Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aUy4eJ3SHQm0sH7PxuDzuV6oUzI.roa
File:                     aUy4eJ3SHQm0sH7PxuDzuV6oUzI.roa (raw, json)
Hash identifier:          7/GgAAKWD7jxLRgBVqZDTqzWiE6VLkdczfgGga37lOY=
Subject key identifier:   69:4C:B8:78:9D:D2:1D:09:B4:B0:7E:CF:C6:E0:F3:B9:5E:A8:53:32
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D43
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aUy4eJ3SHQm0sH7PxuDzuV6oUzI.roa
Signing time:             Tue 29 Sep 2020 09:54:23 +0000
ROA not before:           Tue 29 Sep 2020 09:54:23 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.40.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3395 (0xd43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:23 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=694CB8789DD21D09B4B07ECFC6E0F3B95EA85332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3c:c5:cc:22:2e:bd:13:52:24:e9:1f:83:29:
                    0c:e8:81:55:ae:65:72:de:8d:e2:7b:9e:be:eb:1b:
                    3c:e8:b5:4d:f3:9b:c7:27:d5:47:4d:8a:0a:26:3c:
                    97:1e:22:71:de:a2:1f:6d:84:f0:94:fa:3f:75:9a:
                    96:17:86:bf:95:47:57:aa:b8:22:98:f0:ad:a6:97:
                    df:71:7b:fd:ef:4e:90:24:9d:66:f9:f6:fa:47:6e:
                    1a:fa:c6:db:a7:a9:e5:d9:a0:2e:ba:14:e3:c8:4d:
                    3d:a2:85:a2:0b:44:88:7b:04:7e:14:49:b0:25:b4:
                    3e:01:7d:f0:40:72:15:6a:11:d0:5e:23:9c:27:cc:
                    65:bf:41:8b:d8:a2:66:46:f5:57:4c:3d:f6:14:59:
                    05:4d:55:75:0c:ae:32:9a:51:2c:e7:84:4d:bf:96:
                    ed:f2:59:8c:60:76:ff:56:e2:10:f1:25:02:1c:b0:
                    53:dd:66:d2:01:24:a0:94:af:3d:d5:96:11:1e:7e:
                    ad:95:4e:65:46:54:9a:bb:84:b3:5d:aa:87:7a:73:
                    c2:1d:9f:c8:e9:0d:68:9f:55:7b:fa:ee:24:0f:46:
                    95:d8:ae:7f:18:63:65:13:f6:78:66:1a:5e:6f:1a:
                    85:a0:a0:60:7b:3f:80:c2:c2:57:5d:ee:47:be:69:
                    30:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4C:B8:78:9D:D2:1D:09:B4:B0:7E:CF:C6:E0:F3:B9:5E:A8:53:32
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aUy4eJ3SHQm0sH7PxuDzuV6oUzI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:a7:b7:05:72:34:cd:9d:77:e7:76:a8:bf:de:38:fa:d2:d0:
         33:95:ac:fd:b0:a8:77:01:37:bd:0a:0f:d6:ff:0c:89:f8:e3:
         3b:46:a3:74:00:69:2c:e8:7c:73:e5:a4:f1:f1:47:04:4a:fd:
         b7:62:48:b4:ed:4b:a8:5f:62:dd:af:a6:93:44:7c:be:94:60:
         e1:a4:f5:a8:6e:df:79:6b:45:cb:df:b7:00:8e:7c:bd:40:44:
         92:ea:89:86:d5:8b:23:ca:cf:dc:49:8c:7f:71:fa:2f:00:67:
         51:f3:50:ea:57:04:4d:44:14:75:b9:21:5b:5e:7d:fb:f3:5a:
         b4:db:bc:97:f5:7f:29:34:7e:8b:ad:6f:a4:58:58:9d:a1:3b:
         a7:52:d4:f4:e1:b6:5f:36:f2:d3:c3:ae:ce:61:9e:ee:17:be:
         42:74:da:0c:21:ca:25:42:4d:3d:65:03:53:53:48:39:4d:3a:
         3c:e3:6e:cf:31:0b:c3:c8:d1:8d:97:78:bd:8c:32:4a:d0:6f:
         bf:40:ab:64:25:53:91:22:eb:6b:28:5b:6a:68:58:59:6b:f3:
         88:bd:e4:7e:53:95:9c:31:98:3b:bc:73:0b:7d:1d:88:57:0e:
         d9:6d:86:50:db:f3:37:f7:14:a1:81:d1:e5:85:bb:cd:aa:08:
         72:e9:c6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----