Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dtR7GckPapynYOnQx0klo1XNrG8.roa
File:                     dtR7GckPapynYOnQx0klo1XNrG8.roa (raw, json)
Hash identifier:          pxTFxVFtnajnjAhtpC5ni8MMs2gLtXkAg7uW5wdXuHc=
Subject key identifier:   76:D4:7B:19:C9:0F:6A:9C:A7:60:E9:D0:C7:49:25:A3:55:CD:AC:6F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0CE1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dtR7GckPapynYOnQx0klo1XNrG8.roa
Signing time:             Tue 29 Sep 2020 09:53:55 +0000
ROA not before:           Tue 29 Sep 2020 09:53:55 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.192.128.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3297 (0xce1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:53:55 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=76D47B19C90F6A9CA760E9D0C74925A355CDAC6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:23:09:50:a1:8e:6f:47:31:bc:aa:7c:af:bd:
                    43:6a:b5:f7:70:4a:6b:fd:f7:b3:1a:d2:f0:93:6e:
                    c7:bc:8c:e1:c8:af:b3:08:9f:24:ec:7b:1e:f7:e0:
                    d6:7a:1e:4e:3c:35:42:a6:0a:c5:cc:73:7c:4a:93:
                    39:f9:d9:16:47:1d:38:11:e8:4b:5d:e5:12:35:f9:
                    ef:19:46:ec:66:f9:41:bd:77:d2:f1:e2:fb:f8:15:
                    de:c8:53:c5:a9:af:91:3d:1b:ed:e5:a2:42:d6:b5:
                    5d:d3:3e:b0:85:ed:9f:81:cb:83:6d:2d:2b:d9:4c:
                    9f:ff:0e:92:6d:20:35:db:a8:e7:36:97:98:4e:3a:
                    b4:12:0f:f6:52:ec:a6:ea:9f:61:a2:47:d5:4f:d9:
                    ca:3e:ab:d8:60:b6:bd:90:1b:a8:f0:a4:73:2a:66:
                    28:bf:06:fc:09:65:75:98:8a:93:93:37:ce:96:ce:
                    7b:fb:a7:2d:a4:59:53:90:22:be:d1:3c:36:a9:d0:
                    60:75:a6:2f:4c:ef:e5:73:0b:e9:5a:8c:c1:b1:09:
                    d6:64:d1:8a:ad:4f:42:4e:fa:c5:7f:f7:f4:dc:0c:
                    2a:ea:73:cf:df:2a:b6:95:a7:ff:ff:1a:30:d5:e8:
                    91:63:61:8e:46:47:1b:4d:13:e3:e6:c1:8f:cc:ce:
                    1f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D4:7B:19:C9:0F:6A:9C:A7:60:E9:D0:C7:49:25:A3:55:CD:AC:6F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dtR7GckPapynYOnQx0klo1XNrG8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:9f:10:78:5c:25:1e:5d:c7:ff:e3:95:8c:ef:81:e6:3a:40:
         33:b2:6e:c1:a7:42:cc:5b:d8:a9:97:ec:fc:61:a4:eb:27:e9:
         30:57:fc:f0:0e:a5:a9:51:3c:62:a4:5d:5d:5d:4d:44:94:69:
         88:51:0d:97:77:35:c7:cb:c7:0c:4f:a3:0f:4d:4a:9f:db:c3:
         14:10:77:07:1d:8f:c1:44:9e:d0:68:5c:20:e1:34:cb:c0:c3:
         fa:2f:ad:5e:23:ea:a2:1f:07:16:0f:ae:e2:da:61:e3:77:c4:
         c5:c6:d4:5f:b6:7a:50:42:c1:92:7d:15:52:e8:85:ab:3d:7d:
         be:94:0b:ef:f4:88:46:4b:04:7b:e3:67:55:86:04:90:ea:f3:
         46:76:c7:41:d4:5a:6c:20:4a:f5:23:d6:ec:2e:b4:ab:83:a1:
         bb:30:66:5e:29:70:58:97:74:48:ac:14:6d:7c:fd:1a:e8:aa:
         55:01:24:a7:07:82:e0:ea:98:24:12:f8:11:35:c4:79:a0:df:
         44:2e:67:45:f6:09:92:e4:a9:61:60:15:12:86:26:cc:4f:b8:
         fa:39:2b:6d:7a:6f:cb:f6:0e:ea:38:c7:4b:16:0f:50:d1:5a:
         fa:71:48:4a:69:14:89:78:66:e2:4c:e7:c5:66:ac:a7:11:d2:
         ab:b2:72:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----