Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b3VBXIO01ronENDlqKOhI-8P7QE.roa
File:                     b3VBXIO01ronENDlqKOhI-8P7QE.roa (raw, json)
Hash identifier:          fikssGoWzPRhkphKHI4ZcECtGGGtzMCm/YRHxUOkvWI=
Subject key identifier:   6F:75:41:5C:83:B4:D6:BA:27:10:D0:E5:A8:A3:A1:23:EF:0F:ED:01
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0EF0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b3VBXIO01ronENDlqKOhI-8P7QE.roa
Signing time:             Tue 29 Sep 2020 09:56:19 +0000
ROA not before:           Tue 29 Sep 2020 09:56:19 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.184.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3824 (0xef0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:19 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6F75415C83B4D6BA2710D0E5A8A3A123EF0FED01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:54:c3:8f:29:c9:b8:2b:b4:13:1d:eb:85:c9:
                    81:74:63:02:55:c7:eb:f1:e4:c3:63:ed:0c:5e:95:
                    68:d4:70:44:fa:1f:a1:6e:c0:2b:29:ee:72:e5:f0:
                    22:f2:0f:16:ad:44:59:90:d1:9c:b3:e8:3e:99:d1:
                    f4:19:4a:ac:9f:a1:41:da:20:a4:75:7a:fc:03:80:
                    f3:62:6d:11:e4:3f:72:d4:f8:32:33:0b:b9:1c:04:
                    72:e6:4b:5f:f9:23:12:57:67:f2:ba:bc:c6:20:04:
                    6a:24:12:66:98:ed:aa:72:80:95:a3:8b:81:cf:23:
                    bb:d9:88:89:9c:41:03:c0:7a:42:7a:ca:54:79:05:
                    d3:cc:7b:82:90:6b:54:71:3a:00:97:d4:b6:48:2a:
                    38:ae:ee:d7:6f:53:46:3a:30:ec:3c:19:c9:f0:f7:
                    6a:55:31:7e:ad:76:87:84:f4:f8:ba:7c:bd:de:26:
                    39:07:dc:e4:6e:aa:44:16:68:5d:99:ce:21:b7:a5:
                    41:15:65:73:bc:4b:9a:17:92:51:73:61:18:db:8b:
                    d2:5e:3a:3e:e3:32:3f:f2:a2:97:7f:ee:2c:94:47:
                    a2:c0:0f:c8:c1:d4:89:b3:a7:e8:dc:43:cc:f0:21:
                    37:d2:b4:81:a0:7c:02:3a:73:f7:43:13:d4:aa:48:
                    13:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:75:41:5C:83:B4:D6:BA:27:10:D0:E5:A8:A3:A1:23:EF:0F:ED:01
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b3VBXIO01ronENDlqKOhI-8P7QE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1c:95:ee:62:b1:84:08:c9:c7:de:6c:a1:7a:ff:b8:6d:83:ea:
         d5:66:06:50:0e:8c:a5:d1:72:ee:7f:45:0a:a9:1b:82:93:cd:
         3a:44:19:6f:98:eb:01:de:48:85:ed:46:f4:52:e7:57:3f:e5:
         f7:aa:de:d6:37:c3:16:77:bf:4a:91:eb:34:ae:6a:b2:24:8e:
         8c:54:aa:73:5a:08:39:8a:3b:e8:f2:61:1b:7f:00:76:65:62:
         41:7b:64:60:81:a9:3e:e0:ed:c4:b8:29:d5:75:d9:c5:21:65:
         f2:c6:cf:e4:a4:96:63:13:e6:44:9a:7e:c2:19:34:b9:0d:39:
         74:42:32:b7:e1:79:9e:fe:cb:11:15:ec:c2:7a:7a:5d:47:58:
         33:31:6e:57:58:e3:ed:54:25:48:c6:7e:42:bd:d3:05:d6:6c:
         dc:42:89:a7:6d:7d:02:72:c7:d5:52:46:b4:b7:6d:05:a8:a3:
         6b:f6:d2:f7:f5:42:59:c8:85:c1:ee:ee:e8:0f:85:09:0a:21:
         35:18:84:37:5d:69:65:c0:23:93:09:e5:33:bf:2e:de:e1:2f:
         ce:79:15:5f:d0:34:47:73:b2:4c:aa:b2:fa:4b:d7:da:41:4b:
         46:9f:87:3c:93:22:5d:ed:76:8b:30:ba:4c:42:40:25:94:0a:
         b3:76:6f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----