Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XDowPZ-6gr2dCj3bWOaIICdGpC4.roa
File:                     XDowPZ-6gr2dCj3bWOaIICdGpC4.roa (raw, json)
Hash identifier:          IEMW4D9aquE0VbJwuQy3TauiWUkiqod2ek6+PlVGyd4=
Subject key identifier:   5C:3A:30:3D:9F:BA:82:BD:9D:0A:3D:DB:58:E6:88:20:27:46:A4:2E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1521
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XDowPZ-6gr2dCj3bWOaIICdGpC4.roa
Signing time:             Sun 07 Feb 2021 12:03:02 +0000
ROA not before:           Sun 07 Feb 2021 12:03:02 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.193.9.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5409 (0x1521)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:03:02 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5C3A303D9FBA82BD9D0A3DDB58E688202746A42E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:05:ca:7c:8c:52:83:9b:4e:2f:b7:6a:15:99:
                    64:71:b4:62:f2:f2:88:bb:e4:69:e8:74:c0:51:0e:
                    77:82:09:32:b3:2a:58:c1:d3:19:b7:b0:8a:c6:57:
                    62:1e:72:75:25:50:54:ae:2d:d5:fb:39:26:7b:c6:
                    1c:f4:b9:38:eb:96:99:55:54:ec:36:6c:48:c9:d9:
                    fa:73:8a:b6:33:cf:12:77:2b:60:c6:53:0d:83:df:
                    c8:5e:c0:0b:dd:07:96:9e:0d:d3:09:71:ee:b0:e5:
                    6c:09:fb:d3:dd:cf:ab:70:54:7d:b9:37:05:9b:9a:
                    95:e0:8e:ad:f4:85:4c:2c:35:94:a5:1b:c0:1d:08:
                    74:02:3e:68:c9:58:29:26:14:c9:3d:b4:41:ca:91:
                    ce:4b:03:5b:8c:99:a8:0b:a9:49:0e:1a:8d:29:d5:
                    6c:42:1e:78:78:86:84:8e:fb:57:ca:50:d3:00:e5:
                    a4:79:0a:8f:9d:c4:b5:e3:f7:79:be:30:7c:68:9c:
                    71:5d:0d:c3:13:8c:86:fb:eb:22:fe:54:02:84:a7:
                    2e:cf:3f:94:49:ed:ad:54:3f:a4:2f:13:91:c2:d9:
                    9a:24:10:72:95:23:0d:a7:4b:d3:67:91:83:af:82:
                    c9:97:d1:f2:32:33:b0:d4:9f:d1:d9:0b:92:d7:2f:
                    75:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:3A:30:3D:9F:BA:82:BD:9D:0A:3D:DB:58:E6:88:20:27:46:A4:2E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XDowPZ-6gr2dCj3bWOaIICdGpC4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:79:30:0c:9a:81:c9:4b:9f:d7:f0:60:3b:c4:2e:8d:41:e5:
         56:80:d0:69:61:68:17:7c:67:cd:28:4e:98:89:2b:24:10:2e:
         0f:00:66:6e:39:87:c4:3e:5a:67:b5:5e:ed:98:a8:42:7c:f5:
         3a:1a:99:f2:75:c8:40:e2:dd:ae:ad:3a:d3:a8:66:71:e4:ef:
         12:46:08:41:c1:f5:49:8f:45:cd:b9:55:a0:d6:08:30:c9:7c:
         a4:3c:82:32:76:38:bd:a6:84:be:aa:73:0d:59:fc:0c:4f:74:
         3a:9a:ae:12:6f:08:b4:cd:20:d1:79:91:8d:ae:53:3c:d8:d2:
         1e:b6:fd:ce:ee:a2:2e:4a:0c:2d:99:7f:4a:08:f5:86:25:38:
         d2:07:34:44:40:6d:30:3c:7a:5f:c6:d7:cd:bf:ef:d9:66:a1:
         db:ec:62:a4:5a:83:9f:bb:04:84:e2:08:01:3d:75:93:fd:1f:
         b4:d2:77:04:01:0e:ff:67:b0:ea:c0:e2:83:e9:79:8f:74:41:
         d6:5a:d9:d3:eb:e9:b9:44:ea:3d:84:b9:c0:89:ba:c5:59:1e:
         6d:fe:0b:7e:2e:04:6b:22:ce:25:61:ef:13:36:99:45:68:4a:
         01:b5:ec:52:a6:91:04:e8:54:f4:c6:f0:69:98:d8:17:75:9b:
         d9:b9:97:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----