53:67:10:8c:ef:2c:
         d9:54:06:5e:c7:f1:c2:79:43:66:b3:d8:06:8c:bf:d0:77:81:
         4d:09:dc:11:a1:07:16:64:91:51:1b:aa:99:1f:8b:8e:d8:d1:
         b7:07:5d:2d:d6:46:b2:1b:b6:fd:67:dc:dc:ad:71:f2:75:8a:
         9f:59:d8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----