Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YKmXca1tQlCTKpFImpxEqT5A1RE.roa
File:                     YKmXca1tQlCTKpFImpxEqT5A1RE.roa (raw, json)
Hash identifier:          dgb92/8AedJ0wOgzXJn2Dewe8rFDNJ9njMDoI7JZqG0=
Subject key identifier:   60:A9:97:71:AD:6D:42:50:93:2A:91:48:9A:9C:44:A9:3E:40:D5:11
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1619
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YKmXca1tQlCTKpFImpxEqT5A1RE.roa
Signing time:             Sun 07 Feb 2021 12:08:19 +0000
ROA not before:           Sun 07 Feb 2021 12:08:19 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.8.192/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5657 (0x1619)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:08:19 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=60A99771AD6D4250932A91489A9C44A93E40D511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f2:4d:6b:44:c4:6e:77:84:4c:5f:6a:ef:4c:
                    8c:19:aa:73:95:0e:67:99:10:47:74:0f:8f:ce:88:
                    07:11:29:d0:1f:f5:40:d4:93:1b:f6:dd:77:cb:f8:
                    ef:af:de:cf:12:b9:fa:19:c6:31:4b:46:e4:e2:f3:
                    a6:09:15:ab:5b:85:84:73:76:21:c1:b7:98:ed:36:
                    00:5a:94:48:fb:0a:8f:d9:d3:3c:d1:53:16:f1:b3:
                    e2:ea:e2:fd:d9:ab:14:57:e7:ad:55:34:c4:2c:47:
                    fc:07:ee:59:67:f3:5d:13:63:08:fc:61:b1:ac:f4:
                    d4:6c:26:29:3e:5c:5a:c8:6a:2c:bc:15:00:54:ce:
                    8d:31:dc:09:5c:94:3a:25:67:ad:97:3e:37:ad:e3:
                    9a:b2:53:8f:6a:97:bc:e6:80:45:65:81:92:88:19:
                    00:f7:78:a9:6b:60:97:df:a5:64:7f:ea:22:cf:e4:
                    1d:0b:f1:76:72:e8:a0:f4:2a:3e:42:b1:1b:9f:17:
                    6f:58:91:09:61:c2:2a:58:9c:a5:de:6f:25:6c:06:
                    ba:66:a3:54:fe:74:7b:f7:bf:d5:e0:fb:90:32:e7:
                    33:80:f9:83:a3:94:fd:93:9e:42:88:0d:db:1e:03:
                    0c:2e:d6:dc:b6:60:94:d3:75:dc:09:85:0e:2a:dd:
                    73:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A9:97:71:AD:6D:42:50:93:2A:91:48:9A:9C:44:A9:3E:40:D5:11
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YKmXca1tQlCTKpFImpxEqT5A1RE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.8.192/26

    Signature Algorithm: sha256WithRSAEncryption
         4c:f6:3d:28:55:08:6b:98:f9:c0:2c:79:ef:45:5f:df:84:e0:
         db:a6:06:01:c3:db:34:33:ee:96:41:30:81:2d:40:11:6f:38:
         1b:1a:33:cd:a3:0f:86:b6:2f:b8:67:99:09:8e:a9:50:11:73:
         cd:3c:2d:ea:4f:76:0a:a8:92:ca:84:82:9f:20:0d:bf:98:3b:
         b9:d0:20:97:3b:12:c1:f4:0d:08:ea:ca:1d:fa:35:ab:8d:32:
         fa:28:15:59:82:07:a6:11:4a:24:94:44:be:5c:6b:06:d6:31:
         ac:c0:e9:f4:8c:2b:55:c2:1d:4d:87:58:50:16:d3:b6:36:20:
         06:35:9c:c8:6c:7a:a0:c9:b0:d8:48:15:e1:20:e5:39:87:63:
         2a:45:13:8c:f0:58:0e:7c:04:10:f9:96:fe:fa:99:22:b2:e5:
         1a:20:3f:c5:c2:f8:9b:53:38:a3:b9:98:52:4d:28:63:6a:b1:
         82:64:ae:79:80:d1:69:4c:6a:65:21:f7:8a:22:d4:36:07:ce:
         82:b0:5b:8f:38:24:73:52:22:bf:82:46:59:83:47:64:99:fb:
         fc:b8:21:57:85:e3:65:a5:dd:e0:30:98:6a:de:08:3d:2f:ce:
         3d:5b:15:10:21:26:5f:39:92:98:31:af:9b:61:5a:fb:2c:a6:
         df:81:89:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----