Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aaWTDQrf8KI2A1sWr51eBRO50bY.roa
File:                     aaWTDQrf8KI2A1sWr51eBRO50bY.roa (raw, json)
Hash identifier:          +Qy6MCYHWE8XRSuJSlmEHlB0oNsw15vwSnUY4Ffumns=
Subject key identifier:   69:A5:93:0D:0A:DF:F0:A2:36:03:5B:16:AF:9D:5E:05:13:B9:D1:B6
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0EC8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aaWTDQrf8KI2A1sWr51eBRO50bY.roa
Signing time:             Tue 29 Sep 2020 09:56:08 +0000
ROA not before:           Tue 29 Sep 2020 09:56:08 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        211.76.120.128/25 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3784 (0xec8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:08 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=69A5930D0ADFF0A236035B16AF9D5E0513B9D1B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:11:07:ac:ad:83:2f:37:51:c6:40:be:c9:b4:
                    04:4c:c3:d7:08:31:c6:b8:1d:91:1b:ce:15:5b:36:
                    65:cf:96:ec:ee:2f:d3:d5:44:69:30:a3:f6:99:1b:
                    c6:32:94:eb:ca:f0:6d:b3:b7:4f:22:00:4a:c1:93:
                    1c:f6:43:b7:72:ec:47:62:70:3d:fc:17:bf:bb:21:
                    1b:d7:96:d3:f8:13:cd:41:50:d1:ff:73:f9:3a:04:
                    b0:7c:b4:27:18:9e:4a:56:58:fc:9b:1c:95:4a:39:
                    8b:34:7e:ff:af:da:72:f7:04:c8:d5:7b:04:dc:2a:
                    be:82:b3:8b:c4:f7:dd:d8:d7:04:f1:48:91:1f:9b:
                    27:3b:ee:24:5c:1d:ef:e7:85:dd:c2:1d:15:f6:16:
                    0c:6f:f1:e4:43:c1:13:1a:c6:ba:b1:eb:d8:74:fb:
                    8a:06:f0:c2:81:66:b2:30:ed:cd:74:a4:7a:b6:a8:
                    15:e1:3d:ba:d1:c0:26:fe:43:58:e9:3a:fe:59:ad:
                    2d:a5:84:02:68:91:aa:05:94:3a:e2:ad:dc:00:8e:
                    64:1e:e7:92:30:87:6d:ed:ab:22:90:b5:da:44:66:
                    68:f4:b5:30:6d:14:bf:cd:e9:a2:ea:ef:9d:ed:3f:
                    52:4d:05:ca:13:97:33:0f:6f:b1:55:74:3b:76:36:
                    a1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A5:93:0D:0A:DF:F0:A2:36:03:5B:16:AF:9D:5E:05:13:B9:D1:B6
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aaWTDQrf8KI2A1sWr51eBRO50bY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.120.128/25

    Signature Algorithm: sha256WithRSAEncryption
         44:38:df:6f:fd:47:71:c4:ec:bf:63:5a:75:d3:b8:a1:c7:5a:
         6f:1a:36:77:f9:42:39:1a:5a:78:12:e8:ad:1b:a9:04:41:f5:
         4d:44:70:69:50:6c:00:eb:83:7d:67:c4:80:b2:32:8a:b8:70:
         c7:35:d9:8a:30:bc:7f:8a:89:44:a1:cd:c7:38:30:f8:28:17:
         9f:2d:85:ed:d5:e1:57:48:16:6d:a9:4f:9d:95:e4:ac:22:aa:
         84:e4:d1:c5:55:51:6b:13:06:42:e3:c3:a0:e7:f3:09:39:6b:
         fe:3c:ae:de:fc:b1:87:de:69:13:a0:4f:58:74:57:92:26:a6:
         65:82:62:bf:aa:1f:de:8e:8a:a1:af:6d:e6:97:a1:04:60:8e:
         21:5a:5f:aa:18:88:28:88:29:5d:ca:87:ac:00:1d:d8:ff:c5:
         97:84:6f:23:95:5a:f7:39:fd:44:a4:f9:a3:ff:7c:28:93:b8:
         c4:50:58:fb:75:c8:0a:bc:8a:d3:0e:79:e6:c6:9c:de:af:91:
         07:56:e7:93:b5:a9:52:54:e3:e7:67:8f:0a:22:14:fc:49:df:
         a0:51:38:19:99:24:42:fa:85:9f:53:46:60:aa:88:87:94:03:
         7f:4c:7e:e0:69:cd:b1:13:b7:2f:4e:87:b2:b3:ea:6c:c9:f8:
         ce:b5:6f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----