Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/atNlbBJmQV_1oHv-7oK_9SQaYgs.roa
File:                     atNlbBJmQV_1oHv-7oK_9SQaYgs.roa (raw, json)
Hash identifier:          AthC2upgvIN0pNU9NM9yrX2O1pKaSoCp94IhNkEGJM0=
Subject key identifier:   6A:D3:65:6C:12:66:41:5F:F5:A0:7B:FE:EE:82:BF:F5:24:1A:62:0B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D0C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/atNlbBJmQV_1oHv-7oK_9SQaYgs.roa
Signing time:             Tue 29 Sep 2020 09:54:07 +0000
ROA not before:           Tue 29 Sep 2020 09:54:07 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.233.96.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3340 (0xd0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:07 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6AD3656C1266415FF5A07BFEEE82BFF5241A620B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cf:65:77:63:0e:21:5c:3e:30:e3:81:d4:01:
                    82:b1:fb:67:b4:d0:99:57:a1:b3:cd:8f:b0:3e:5e:
                    db:cf:fe:e2:23:51:61:5b:ea:25:2b:1f:13:ad:ae:
                    c6:e5:f8:46:13:64:b4:83:5f:7a:3e:80:d7:cc:47:
                    f4:52:af:a3:ee:05:16:55:7b:04:98:11:95:72:b9:
                    4d:89:da:12:d3:9b:d0:b2:d4:ec:dd:89:49:d3:63:
                    69:90:85:d9:1d:c3:b2:b8:be:7b:78:21:0d:44:a2:
                    92:a6:78:80:a4:65:44:64:1d:c8:bc:fe:f7:ca:5a:
                    2c:71:54:e7:df:b0:8e:81:26:3b:81:37:20:a2:99:
                    55:f0:54:20:94:19:0c:90:af:1b:87:17:e9:a9:2e:
                    cd:03:da:ef:ec:b8:9f:99:e2:02:eb:4e:06:d4:f3:
                    23:8d:6c:44:67:b8:4c:23:6c:ed:6d:89:39:d2:14:
                    ba:30:fb:e2:8a:8d:0f:4c:58:8e:26:47:81:81:58:
                    9a:75:8b:97:c8:1c:14:35:d2:27:53:92:71:53:2c:
                    d4:27:37:1a:5a:71:02:7d:d1:31:02:d1:29:3f:aa:
                    a2:cf:a3:c2:18:c0:b4:28:cc:b2:fe:03:80:a8:5c:
                    88:a8:ea:09:25:42:eb:0a:6b:83:0a:a2:ef:8c:be:
                    07:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D3:65:6C:12:66:41:5F:F5:A0:7B:FE:EE:82:BF:F5:24:1A:62:0B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/atNlbBJmQV_1oHv-7oK_9SQaYgs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:29:23:d7:ad:b7:d2:45:d9:f0:c9:c7:e6:d5:7e:c8:db:b0:
         96:22:91:ed:60:bb:a5:f0:ea:17:09:ad:4b:f3:ad:41:8b:5f:
         66:3b:d2:44:45:43:49:dd:a6:01:e8:75:50:d3:09:a6:f9:66:
         a1:f3:43:58:79:92:51:9a:a8:c5:44:e7:54:08:87:9f:76:63:
         19:fb:71:a5:92:9a:4f:df:b6:0e:ca:ad:3f:41:2f:6f:ad:eb:
         aa:ca:4b:8b:4a:c1:d4:84:24:0e:86:d1:0e:16:84:19:a9:9b:
         f1:a7:87:c8:1a:d0:7c:7e:fe:0d:20:f3:77:36:ee:87:19:a7:
         9d:54:a5:3e:a6:b6:a7:c3:cb:b5:49:48:72:3a:e4:cb:46:a9:
         58:b0:1b:53:1a:ae:e2:97:23:e2:f7:8e:63:cf:f6:1a:b2:12:
         f3:76:44:a8:7d:b9:c0:ba:0b:b7:34:13:40:14:9c:29:04:6c:
         26:c1:94:4a:19:ba:e3:76:7c:a0:c9:da:a1:c0:99:32:35:6a:
         b7:0c:2e:6c:88:94:d8:62:e1:a5:f5:39:9a:4e:7e:a5:4c:60:
         98:ac:57:88:b8:31:6a:a3:c9:12:3f:7d:d8:5a:5f:9b:95:0e:
         3c:b8:54:bd:b9:18:fa:90:70:3c:c4:13:db:46:98:56:0d:44:
         63:ad:bf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----