Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YX0UdMdwfnNyuoh819cP3uCMZ68.roa
File:                     YX0UdMdwfnNyuoh819cP3uCMZ68.roa (raw, json)
Hash identifier:          sPfNRj1ByZ66VWtsRhQ/Rg0D/MNXOC/vwxlfk2BP7sA=
Subject key identifier:   61:7D:14:74:C7:70:7E:73:72:BA:88:7C:D7:D7:0F:DE:E0:8C:67:AF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0DA1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YX0UdMdwfnNyuoh819cP3uCMZ68.roa
Signing time:             Tue 29 Sep 2020 09:54:47 +0000
ROA not before:           Tue 29 Sep 2020 09:54:47 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.16.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3489 (0xda1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:47 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=617D1474C7707E7372BA887CD7D70FDEE08C67AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0e:39:2d:9a:9e:e0:85:14:3b:72:15:20:9b:
                    4a:42:1a:e2:d4:a3:2c:7f:e7:49:67:ea:74:39:c4:
                    a9:d1:62:c2:7c:ef:6a:b0:45:53:cb:04:75:a6:6e:
                    a6:75:05:c6:64:ab:a1:96:6b:c3:f9:b6:44:8a:27:
                    d6:75:cc:6a:9d:59:6d:89:a4:6f:21:6e:d2:ca:26:
                    66:97:1e:fe:c6:61:e2:0f:3a:0a:77:d6:47:74:b7:
                    cf:4f:4a:6e:ec:88:d6:af:f4:69:a0:f7:25:4e:86:
                    b3:8f:66:e2:b8:48:79:e1:99:5d:96:11:3c:87:a6:
                    30:30:e9:c8:a6:90:3f:f3:e8:64:98:e0:e9:76:15:
                    db:f1:c9:ad:92:f0:ba:c9:71:c5:5b:a0:f8:76:b5:
                    5e:56:d1:ac:08:08:52:14:de:81:e3:09:99:dc:fe:
                    0d:ec:70:44:0d:c8:c2:6a:a8:9e:c0:a6:41:8b:ea:
                    16:33:62:8b:fc:38:69:05:e6:04:cd:fb:84:6c:3e:
                    c8:50:96:06:d7:ad:51:fb:a0:09:84:84:a4:5d:e6:
                    12:ab:43:72:9d:3d:f7:76:3f:39:22:5f:12:60:76:
                    ca:5d:ee:f5:4e:a7:66:da:16:15:1d:c1:f8:ee:a3:
                    e4:2d:4f:d1:9b:ca:b3:d0:e3:8b:90:5b:81:11:fc:
                    64:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7D:14:74:C7:70:7E:73:72:BA:88:7C:D7:D7:0F:DE:E0:8C:67:AF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YX0UdMdwfnNyuoh819cP3uCMZ68.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8d:22:ab:a9:71:1b:0b:3b:93:20:12:54:de:b1:e6:5f:11:77:
         e0:b0:fe:bf:c3:bb:4d:27:78:dd:d6:40:3a:41:0f:56:b7:1f:
         6f:bf:65:f3:70:3d:fc:0d:e9:19:c2:a4:ff:b6:4d:47:bd:7b:
         fe:53:fc:14:8f:4a:0b:af:11:e3:08:d3:23:9f:31:dd:84:7c:
         da:23:9a:7c:70:ef:d5:8c:ee:36:08:f0:8b:d8:95:6e:42:a3:
         9a:ea:00:ab:e5:49:72:8b:aa:df:69:63:5d:9d:f1:29:65:80:
         63:cd:27:94:c6:cf:2f:ce:a4:e2:c1:1b:bf:24:e8:f4:e7:fa:
         8e:23:f8:10:1b:ca:2c:35:62:c5:bd:9f:5e:ef:26:d3:db:01:
         0b:14:2b:36:b9:16:fe:aa:e2:4c:7c:3e:36:43:bf:18:b0:3a:
         02:85:2a:89:41:8f:a1:59:f4:37:f3:38:ff:4b:bb:d3:1d:a7:
         16:b1:57:56:a9:3d:11:f8:a4:82:ed:7c:09:15:14:57:52:b7:
         9c:ff:27:cb:c6:2d:4e:e4:27:83:58:32:2b:02:1d:f4:ef:a1:
         13:89:39:56:82:b4:64:2f:f3:1f:12:17:33:21:7d:06:35:c4:
         a4:7b:f6:87:3a:a2:7d:ce:f4:ed:7b:5b:9f:04:e2:cf:4f:b9:
         f8:8f:99:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----