Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aL-2OVTCCTSfs8E5IC3C_u2dtVE.roa
File:                     aL-2OVTCCTSfs8E5IC3C_u2dtVE.roa (raw, json)
Hash identifier:          csHhptCiVfFdPDG2XBpNpE/yfOV0QCYZ/3/f8NzCN78=
Subject key identifier:   68:BF:B6:39:54:C2:09:34:9F:B3:C1:39:20:2D:C2:FE:ED:9D:B5:51
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E0F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aL-2OVTCCTSfs8E5IC3C_u2dtVE.roa
Signing time:             Tue 29 Sep 2020 09:55:17 +0000
ROA not before:           Tue 29 Sep 2020 09:55:17 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.156.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3599 (0xe0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:17 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=68BFB63954C209349FB3C139202DC2FEED9DB551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:76:bd:86:ec:0f:1b:53:72:96:94:d5:15:83:
                    2d:5c:b1:50:4a:60:f0:a2:a6:c1:8f:2f:1e:cf:74:
                    17:76:1b:12:5f:f9:68:9e:38:d5:9b:4c:4c:90:da:
                    2f:2c:06:50:9b:a5:8e:87:f9:61:62:6b:e0:7e:17:
                    8b:0e:4f:3c:5e:0b:35:11:db:40:29:ed:ec:b5:6c:
                    07:ae:56:19:4a:4c:63:b2:dd:57:d6:75:b2:8e:2a:
                    85:9b:30:37:92:14:20:1c:59:4b:5b:ab:e5:e8:de:
                    7b:22:fd:33:26:4d:b7:af:75:4f:e6:76:8d:b2:04:
                    67:51:7a:2f:f1:8a:fc:77:2e:ca:96:7f:3b:29:9c:
                    a8:10:2e:29:e7:0f:19:63:6a:bd:97:f2:cc:07:de:
                    30:69:90:86:d7:a5:df:9b:a2:07:e5:2c:a7:bc:33:
                    99:a3:2d:c0:46:cb:25:c8:a5:f0:02:4e:0e:3d:4e:
                    62:03:03:e7:ec:49:99:93:4c:8f:a5:7a:55:21:cb:
                    db:67:18:ae:ab:f2:62:2a:3d:af:fa:48:30:16:7a:
                    7c:1a:98:9f:e1:64:c4:56:16:4e:bd:95:00:ab:e4:
                    4a:ba:0d:ca:9d:5f:55:0c:c7:56:69:c1:ee:a0:97:
                    58:5a:f4:28:f2:e4:29:a6:86:63:44:65:3b:12:f8:
                    d4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:BF:B6:39:54:C2:09:34:9F:B3:C1:39:20:2D:C2:FE:ED:9D:B5:51
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aL-2OVTCCTSfs8E5IC3C_u2dtVE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:10:2b:19:d0:67:5f:3c:8a:74:2f:73:3e:06:ca:8b:46:2d:
         72:22:1d:95:f9:89:4d:57:86:45:35:e7:af:5b:be:47:c0:d2:
         c6:81:1b:4b:48:a3:e4:e4:40:6f:d3:dd:b0:d5:72:f6:8e:c0:
         17:bf:8b:18:cb:f3:6a:b3:d0:84:61:c0:05:3b:33:fc:30:c8:
         08:9b:40:66:90:31:a1:5b:a1:68:3c:54:33:ba:3f:21:0f:8e:
         db:3f:a5:0f:a0:21:7f:02:74:77:ef:54:fb:ca:8a:2a:cf:3a:
         0b:cf:24:ea:07:f8:20:c0:69:c1:d6:74:f0:df:a8:67:b2:e7:
         ba:3d:dc:d5:12:b7:53:f4:ae:bd:14:88:82:ac:a4:5d:64:9e:
         af:2f:d0:9d:d7:f3:4e:f9:ba:1a:f8:c8:c9:25:20:ef:6a:90:
         c6:ec:bc:fa:f8:9d:f3:8e:d1:bc:0e:4a:18:f7:63:24:2d:a2:
         28:4c:2a:9f:f1:8a:10:16:23:1c:53:6f:1a:05:ee:8b:84:9a:
         96:fb:b9:48:27:39:7f:1d:18:8d:c1:3d:ec:ac:96:79:1f:56:
         c5:c0:34:02:cb:47:f8:30:4c:7b:ed:0b:bf:2b:63:1a:cf:8d:
         4a:b5:b0:94:17:06:0a:44:0f:88:d2:32:37:c9:42:65:b0:fe:
         0d:da:aa:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----