Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a4EaIdz_XHP0MFfvYP-H_-4JPlA.roa
File:                     a4EaIdz_XHP0MFfvYP-H_-4JPlA.roa (raw, json)
Hash identifier:          vbKAgiwpSWNCL1CRtTu8nqo61ozEGxX4OUkUBGySqmY=
Subject key identifier:   6B:81:1A:21:DC:FF:5C:73:F4:30:57:EF:60:FF:87:FF:EE:09:3E:50
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1903
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a4EaIdz_XHP0MFfvYP-H_-4JPlA.roa
Signing time:             Sun 07 Feb 2021 12:56:09 +0000
ROA not before:           Sun 07 Feb 2021 12:56:09 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        123.195.208.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6403 (0x1903)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:56:09 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6B811A21DCFF5C73F43057EF60FF87FFEE093E50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dd:c8:da:10:2d:15:f2:66:97:ed:52:9f:cd:
                    b4:5c:3c:65:06:e4:c5:f5:b7:bb:0c:2b:c1:d5:0e:
                    d3:dd:c2:f5:17:20:99:9f:f4:9a:a9:be:53:7d:76:
                    69:6b:6a:65:eb:53:51:34:61:9b:04:a7:e5:51:2f:
                    4c:34:db:ca:ab:bc:31:74:05:c3:b5:18:3b:47:fa:
                    f5:37:93:66:ec:d0:58:e2:60:75:86:56:73:50:f3:
                    d9:8b:88:ad:f6:87:e5:8a:e6:42:c1:13:5b:f5:f6:
                    82:76:c2:e3:a1:3a:5f:6a:eb:9e:ef:84:20:c8:23:
                    06:90:b4:30:92:19:cd:19:9c:06:42:44:7f:24:73:
                    d7:47:c5:3a:d1:9f:7d:b7:1f:ec:e2:d3:45:e2:b3:
                    31:1c:42:8e:cd:cf:b2:85:50:37:94:3c:c3:0f:52:
                    e0:06:e4:c1:3c:04:ed:0b:e8:5a:38:f8:ad:77:81:
                    1c:59:33:53:15:b8:d9:88:db:ad:fc:83:a2:b6:d0:
                    bb:c1:58:ed:d9:16:28:a2:f7:74:f4:cc:70:94:a9:
                    e5:86:fc:13:61:d0:eb:d7:83:8c:e8:b6:29:86:12:
                    ba:88:99:3f:04:1f:bc:69:d3:87:90:80:23:01:d9:
                    ee:f1:8a:97:f5:68:3e:3d:be:b8:3e:3c:ab:14:72:
                    1f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:81:1A:21:DC:FF:5C:73:F4:30:57:EF:60:FF:87:FF:EE:09:3E:50
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a4EaIdz_XHP0MFfvYP-H_-4JPlA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1c:cd:63:bb:4e:d0:41:7b:d9:41:fd:47:37:6e:11:65:0b:b3:
         09:92:d7:27:1d:87:a0:00:8a:ff:e6:0c:d1:5c:5a:f6:5f:85:
         65:f7:2a:b3:0e:29:47:4f:37:6b:ba:71:c0:4b:5d:de:3a:9d:
         95:48:f9:6b:94:6d:a2:2d:06:93:f0:33:9b:cd:1a:65:53:44:
         ef:8e:72:65:8d:32:91:f0:0b:49:1e:5a:b8:0c:46:44:e1:62:
         51:15:24:7c:a3:a3:96:4d:ca:0c:d7:b8:ab:09:d5:08:2b:61:
         0e:a4:ab:6d:c0:18:f9:5b:83:ea:b4:1d:d8:41:c1:eb:10:70:
         07:cd:44:2f:7c:a3:3e:c3:7a:bc:6c:10:f6:66:6c:4a:89:11:
         19:6c:65:a5:90:28:7d:2e:f2:7b:9d:4c:f1:9a:c0:73:9e:8b:
         96:f2:78:b5:81:db:46:7b:4d:d0:2e:80:0c:10:8e:24:b3:fe:
         48:e6:08:5c:cb:44:d0:b8:97:55:fc:e8:a6:ab:a2:00:09:71:
         b1:0a:1a:54:3e:f1:dd:bd:ae:99:2a:54:d2:0f:91:9b:ae:0d:
         b7:ee:9f:92:86:67:d9:e1:e7:34:a8:22:44:17:79:11:2a:b8:
         09:77:ad:c7:10:f8:2a:8b:86:63:b7:80:4a:fe:f6:89:16:b1:
         2b:e3:c3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----