Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jkI8LnJr0-jvdyFNWK3-Rgg-ngc.roa
File:                     jkI8LnJr0-jvdyFNWK3-Rgg-ngc.roa (raw, json)
Hash identifier:          656Dw4QIJm/728ZrBitWJeFLq98hHBpp4zVjbwfjE7s=
Subject key identifier:   8E:42:3C:2E:72:6B:D3:E8:EF:77:21:4D:58:AD:FE:46:08:3E:9E:07
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F3D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jkI8LnJr0-jvdyFNWK3-Rgg-ngc.roa
Signing time:             Tue 29 Sep 2020 09:56:41 +0000
ROA not before:           Tue 29 Sep 2020 09:56:41 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.193.208.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3901 (0xf3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:41 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=8E423C2E726BD3E8EF77214D58ADFE46083E9E07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:57:b7:58:40:e1:da:30:b3:aa:06:95:61:78:
                    c8:62:a5:2a:f8:65:35:a7:5b:62:d0:45:bb:51:1b:
                    38:fd:91:85:2e:4c:88:c1:9f:8a:c7:ac:d6:3f:03:
                    46:84:0c:71:d6:68:91:dd:63:b5:99:b8:21:92:bb:
                    6d:5c:65:95:89:b7:9c:b5:da:6e:d3:97:36:8c:3d:
                    42:60:5b:56:23:e9:09:0d:36:73:71:51:e6:8b:e4:
                    1c:40:47:32:dc:30:74:86:66:0e:5d:e2:22:b7:2c:
                    8c:3d:3a:7d:fb:a1:8e:1a:86:5c:c4:8f:22:3c:c5:
                    ad:75:6b:32:ff:dc:a1:74:95:51:60:1b:0a:c1:5f:
                    bc:6b:49:a2:1d:d1:a3:ac:db:5e:76:43:8f:07:ab:
                    a2:0d:ea:64:8c:49:fa:e6:38:e2:00:bb:54:13:0b:
                    2d:f3:6c:5d:37:d1:a3:a3:9f:f9:d3:46:70:31:fd:
                    10:a3:2c:68:28:ce:ab:f4:62:84:56:a2:1b:23:bc:
                    05:ac:61:e2:d6:f2:36:a5:c1:d0:8f:47:f0:0a:c1:
                    cc:c3:4c:30:90:2f:88:5d:4b:3f:7f:94:ac:fb:6b:
                    1d:ef:f2:4f:4a:01:49:a3:53:05:d8:b5:13:7e:d5:
                    b1:3a:15:8b:fb:e0:d8:62:a3:9d:0b:5a:65:d5:3e:
                    95:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:42:3C:2E:72:6B:D3:E8:EF:77:21:4D:58:AD:FE:46:08:3E:9E:07
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jkI8LnJr0-jvdyFNWK3-Rgg-ngc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         69:fd:1b:94:21:29:33:df:63:88:dd:86:ea:cf:a7:cd:73:fd:
         90:91:fa:6b:21:fe:b1:b3:c0:96:19:5f:98:aa:d6:b5:fb:3e:
         06:a5:16:f3:f6:bd:0d:9b:07:9e:ca:35:54:03:9d:a3:e7:51:
         1c:cf:88:c1:4e:24:07:c8:18:63:b9:cd:94:ba:92:f9:98:95:
         54:73:f9:5e:56:73:7e:be:c9:a5:56:d3:bb:51:a5:41:5e:e9:
         60:35:35:a0:48:ed:45:0b:b1:b3:35:a2:99:ab:8c:19:bf:ea:
         87:97:b8:4f:23:2e:7a:f1:65:8a:13:74:5c:fb:89:41:06:33:
         a6:24:2c:65:fe:ff:ef:61:2d:63:23:41:c6:68:a3:6e:d1:29:
         91:ca:91:b6:f7:bd:ed:ad:80:b8:65:06:9c:16:dc:05:0f:d4:
         9b:19:20:7f:e9:21:63:4e:6a:4f:04:66:bb:62:eb:20:34:5f:
         7c:89:69:50:f0:85:b4:10:69:be:f0:f1:a5:06:a1:b2:d4:15:
         0c:9f:80:df:aa:03:53:26:87:05:28:52:7e:4a:c7:b6:67:19:
         db:3c:e4:36:81:4e:58:07:17:10:8d:6c:81:90:dc:ea:36:b1:
         63:7f:c2:8f:56:a2:95:8a:ea:86:67:95:2f:8c:54:cc:1b:68:
         0d:38:c5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----