Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/asO8OqBK_tt5CnRJyAOGUivxhNY.roa
File:                     asO8OqBK_tt5CnRJyAOGUivxhNY.roa (raw, json)
Hash identifier:          qoeCGMNxPNLabrGU3esi65+29csQGFm1ehiRErkGZnA=
Subject key identifier:   6A:C3:BC:3A:A0:4A:FE:DB:79:0A:74:49:C8:03:86:52:2B:F1:84:D6
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1483
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/asO8OqBK_tt5CnRJyAOGUivxhNY.roa
Signing time:             Sun 07 Feb 2021 11:58:56 +0000
ROA not before:           Sun 07 Feb 2021 11:58:56 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.188.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5251 (0x1483)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 11:58:56 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6AC3BC3AA04AFEDB790A7449C80386522BF184D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3b:f3:b6:df:c9:e7:01:a6:85:ab:28:b2:c5:
                    e8:e0:d3:3b:54:72:96:21:19:32:b1:6b:b3:3e:74:
                    6c:44:91:bd:7c:c0:55:1d:22:ff:bd:af:b7:af:0b:
                    05:6f:5e:b0:1c:f9:68:4c:66:e8:f4:bb:dd:8f:74:
                    02:e3:b7:5e:89:49:3d:01:b6:f6:54:48:33:53:e7:
                    a8:2a:13:28:3b:51:fb:a3:20:2e:2a:73:f1:b7:0c:
                    e5:11:f2:8c:e9:65:0c:92:07:75:1a:f0:93:e5:55:
                    9b:13:ca:e4:32:43:6c:08:15:8b:d9:f2:c2:b5:87:
                    fe:35:cd:2e:6c:e3:ef:b1:48:2a:2c:3f:cc:f7:b4:
                    01:76:00:bf:bf:fd:6d:65:2e:e9:d2:f5:3e:35:0c:
                    47:45:33:62:fa:4b:f1:cd:16:3b:3b:50:1e:b1:48:
                    54:76:87:fe:04:56:27:3e:6f:3d:a8:3c:06:49:b2:
                    83:08:b5:c2:03:59:2e:29:33:bf:25:96:03:8e:2c:
                    d0:5b:ca:3b:cc:8f:d9:1a:c6:5a:b6:3e:ba:ab:34:
                    47:3e:18:e8:f4:b3:50:2e:58:f1:90:62:37:c6:75:
                    8a:58:32:fc:f0:13:2a:c1:9d:dc:a3:da:a5:da:1a:
                    61:50:d2:81:20:e5:97:81:71:e6:fe:04:70:a0:4c:
                    e9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C3:BC:3A:A0:4A:FE:DB:79:0A:74:49:C8:03:86:52:2B:F1:84:D6
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/asO8OqBK_tt5CnRJyAOGUivxhNY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:95:a3:20:f3:e3:bf:b3:60:37:75:02:12:ec:fc:d6:cc:d2:
         ef:49:2c:4d:18:7c:26:92:02:a1:19:66:ce:63:33:4c:d9:af:
         15:d1:cc:87:49:64:69:94:48:7c:59:9d:ed:90:aa:5c:a7:a3:
         97:f3:8c:b0:7d:85:c8:b1:e3:e4:98:5d:d7:3f:50:97:cd:82:
         96:d4:48:0f:12:2e:b5:18:52:11:30:11:f7:7a:b9:e6:a5:b6:
         43:31:b9:93:41:94:e0:e9:40:38:4a:c1:fb:44:00:6a:11:45:
         2c:6a:ff:44:97:2f:eb:19:99:cf:40:05:92:b0:bc:19:f8:47:
         5c:ad:c3:06:5e:76:f1:00:89:f2:ce:ba:51:07:ad:15:a3:f8:
         6b:25:bb:88:92:32:a2:bf:e0:5e:3e:87:84:dc:5f:f6:ff:87:
         93:fe:13:65:56:ce:34:86:aa:2f:38:6d:ff:1f:7c:a8:3b:f0:
         df:8b:c0:5d:ab:0c:fa:54:34:c4:53:ba:6b:5d:b7:b3:40:7b:
         27:cf:db:24:d6:2b:fe:e9:d5:ce:dd:44:b1:d2:67:2a:6e:de:
         0f:df:77:64:62:fe:60:2c:f9:55:02:73:13:0e:6e:4f:d2:58:
         98:5b:12:31:7d:70:ec:f9:e7:ae:8f:88:72:4b:ef:4a:57:a5:
         fd:99:82:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----