Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cqA1t8F62uBb3as0qV9NxO_o_vg.roa
File:                     cqA1t8F62uBb3as0qV9NxO_o_vg.roa (raw, json)
Hash identifier:          hxdJIlScCoI7qdzmRSD8iHongdhH12+OHuWiBrAuU8s=
Subject key identifier:   72:A0:35:B7:C1:7A:DA:E0:5B:DD:AB:34:A9:5F:4D:C4:EF:E8:FE:F8
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1445
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cqA1t8F62uBb3as0qV9NxO_o_vg.roa
Signing time:             Sun 07 Feb 2021 11:58:01 +0000
ROA not before:           Sun 07 Feb 2021 11:58:01 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.193.108.132/30 maxlen: 30

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5189 (0x1445)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 11:58:01 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=72A035B7C17ADAE05BDDAB34A95F4DC4EFE8FEF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2a:d0:46:94:68:f4:98:d3:ee:ef:26:a6:75:
                    ee:8c:8f:33:bd:5f:25:d9:69:d4:54:1e:12:90:49:
                    db:8b:0f:58:23:a4:ec:8f:21:57:75:bb:45:99:70:
                    72:b9:17:f2:2e:84:d2:fd:ac:2c:7f:e2:94:0f:bc:
                    ed:f0:ca:e6:bb:39:c6:13:7b:b5:34:08:1f:0b:7b:
                    cf:88:69:30:9b:24:e4:e3:70:71:f1:54:8b:8e:54:
                    cb:c8:c9:9c:94:57:56:ae:47:76:c0:3b:2a:4c:d1:
                    fe:60:84:a6:1d:11:84:7c:0e:38:c3:f3:d8:57:55:
                    17:0c:f0:63:1a:fc:ba:01:c1:73:3a:eb:1d:23:f2:
                    d8:9b:bb:9f:b5:de:81:a2:6f:4c:51:31:cb:03:33:
                    5e:02:db:c8:77:16:3e:7f:93:d2:96:f1:b0:ee:7d:
                    56:27:a6:e4:94:b4:c7:bb:1d:c0:ab:9a:c3:d4:33:
                    55:1d:c5:6c:3f:51:86:a9:d1:f6:20:9f:60:6d:86:
                    c1:23:70:3c:e3:e2:34:de:81:f3:29:7c:85:6f:92:
                    f5:93:d9:bb:bf:e5:dd:fe:ec:e4:6c:3f:92:6d:14:
                    ea:b1:ed:33:c5:2a:77:b4:a8:3e:91:78:ca:84:1b:
                    7b:5c:30:2d:7f:ac:ad:7c:24:1f:e8:c0:92:cf:48:
                    18:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A0:35:B7:C1:7A:DA:E0:5B:DD:AB:34:A9:5F:4D:C4:EF:E8:FE:F8
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cqA1t8F62uBb3as0qV9NxO_o_vg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.108.132/30

    Signature Algorithm: sha256WithRSAEncryption
         3c:6f:e5:8b:34:49:ff:28:92:a6:77:36:e5:ef:a6:8f:6b:e6:
         57:c4:95:f6:58:77:7d:8a:02:fe:db:63:98:73:fa:a3:85:44:
         de:50:62:6b:d8:de:c6:c8:84:87:56:4a:94:63:9f:61:b1:f5:
         47:7c:c8:30:02:84:37:95:62:73:8b:fc:bf:72:01:d5:83:0a:
         de:4f:ae:d5:6d:24:e3:4f:89:a0:65:61:23:d1:bc:0a:6e:39:
         b4:17:af:bc:d6:12:85:5b:65:8f:f5:1c:1c:49:b7:80:4f:51:
         58:81:53:f8:a2:5f:f4:d1:ba:98:96:98:d7:7c:87:79:81:50:
         3b:69:62:1f:55:a1:11:4b:2b:ad:6b:f6:d5:2e:6d:95:9c:8d:
         5c:fc:33:11:81:4c:3f:86:16:0c:54:4f:53:5b:81:6c:ae:71:
         e5:7d:8d:70:b4:dd:34:25:ee:12:f2:44:24:e0:87:7a:40:27:
         c7:60:af:ab:66:51:6b:bf:2c:e6:3d:b4:28:c3:08:36:c5:fc:
         33:76:59:9b:4d:97:8e:10:e9:4f:f7:37:14:56:c0:d5:09:36:
         d6:7f:cf:3a:11:9c:ed:f3:e7:47:15:8c:5b:d2:92:d4:33:4a:
         8f:1c:f4:a4:cf:1a:44:9f:ac:0d:02:b0:ea:f5:ff:15:86:41:
         c5:44:0c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----