Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XYfalTjUkOj8N3kHOPtdWe2c50E.roa
File:                     XYfalTjUkOj8N3kHOPtdWe2c50E.roa (raw, json)
Hash identifier:          ndok1rCXhJ9EpjzcNvJ36/hVklF0h2r/Xk1ZVIM01NA=
Subject key identifier:   5D:87:DA:95:38:D4:90:E8:FC:37:79:07:38:FB:5D:59:ED:9C:E7:41
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E8A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XYfalTjUkOj8N3kHOPtdWe2c50E.roa
Signing time:             Tue 29 Sep 2020 09:55:50 +0000
ROA not before:           Tue 29 Sep 2020 09:55:50 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.232.124.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3722 (0xe8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:50 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5D87DA9538D490E8FC37790738FB5D59ED9CE741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:90:d7:22:56:28:5a:b8:aa:d4:25:d0:7b:4e:
                    92:e0:84:0f:ed:e1:86:c7:03:ef:32:2c:b1:e6:b5:
                    b9:5d:3b:95:49:3a:46:af:06:16:e9:5e:9c:9a:9c:
                    d9:2a:20:c2:7e:6a:14:f9:f6:7e:d3:58:24:66:3a:
                    c6:d3:c9:07:0c:5d:e8:f8:36:9f:ca:5e:91:31:8c:
                    fb:0d:b6:94:b4:c3:2e:be:75:45:f5:eb:1f:2a:79:
                    83:76:9a:ec:1a:db:d4:44:b4:18:6d:de:7e:e0:d7:
                    cf:d3:65:4b:39:83:14:93:4e:4d:10:b4:98:fc:a2:
                    29:a1:8a:7f:29:55:4d:b4:6f:b6:28:05:67:04:45:
                    88:90:c2:20:bf:15:ac:bb:0c:26:28:3c:99:43:fd:
                    79:db:6a:b8:64:cb:b8:19:1f:a9:ad:06:1b:56:de:
                    c7:63:70:3c:5c:b0:a9:d5:44:38:88:46:8b:bc:33:
                    56:6f:d0:19:39:1e:dd:87:83:1c:b7:e1:0b:0b:3c:
                    c7:77:48:88:3a:9c:02:75:34:bd:4b:85:0a:1a:67:
                    4e:6e:2d:25:c7:64:8c:a8:d7:a3:44:8c:a8:0c:0f:
                    ed:af:aa:76:42:b2:1b:7c:d6:25:68:cb:95:d7:3b:
                    d9:49:1d:63:32:a4:74:b1:0f:cf:13:9f:ff:83:0c:
                    a7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:87:DA:95:38:D4:90:E8:FC:37:79:07:38:FB:5D:59:ED:9C:E7:41
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XYfalTjUkOj8N3kHOPtdWe2c50E.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:1e:17:3f:94:97:19:a2:b2:74:af:0e:8a:bb:2a:c1:cf:70:
         ca:73:fc:1f:f6:41:80:3b:53:3d:ac:57:f5:11:8f:a7:13:8b:
         03:a1:77:a8:1c:c4:43:d1:41:ee:ce:4e:4c:91:3d:07:22:21:
         e5:19:a9:a8:ec:96:7f:58:13:cb:af:9a:f0:5b:ad:66:6e:2e:
         5d:f4:ed:4a:a2:0a:70:ff:97:b7:6a:62:ca:ea:b9:56:5f:2e:
         7c:09:46:5e:9b:62:ee:60:22:37:74:eb:c8:ae:c1:06:ff:a5:
         34:02:9a:7f:ac:57:bb:1f:32:d9:00:26:64:a2:89:29:d2:e0:
         7f:56:57:91:3c:ea:72:fa:b3:6c:72:13:2b:ef:c1:c8:36:e9:
         ef:77:cb:35:4c:32:59:e7:3a:fc:ac:ba:ad:7b:fd:a4:1b:18:
         56:c0:42:23:43:a2:83:21:79:83:46:ac:31:7e:81:2a:a2:6a:
         18:d6:9f:00:4d:15:85:10:83:aa:82:be:b4:48:20:4d:25:5e:
         a2:85:8b:5e:32:c2:c5:20:d3:b3:56:a4:2e:92:16:0e:2a:71:
         5f:52:bb:02:7d:64:7c:18:61:ba:d3:45:0b:7d:25:0c:3f:90:
         dd:f5:1e:78:03:54:3b:e6:74:9b:4a:f3:4c:d8:4b:d8:29:64:
         46:c4:90:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----