Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aeQSx9JwRwcb0CVIBPOsAU0RH-E.roa
File:                     aeQSx9JwRwcb0CVIBPOsAU0RH-E.roa (raw, json)
Hash identifier:          ECxRXLJkMy3fXd7V45bd0gxybNZ9mP6zCRJzSzWKoW4=
Subject key identifier:   69:E4:12:C7:D2:70:47:07:1B:D0:25:48:04:F3:AC:01:4D:11:1F:E1
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0EC7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aeQSx9JwRwcb0CVIBPOsAU0RH-E.roa
Signing time:             Tue 29 Sep 2020 09:56:08 +0000
ROA not before:           Tue 29 Sep 2020 09:56:08 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.233.200.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3783 (0xec7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:08 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=69E412C7D27047071BD0254804F3AC014D111FE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d7:bc:e4:01:b7:26:37:3a:9d:72:f6:fe:fb:
                    88:14:51:8e:94:e2:2d:c2:1c:fd:1c:34:d3:e3:a4:
                    66:e1:da:a7:9c:28:ca:f8:d6:a1:31:1e:48:69:da:
                    67:99:33:26:9b:2d:e8:0e:52:e3:08:5f:9c:b5:99:
                    d8:ec:2b:7b:d5:6a:7d:44:a3:89:53:50:5e:65:64:
                    13:99:b8:c8:56:60:f1:1b:6b:a9:b1:c3:01:d1:61:
                    73:69:f0:98:92:44:05:bc:ce:6d:a3:3e:69:27:29:
                    c5:c4:12:64:99:a0:68:fb:c8:96:99:72:0e:c1:e9:
                    29:50:19:e4:a7:d1:0d:d8:78:df:96:f5:7d:50:2a:
                    54:04:65:a9:0b:b4:f3:28:10:17:3b:16:c3:02:0b:
                    74:56:ec:41:d6:35:8e:03:be:a2:b6:27:23:34:fe:
                    e9:fd:3d:0c:a8:42:fb:6f:63:13:7c:12:7b:8f:08:
                    01:2f:cc:6e:40:a3:4b:31:de:26:f8:df:d5:dc:80:
                    53:e3:c2:12:c8:5e:eb:ca:ec:4c:b9:e6:1a:f8:5e:
                    21:ef:c0:ae:43:d7:f5:85:82:4b:48:34:f9:2b:0a:
                    38:60:9f:f6:15:6a:64:c7:dc:56:b3:b7:59:47:89:
                    e3:39:ef:8d:b3:cd:dc:10:e7:bb:46:6e:3e:51:75:
                    77:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E4:12:C7:D2:70:47:07:1B:D0:25:48:04:F3:AC:01:4D:11:1F:E1
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aeQSx9JwRwcb0CVIBPOsAU0RH-E.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:7a:3f:9e:a4:43:84:1c:14:9c:5e:1d:a8:91:cc:9e:bb:d3:
         d1:7e:86:ec:ea:a8:2c:cf:16:de:4e:01:03:0d:6b:59:bf:51:
         47:07:75:41:0c:9d:f9:75:11:5d:73:71:ea:9b:94:54:01:ab:
         0f:e6:fd:74:a6:57:4e:31:7a:f8:f8:25:d3:16:f5:79:f7:01:
         90:33:73:ee:53:b9:6e:54:dc:c0:72:4b:83:e7:8e:f1:a0:b9:
         e0:10:97:60:ea:a7:c2:60:72:27:6b:36:85:f2:31:95:50:4f:
         ca:c3:18:7d:e2:20:52:a9:b6:c5:29:98:08:19:6a:48:fe:b6:
         40:a5:62:37:da:85:52:0c:01:9e:c3:59:9d:1e:e2:ff:22:43:
         cb:d4:49:14:c5:69:9a:27:99:bd:09:10:e2:b4:7e:12:f3:c9:
         88:47:9b:ff:69:a4:5e:4c:81:12:02:ea:27:f1:74:69:b5:ba:
         3f:ea:5e:c8:e8:2f:77:cb:5b:df:d5:26:19:40:93:5d:9d:03:
         ed:6d:78:5a:58:fb:37:c3:d7:bd:3c:4f:64:19:9f:1e:7b:25:
         a1:1e:e0:fa:b8:35:1c:66:4b:2d:a0:65:72:15:24:b5:27:2b:
         7f:7a:ac:d6:46:55:0f:2d:8b:77:27:f0:52:5d:12:79:79:a0:
         61:ca:ab:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----