Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a8tnIkBs6Mzf8foO7E-_4pbZLNY.roa
File:                     a8tnIkBs6Mzf8foO7E-_4pbZLNY.roa (raw, json)
Hash identifier:          R4R5IbbXGafkX1Ci6y2fpKVnlKQQDJlESphC6GXcsSU=
Subject key identifier:   6B:CB:67:22:40:6C:E8:CC:DF:F1:FA:0E:EC:4F:BF:E2:96:D9:2C:D6
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F5D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a8tnIkBs6Mzf8foO7E-_4pbZLNY.roa
Signing time:             Tue 29 Sep 2020 09:56:51 +0000
ROA not before:           Tue 29 Sep 2020 09:56:51 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.176.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3933 (0xf5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:51 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6BCB6722406CE8CCDFF1FA0EEC4FBFE296D92CD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:39:80:6c:33:fe:8b:17:67:a8:23:ec:77:a4:
                    a3:f2:6e:62:f9:bc:a9:91:34:63:1e:97:b7:4b:34:
                    07:59:1f:7e:df:40:34:4a:f5:06:b3:b1:38:3f:28:
                    0e:8e:82:75:2c:52:a7:70:ab:b4:92:55:82:fe:b6:
                    c9:c1:07:9e:81:9c:07:36:e4:b1:40:e9:9f:91:76:
                    27:64:a6:7d:63:0f:c8:31:94:34:56:4c:d3:b9:5c:
                    63:2c:8e:2b:6a:f5:4f:72:9f:89:d8:cf:c6:74:80:
                    3d:ba:2d:05:2d:ad:bf:57:ee:5f:f2:e4:20:5f:0e:
                    17:4d:20:c6:73:c9:2c:99:86:ef:75:e8:4c:08:63:
                    97:4d:fd:c0:24:52:e9:b8:7f:84:e5:84:17:8b:4f:
                    61:dd:c8:ed:a5:aa:09:33:26:91:3f:c6:82:2f:0d:
                    bf:06:04:be:9d:bb:a8:77:50:9f:30:56:d0:39:35:
                    63:39:d3:29:41:b8:80:9c:c6:d9:9c:4c:b3:52:54:
                    d9:31:e9:d3:5c:0d:80:1c:3a:d4:3c:19:14:04:9f:
                    35:cb:d4:54:0c:90:19:d5:68:60:6a:55:ba:68:34:
                    33:d3:87:70:c9:82:6b:cd:5a:7c:3f:58:6d:21:ac:
                    9c:03:1a:f8:71:fb:ec:42:63:bb:2e:b2:8c:39:d3:
                    f4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:CB:67:22:40:6C:E8:CC:DF:F1:FA:0E:EC:4F:BF:E2:96:D9:2C:D6
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a8tnIkBs6Mzf8foO7E-_4pbZLNY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         39:80:d8:f1:5a:47:9e:14:65:f1:9e:00:95:e6:dd:77:20:87:
         cc:26:ec:51:ed:a5:6c:76:d4:d9:da:e6:7d:b4:ac:f2:20:e2:
         d4:d5:89:9e:b2:a5:f6:8e:46:ed:17:6c:0d:2f:ed:f7:24:5b:
         b2:fd:ad:92:60:e8:9d:d6:86:dc:25:88:70:63:6f:af:f3:ab:
         50:c2:26:3c:8d:9b:13:be:c3:c7:1c:df:63:58:09:39:c4:c8:
         10:67:49:3d:41:ba:85:3b:56:e1:88:91:98:a0:b9:8c:a0:f5:
         ed:08:4d:e4:02:88:75:44:a8:d3:3b:1a:39:6a:02:51:06:e6:
         d8:2f:9b:5a:9f:31:91:b0:d3:51:5a:20:2f:c5:be:fc:82:da:
         9a:2b:78:e8:e6:4d:55:d5:d3:d0:57:ec:32:24:f1:e8:9b:f7:
         91:34:52:04:7c:09:fa:52:2f:57:c1:cf:89:74:bc:d8:55:b0:
         51:96:29:25:a1:9a:d1:ae:7a:ca:b0:14:0f:45:60:11:c9:59:
         39:dd:36:28:66:56:23:08:84:77:f0:17:d9:74:37:10:ec:ec:
         ea:78:3a:76:9b:4f:cd:15:0b:b6:50:17:26:ab:e0:2d:86:d3:
         32:d2:3b:a4:e8:30:57:07:0f:d7:61:93:88:d0:1c:ed:b0:2e:
         7b:4e:18:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----