Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gFNf4Kb_16MdZrKNMYzEs04UtsU.roa
File:                     gFNf4Kb_16MdZrKNMYzEs04UtsU.roa (raw, json)
Hash identifier:          kJEfYMUZP97SaPZNzy5nDUge3zPPjmQLXkVzsrsTFZM=
Subject key identifier:   80:53:5F:E0:A6:FF:D7:A3:1D:66:B2:8D:31:8C:C4:B3:4E:14:B6:C5
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F7E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gFNf4Kb_16MdZrKNMYzEs04UtsU.roa
Signing time:             Tue 29 Sep 2020 09:57:02 +0000
ROA not before:           Tue 29 Sep 2020 09:57:02 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.233.211.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3966 (0xf7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:57:02 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=80535FE0A6FFD7A31D66B28D318CC4B34E14B6C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:16:8c:f9:b3:ff:a7:8f:e1:9f:56:2e:65:97:
                    79:11:a5:cb:c1:0a:84:b3:62:f0:16:06:29:af:0c:
                    03:69:55:ba:29:33:e5:34:61:1d:e8:a2:49:7e:ac:
                    41:98:0b:82:e1:92:65:5a:85:d8:61:d4:77:99:e1:
                    e4:7a:b6:0d:64:15:7d:de:5e:5d:86:87:dd:7a:ea:
                    61:09:1b:e9:60:50:3c:ee:2e:25:c6:15:16:3d:65:
                    72:5d:24:14:bd:7c:ad:e4:cd:92:f2:d2:0e:05:30:
                    cd:c8:7b:81:98:e6:ed:30:8a:9d:40:d4:1e:14:be:
                    45:a5:49:07:f6:d4:4e:7c:72:c6:62:81:cd:65:ea:
                    7a:43:62:af:57:e5:ff:e8:3f:1d:e1:f0:ce:56:29:
                    43:a4:05:1c:83:ee:01:7e:0a:3d:7d:fc:01:6d:ef:
                    3a:4d:de:4b:a3:d2:d2:e1:f9:4d:58:3a:8c:2e:ce:
                    2a:b4:28:2d:6f:43:f6:c9:73:a9:1a:2e:dc:df:4c:
                    57:93:32:3d:14:04:ae:00:97:38:19:d6:71:73:85:
                    6e:28:1c:12:1b:1d:2c:60:7b:81:ad:71:96:08:08:
                    3c:be:6c:a7:73:f7:c0:34:be:81:97:95:24:f2:76:
                    30:06:49:9c:aa:0a:35:6c:4a:56:0f:57:5c:a3:e5:
                    9c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:53:5F:E0:A6:FF:D7:A3:1D:66:B2:8D:31:8C:C4:B3:4E:14:B6:C5
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gFNf4Kb_16MdZrKNMYzEs04UtsU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:70:1f:53:cb:33:54:55:4f:d1:cd:da:fe:3d:39:da:37:52:
         2a:4b:45:eb:86:14:3d:1c:c6:4b:5e:14:93:6d:c4:86:95:d0:
         84:02:16:1e:68:ff:4b:e5:cf:6e:19:8f:c4:a4:8f:ab:0c:c1:
         9f:95:17:0e:c6:58:86:2e:cd:f0:7f:ba:92:4c:6e:17:4c:4d:
         2b:c1:d2:c8:f3:31:38:63:0c:6b:e0:9d:30:df:d0:3d:37:b1:
         ce:31:02:ce:e9:5c:1a:e2:20:a9:5f:fc:09:11:31:5e:55:ae:
         60:bc:f2:79:28:2c:94:86:b7:9f:72:b5:21:80:b8:6b:fe:eb:
         08:3e:31:a0:e2:43:9c:f5:17:69:6d:61:f0:df:d8:9e:00:9e:
         a9:53:f0:7f:e1:96:67:a7:29:f5:f9:c2:69:d1:af:f3:2f:99:
         34:a0:ee:89:b8:91:c1:40:31:14:6d:bd:9a:90:60:da:ac:22:
         20:0f:e3:25:fb:2c:08:7c:82:bf:33:91:49:c1:1d:08:ff:cb:
         8c:61:6a:80:74:c8:0f:bd:90:7d:53:a8:62:d3:fe:20:7f:b5:
         c3:f2:13:d1:7b:11:c4:d3:e8:44:1c:77:7b:19:c4:c8:b8:24:
         00:1b:6a:25:97:0b:83:53:34:05:95:9a:24:ae:41:82:b0:77:
         9b:0e:3b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----