Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/c_Yt89vn3tKHBCBQ8N8IHxhDhPk.roa
File:                     c_Yt89vn3tKHBCBQ8N8IHxhDhPk.roa (raw, json)
Hash identifier:          dxK4vdny0neEhXVdZTfvjOJwYb3hgSrRT6QoR6iYcys=
Subject key identifier:   73:F6:2D:F3:DB:E7:DE:D2:87:04:20:50:F0:DF:08:1F:18:43:84:F9
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E00
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/c_Yt89vn3tKHBCBQ8N8IHxhDhPk.roa
Signing time:             Tue 29 Sep 2020 09:55:14 +0000
ROA not before:           Tue 29 Sep 2020 09:55:14 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        211.76.115.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3584 (0xe00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:14 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=73F62DF3DBE7DED287042050F0DF081F184384F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:69:6f:41:b1:17:dd:77:57:6d:35:e4:25:e2:
                    38:78:84:dd:be:2e:04:d3:8a:cd:65:f0:e8:eb:04:
                    0a:a1:02:8a:4e:b4:f5:39:96:82:53:a7:38:46:83:
                    96:66:d0:40:a6:16:6e:58:cc:0d:46:09:06:10:e9:
                    d1:74:c9:0c:07:c8:97:f3:a1:ba:83:52:76:8e:d5:
                    1c:2b:bc:6e:ef:07:66:32:4b:44:e1:80:33:3f:c0:
                    d8:59:7d:62:f5:4e:94:23:49:82:e6:f8:a0:60:34:
                    c2:fe:fe:19:83:5a:38:c6:43:f4:d6:8e:2c:0e:1b:
                    45:c0:0f:9e:3d:31:fe:fc:0b:08:e0:c2:b2:90:5c:
                    52:75:a7:de:77:fe:f7:f7:59:29:dc:11:a7:12:cf:
                    e6:25:4f:92:1e:13:46:cb:84:c9:51:16:d5:f7:12:
                    2d:aa:36:20:d8:29:e4:1f:83:e7:66:06:77:f3:d4:
                    20:b7:56:ba:49:a6:98:92:d2:e4:47:f0:56:4a:66:
                    4f:2c:c2:3f:2e:68:a7:35:c0:1c:e9:d8:ee:71:e3:
                    69:b1:b0:d3:68:bd:fc:04:a1:88:c1:b4:c7:1c:31:
                    28:f0:9a:ed:a8:24:11:75:61:b1:2b:76:33:70:44:
                    76:db:83:41:f1:b1:6b:3c:10:a1:81:e5:38:9b:3c:
                    84:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F6:2D:F3:DB:E7:DE:D2:87:04:20:50:F0:DF:08:1F:18:43:84:F9
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/c_Yt89vn3tKHBCBQ8N8IHxhDhPk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:20:f2:d0:60:dd:82:49:29:33:ce:fc:a0:8d:97:34:95:c8:
         57:40:27:bd:82:69:c7:e2:a0:6f:d3:29:fd:1a:1f:f0:28:3c:
         b4:d8:5a:00:df:22:e1:8e:21:79:43:b1:f5:cb:93:92:b3:d4:
         4c:0f:8f:20:ae:f7:44:02:85:42:7a:06:cd:f4:92:b8:2e:ac:
         38:75:79:1e:02:dd:3e:91:41:88:af:3e:e0:9a:df:a0:0d:9a:
         21:7f:0f:1c:2d:2d:71:66:c9:cf:d6:95:06:c1:60:81:e2:1a:
         db:10:9b:9f:43:06:a3:fe:d2:d1:aa:0a:ea:2d:3e:bb:9e:2d:
         b7:68:cf:6e:c5:cd:49:cb:ec:7f:f0:a5:5d:e9:ee:1f:c1:d8:
         e1:a3:67:06:74:75:08:4d:b9:97:e5:79:28:f8:0e:b8:a5:96:
         1d:4d:a9:52:b6:d8:e7:dd:46:14:aa:6b:06:0c:fe:d3:99:61:
         4b:02:b9:1b:f0:fa:d2:96:88:ec:82:e0:f0:eb:a0:e0:5e:8e:
         da:72:0a:8e:31:18:3c:e8:55:e7:6f:aa:0c:29:b1:df:55:f5:
         4f:d4:88:c9:17:e2:cc:ae:92:29:51:d7:03:5c:3f:89:22:a4:
         24:a9:67:df:73:6b:a5:69:74:a4:4d:68:36:4c:75:c0:05:da:
         fa:6b:af:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----