Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_HyVZsl9rh0DE1XyMdG4VHwuDmE.roa
File:                     _HyVZsl9rh0DE1XyMdG4VHwuDmE.roa (raw, json)
Hash identifier:          q3UhdA6upI7sVG0gvuT9aDzjlHjR3ACAlFGyU+KqTRg=
Subject key identifier:   FC:7C:95:66:C9:7D:AE:1D:03:13:55:F2:31:D1:B8:54:7C:2E:0E:61
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D6E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_HyVZsl9rh0DE1XyMdG4VHwuDmE.roa
Signing time:             Tue 29 Sep 2020 09:54:33 +0000
ROA not before:           Tue 29 Sep 2020 09:54:33 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        118.232.32.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3438 (0xd6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:33 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=FC7C9566C97DAE1D031355F231D1B8547C2E0E61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:22:98:c1:30:c7:21:88:bf:59:99:bb:37:17:
                    c7:73:17:df:1e:3c:04:8f:cf:1d:bf:1b:4a:13:f2:
                    81:67:d7:e4:f8:78:a4:39:0b:a4:3c:16:8d:10:cb:
                    39:b7:c2:f9:a7:7f:58:40:71:d5:f0:48:f4:78:e4:
                    9b:a5:e2:dc:9c:53:3a:fc:dd:c3:c0:39:77:e8:a0:
                    e3:5c:0c:83:87:34:f6:80:18:31:ce:03:b3:1b:ec:
                    1c:06:b9:e4:79:a5:86:ef:1e:4a:f2:5a:39:ce:31:
                    ca:e9:8e:22:ef:f2:f8:bb:f7:14:d4:05:cd:3a:32:
                    d7:cf:f6:90:d7:55:87:af:55:3e:bf:35:1a:36:b3:
                    4b:e3:58:b3:65:91:c5:20:d9:14:fa:68:95:fa:9b:
                    7f:85:69:83:e4:61:ca:15:91:fb:2c:8c:6f:2e:f9:
                    5b:60:fd:fe:c4:2a:d8:b0:66:a9:ae:30:12:47:ac:
                    38:12:03:5b:8e:24:e4:c1:15:08:84:f3:cd:64:13:
                    6d:4c:0b:f0:ad:6f:49:13:52:4f:f1:be:02:f6:94:
                    f8:b9:81:8c:9b:3a:0b:73:f0:08:72:f9:68:12:d8:
                    cb:49:3c:bf:4f:27:77:75:de:06:b7:19:3f:10:74:
                    3d:88:21:ce:96:d5:a0:47:cb:8c:b2:b0:f1:b8:8a:
                    1c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7C:95:66:C9:7D:AE:1D:03:13:55:F2:31:D1:B8:54:7C:2E:0E:61
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_HyVZsl9rh0DE1XyMdG4VHwuDmE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         36:e7:7d:e4:70:43:02:16:20:da:34:83:3c:d4:92:8e:3d:ee:
         27:05:5f:ed:a8:65:a4:58:a7:af:f1:22:fc:30:70:30:82:03:
         c9:43:a3:51:5a:92:74:dd:eb:a5:a9:e1:de:a1:60:2e:ef:c9:
         96:af:1d:7f:61:7d:a3:90:1d:72:2d:bd:e3:92:b8:ea:ce:15:
         e5:2e:04:2f:a2:e7:cf:ae:58:ca:4c:42:97:b8:dd:98:f6:27:
         03:5e:bc:b6:a2:3b:6b:a9:95:35:33:b4:0e:d7:7c:45:41:8f:
         9a:eb:67:e1:ef:e8:ad:2e:0a:7e:0c:3e:84:aa:6f:45:d2:6d:
         10:e3:c2:fd:ec:e4:40:46:f1:19:98:9e:e3:59:89:31:37:49:
         88:af:ae:17:d9:d4:a0:fd:45:a6:b7:59:a7:5c:17:58:dc:dc:
         86:56:1b:7f:42:72:74:59:c4:47:ce:13:ff:b8:7f:f3:31:15:
         33:c6:ca:3e:21:d5:d4:cf:ed:2c:90:94:4d:8e:d2:d4:92:77:
         58:cc:05:e5:9d:75:eb:40:80:7a:a2:9f:db:36:50:a9:1b:f3:
         49:a7:e2:ac:ff:27:be:40:3a:1c:80:d4:53:6e:2f:fb:e4:1d:
         db:bf:61:2e:4d:35:2a:81:02:95:c5:a4:d4:0e:f1:7f:cc:cc:
         69:4d:57:7b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDW4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU0MzNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEZDN0M5NTY2Qzk3REFF
MUQwMzEzNTVGMjMxRDFCODU0N0MyRTBFNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBIpjBMMchiL9Zmbs3F8dzF98ePASPzx2/G0oT8oFn1+T4eKQ5
C6Q8Fo0Qyzm3wvmnf1hAcdXwSPR45Jul4tycUzr83cPAOXfooONcDIOHNPaAGDHO
A7Mb7BwGueR5pYbvHkryWjnOMcrpjiLv8vi79xTUBc06MtfP9pDXVYevVT6/NRo2
s0vjWLNlkcUg2RT6aJX6m3+FaYPkYcoVkfssjG8u+Vtg/f7EKtiwZqmuMBJHrDgS
A1uOJOTBFQiE881kE21MC/Ctb0kTUk/xvgL2lPi5gYybOgtz8Ahy+WgS2MtJPL9P
J3d13ga3GT8QdD2IIc6W1aBHy4yysPG4ihwVAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU/HyVZsl9rh0DE1XyMdG4VHwuDmEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL19IeVZac2w5cmgwREUxWHlN
ZEc0Vkh3dURtRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV2
6CAwDQYJKoZIhvcNAQELBQADggEBADbnfeRwQwIWINo0gzzUko497icFX+2oZaRY
p6/xIvwwcDCCA8lDo1FaknTd66Wp4d6hYC7vyZavHX9hfaOQHXItveOSuOrOFeUu
BC+i58+uWMpMQpe43Zj2JwNevLaiO2uplTUztA7XfEVBj5rrZ+Hv6K0uCn4MPoSq
b0XSbRDjwv3s5EBG8RmYnuNZiTE3SYivrhfZ1KD9Raa3WadcF1jc3IZWG39CcnRZ
xEfOE/+4f/MxFTPGyj4h1dTP7SyQlE2O0tSSd1jMBeWddetAgHqin9s2UKkb80mn
4qz/J75AOhyA1FNuL/vkHdu/YS5NNSqBApXFpNQO8X/MzGlNV3s=
-----END CERTIFICATE-----