Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZKXm0gWnLWqfrn4DSDaQPcQyZEM.roa
File:                     ZKXm0gWnLWqfrn4DSDaQPcQyZEM.roa (raw, json)
Hash identifier:          yEj6I62LtZsAKSl+winaFTmCc6p3Z3l6ESCGvid1LP4=
Subject key identifier:   64:A5:E6:D2:05:A7:2D:6A:9F:AE:7E:03:48:36:90:3D:C4:32:64:43
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F46
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZKXm0gWnLWqfrn4DSDaQPcQyZEM.roa
Signing time:             Tue 29 Sep 2020 09:56:43 +0000
ROA not before:           Tue 29 Sep 2020 09:56:43 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        123.195.244.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3910 (0xf46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:43 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=64A5E6D205A72D6A9FAE7E034836903DC4326443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fe:23:ee:51:0f:c4:f7:1f:a7:d1:64:eb:82:
                    2d:cc:4c:2a:e4:b3:07:fd:c2:fb:bb:5b:5f:97:dd:
                    2d:05:85:1b:8e:04:25:23:cd:fc:b8:7e:4d:46:4f:
                    d5:a5:6e:c0:31:ff:23:48:e3:0e:ab:ce:13:2c:28:
                    1d:0c:cc:95:15:04:d8:f7:f6:e3:5e:d3:0b:91:33:
                    ef:a4:a7:02:44:60:b5:3f:4c:17:34:bd:c0:22:4b:
                    24:d5:fd:2c:ed:5d:92:8f:dc:11:c1:83:25:f1:e2:
                    40:81:55:5f:14:ac:fd:10:39:db:ff:c6:ee:75:bd:
                    94:0c:7e:57:81:a3:03:8a:c6:b4:03:81:1c:f6:77:
                    b9:34:ce:66:15:3d:13:b6:e3:0e:15:1c:79:d0:06:
                    2d:87:7b:ec:72:10:84:35:51:90:97:68:d5:33:81:
                    36:b0:66:82:bd:5c:82:36:29:78:c7:44:5b:f3:75:
                    44:1d:cd:fb:0b:c0:ea:da:2b:47:61:8f:4d:a1:a3:
                    14:9a:21:0f:59:1b:94:7c:8b:ac:cf:40:82:47:ef:
                    50:c3:4f:a9:8d:75:4f:09:80:88:05:de:eb:a6:c6:
                    d8:c0:5f:e7:c1:31:6d:c3:b1:e2:9d:db:b6:f8:5a:
                    82:b8:57:5a:66:0b:e8:e4:c7:01:2e:e4:d5:f5:7c:
                    69:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A5:E6:D2:05:A7:2D:6A:9F:AE:7E:03:48:36:90:3D:C4:32:64:43
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZKXm0gWnLWqfrn4DSDaQPcQyZEM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:0f:97:f0:1d:d5:68:6d:eb:f6:1e:f9:96:f6:38:f7:96:f7:
         de:77:e2:c7:81:f0:f7:6c:1f:46:26:3e:9d:03:a6:3c:b1:27:
         46:d1:5b:2b:54:d1:44:58:26:95:43:90:39:de:21:15:01:45:
         e7:1b:d7:5c:4d:e9:f8:85:44:fd:a7:d1:5e:74:ad:bf:e4:47:
         43:4e:c5:28:44:6c:59:c9:df:3d:e8:03:50:fc:e9:82:34:02:
         fb:bd:3a:99:dc:93:52:a9:70:05:52:c2:05:70:8f:9c:f2:41:
         85:8c:f4:21:b2:5e:14:fb:ed:fc:25:4c:f5:ba:46:9b:d7:b5:
         85:af:da:cc:f8:f9:c8:0a:df:11:ec:a7:9a:1e:4d:de:cd:5e:
         82:1e:7b:26:57:0d:0a:de:87:58:08:3a:64:29:61:d0:84:c6:
         a9:be:e4:18:ba:29:6e:9c:59:3d:8d:89:a6:80:5f:de:1b:45:
         9e:d0:c0:ff:20:ad:c7:b1:92:7e:e0:33:a7:97:da:f4:82:d2:
         c2:bd:93:49:82:8e:86:e6:99:be:23:a4:87:17:54:f8:b1:b7:
         c0:3d:1c:60:c8:de:b6:37:7b:b4:2b:8a:56:cf:b3:28:52:08:
         cf:6f:9e:1a:3a:8d:16:7f:bf:3d:ae:bf:56:72:ae:f9:dc:22:
         83:50:b4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----