Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gsVaNaah5rc0JcOP-2l02DcpaiU.roa
File:                     gsVaNaah5rc0JcOP-2l02DcpaiU.roa (raw, json)
Hash identifier:          DY1Va7f51VokXKwNra1+d4mln/LPimKSVJ3njhXJ2bk=
Subject key identifier:   82:C5:5A:35:A6:A1:E6:B7:34:25:C3:8F:FB:69:74:D8:37:29:6A:25
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D22
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gsVaNaah5rc0JcOP-2l02DcpaiU.roa
Signing time:             Tue 29 Sep 2020 09:54:14 +0000
ROA not before:           Tue 29 Sep 2020 09:54:14 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.168.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3362 (0xd22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:14 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=82C55A35A6A1E6B73425C38FFB6974D837296A25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:92:c2:1b:9f:59:32:ee:d6:ca:7a:8f:d4:e2:
                    bf:8f:e1:4b:98:8e:5e:fa:1b:87:42:ec:a1:62:a9:
                    18:42:92:52:f9:48:c6:85:cb:2e:17:a9:1f:db:e3:
                    fd:80:26:a4:c5:db:19:ad:bd:93:b1:50:6a:e4:eb:
                    8f:f0:2d:db:b0:ac:ad:64:ac:2f:17:9c:57:8f:b4:
                    fd:b7:f5:62:01:f9:52:a6:e2:01:ca:1e:51:57:aa:
                    a8:89:36:9b:af:98:a5:1f:71:8c:60:66:a3:1c:b6:
                    2d:70:62:0d:cf:46:97:8b:3c:28:18:c2:43:e3:3c:
                    d8:19:70:df:b6:fb:d9:1b:dd:3e:20:02:05:77:85:
                    b9:0c:48:19:ed:e6:f5:da:ee:47:97:93:a1:e6:6a:
                    88:c1:41:19:4e:68:a5:6e:0b:80:4e:e7:73:d8:ab:
                    e8:37:b9:7f:3c:e9:8a:5a:a2:0e:49:a6:02:01:e2:
                    5a:13:48:c2:bd:6c:2d:2e:07:83:8c:71:05:df:4b:
                    48:49:0b:1e:d9:9a:10:ed:36:21:6d:42:dc:c7:61:
                    0f:3b:6a:fb:bc:3a:f1:f5:da:8b:df:44:73:2a:94:
                    9d:b8:13:0c:5a:dd:e7:d4:71:88:da:c1:cc:d0:d8:
                    43:af:f6:de:0d:80:3b:60:bb:65:0b:93:4e:83:38:
                    ce:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C5:5A:35:A6:A1:E6:B7:34:25:C3:8F:FB:69:74:D8:37:29:6A:25
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gsVaNaah5rc0JcOP-2l02DcpaiU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         50:2c:32:64:58:6f:f1:49:04:4a:11:8a:88:24:0c:fd:7b:2f:
         27:f7:7c:74:94:ab:af:c8:04:62:c2:c4:a6:2a:bb:ac:c1:cd:
         af:b2:f9:1a:71:48:1b:81:71:7a:bc:5d:a9:52:fd:80:29:33:
         da:71:77:32:7e:79:c9:80:e2:b2:71:af:9e:df:b2:99:9b:58:
         4c:c3:ca:4f:80:fc:1c:85:66:7a:57:b5:19:58:02:ec:3e:59:
         b3:c8:e2:b4:5c:72:c2:5e:0e:77:ab:97:23:b8:c5:de:7b:21:
         c7:3c:b1:44:b7:51:49:9c:0d:74:d4:56:5b:83:f3:4a:54:0c:
         26:21:49:89:4a:f3:3a:f1:ac:2d:1f:b6:34:ed:bc:1d:40:67:
         bd:e5:3f:0a:01:5a:00:de:9f:41:54:72:a3:83:7d:1d:d8:68:
         de:8a:d4:42:20:d3:56:ae:fa:27:56:90:45:9f:9d:42:e5:21:
         f7:92:f5:7e:50:52:23:a9:be:37:f8:57:01:e1:1e:db:03:63:
         b0:e8:d1:21:81:67:29:4d:53:dc:c3:08:7f:7b:33:95:05:99:
         3f:a9:f2:25:05:a8:00:a1:d5:cd:50:1b:91:f3:66:7e:12:82:
         67:1f:78:a6:10:e3:4e:3d:61:68:2b:0b:41:25:cc:8b:65:eb:
         6d:7f:7b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----