Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Xv6QdZqf_CMlp8zW0P-Skgkm7kg.roa
File:                     Xv6QdZqf_CMlp8zW0P-Skgkm7kg.roa (raw, json)
Hash identifier:          eVXB/xENmBVYeCrUDQaXWDZYMajdpeSv+ZRTdTdbcEo=
Subject key identifier:   5E:FE:90:75:9A:9F:FC:23:25:A7:CC:D6:D0:FF:92:92:09:26:EE:48
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0CF7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Xv6QdZqf_CMlp8zW0P-Skgkm7kg.roa
Signing time:             Tue 29 Sep 2020 09:54:01 +0000
ROA not before:           Tue 29 Sep 2020 09:54:01 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.192.8.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3319 (0xcf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:01 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5EFE90759A9FFC2325A7CCD6D0FF92920926EE48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:1e:f8:cc:68:bc:c4:6f:66:0b:a1:bf:e3:6a:
                    54:ca:f1:66:6b:61:75:0f:8a:fd:50:8d:9d:6e:38:
                    f4:dd:bb:fb:c8:c2:37:1d:01:72:67:ee:32:46:cd:
                    4b:bf:23:47:51:aa:e2:ed:3d:02:30:85:e5:f9:a8:
                    e3:00:a6:f6:5e:1c:0b:ca:fe:a9:1e:f9:bb:ac:26:
                    fa:29:80:e1:08:e2:89:a5:49:cd:60:d8:88:7c:33:
                    fb:b1:61:b3:68:b0:5a:b1:3d:d0:d8:29:0a:01:c0:
                    25:2d:0f:c8:cc:bc:09:82:ea:88:ed:fe:58:ca:60:
                    7f:e6:4a:2b:26:a2:99:fe:f7:b7:eb:1c:fa:71:07:
                    0f:42:00:1f:07:fb:c1:b4:c1:90:6b:b7:a0:9c:e6:
                    69:9f:95:e0:41:e6:1c:8b:75:4d:94:f0:c5:17:aa:
                    7f:a8:79:0d:73:66:95:55:3d:1d:23:46:f0:16:94:
                    62:85:29:a4:72:0a:43:fc:95:46:5d:5e:be:ae:39:
                    76:15:9b:78:83:db:af:e3:1c:f9:4d:0e:04:d2:3c:
                    f0:ed:04:f2:9a:fe:5b:01:b9:03:73:7f:13:e9:2d:
                    f3:3f:ff:de:a8:9a:51:f4:d6:8f:61:be:b1:1b:d5:
                    f6:ca:dc:4e:78:6c:93:ba:26:cd:33:a2:7c:32:e1:
                    ec:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:FE:90:75:9A:9F:FC:23:25:A7:CC:D6:D0:FF:92:92:09:26:EE:48
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Xv6QdZqf_CMlp8zW0P-Skgkm7kg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2b:da:90:05:ea:ae:4b:61:fc:83:80:d0:9b:35:7c:33:9d:cf:
         d2:f3:41:45:05:71:39:e0:31:a0:a7:fe:50:3c:79:57:65:2b:
         15:e5:af:07:7a:b9:18:42:b9:07:e7:d1:d1:f0:55:f1:be:ec:
         45:4c:7d:0c:7f:4e:f9:9e:23:c8:ec:dc:e1:c5:4f:f0:fa:80:
         70:99:2f:0e:5a:23:9b:d2:fb:60:da:7f:17:de:e0:e3:ad:ea:
         c0:bd:49:67:f9:82:a0:34:7f:ff:3c:b9:c8:b5:16:fe:7f:a0:
         59:b1:61:e1:43:c8:7b:8b:0c:ac:d1:33:02:4b:00:a1:79:6a:
         31:da:a2:77:c7:fa:ed:1b:db:de:2f:02:23:98:b0:ba:0d:14:
         86:72:97:3d:10:39:9c:db:df:88:18:de:92:f8:53:54:da:ac:
         01:e2:23:0a:88:9d:68:44:47:5a:a5:ff:19:ee:45:2f:f3:03:
         d5:66:ee:06:9d:19:c9:53:c4:a7:5e:8f:cd:7d:b0:84:9a:85:
         3d:39:6b:2a:bd:83:02:c9:ea:05:9e:69:3a:0c:d2:a5:f2:08:
         b1:5a:5f:e9:6e:e6:a6:21:a5:31:c1:79:4a:ac:f0:33:9a:73:
         0f:b4:2c:db:94:c1:45:0e:dc:59:61:7e:f6:ad:30:a9:1c:b9:
         19:13:7a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----