Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lC6y2ZwnJZBXEI1e29efqIf_oI8.roa
File:                     lC6y2ZwnJZBXEI1e29efqIf_oI8.roa (raw, json)
Hash identifier:          yLB/wyZClRrSxaaCOeYSM9ElyORsyIqKhPlfz/W7VGY=
Subject key identifier:   94:2E:B2:D9:9C:27:25:90:57:10:8D:5E:DB:D7:9F:A8:87:FF:A0:8F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0DA3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lC6y2ZwnJZBXEI1e29efqIf_oI8.roa
Signing time:             Tue 29 Sep 2020 09:54:47 +0000
ROA not before:           Tue 29 Sep 2020 09:54:47 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.192.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3491 (0xda3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:47 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=942EB2D99C27259057108D5EDBD79FA887FFA08F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:64:74:31:fc:8d:88:a6:80:67:da:f9:7c:d1:
                    76:60:f9:3d:a0:2e:26:9a:9a:bf:84:88:a2:90:b4:
                    14:b5:bf:ed:2a:80:58:bf:41:c2:88:bd:53:3a:51:
                    9a:a6:db:13:90:fc:87:91:fa:8e:4b:5a:7e:f5:05:
                    7a:e1:fa:e3:56:34:2a:c9:81:a2:ab:97:7e:6e:ef:
                    dd:fa:2c:5f:f5:99:42:17:32:0e:32:b7:26:88:7e:
                    2f:ff:37:13:4e:83:50:33:71:90:30:16:0e:8b:ee:
                    3f:c2:ea:6e:ab:44:92:ba:77:d3:f2:2b:05:fd:04:
                    b0:99:b8:3d:86:61:f6:f7:ae:d8:10:d6:df:40:78:
                    8c:56:16:e9:20:19:76:90:72:39:e2:27:c3:06:58:
                    e4:64:5e:bd:40:ce:66:d6:12:73:b4:e7:79:78:70:
                    1a:57:a2:46:21:1d:b7:5f:17:7b:0b:48:a1:65:c2:
                    fa:c2:42:52:e3:62:59:0c:8c:8f:d4:53:75:35:db:
                    b3:20:92:09:a9:86:39:c7:44:df:4a:bc:ed:fb:de:
                    90:d8:ab:dc:87:41:0e:59:3f:4d:d0:dd:0b:a4:f8:
                    15:04:c2:05:6a:4a:c3:0e:17:c1:12:61:65:ae:67:
                    8a:90:98:c8:49:72:fd:79:b9:15:ab:5e:78:0d:b8:
                    cc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2E:B2:D9:9C:27:25:90:57:10:8D:5E:DB:D7:9F:A8:87:FF:A0:8F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lC6y2ZwnJZBXEI1e29efqIf_oI8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:2a:64:9a:de:de:4e:b6:72:c1:10:1a:20:9d:63:d7:56:f2:
         35:4c:a3:c4:11:38:be:be:50:17:ff:3c:0a:76:47:25:b7:b1:
         da:d1:89:e3:4d:c3:27:7f:77:c8:96:25:79:ca:d3:72:40:2e:
         de:63:9d:52:47:a8:9b:e8:07:8d:55:a2:2f:3c:1d:9c:0a:79:
         23:3b:bf:f2:1a:bc:48:03:3d:c2:ef:db:b3:e6:c4:89:f3:1e:
         ba:e9:0b:65:38:c8:8b:da:35:45:98:c3:c5:e0:f0:75:27:82:
         62:a9:ea:98:58:68:a7:77:38:ef:08:44:ab:cd:60:55:bc:ca:
         9f:6b:b1:95:54:8e:53:cc:3b:32:b3:4a:58:39:34:54:bb:e8:
         66:64:e7:f9:2d:2a:10:52:46:ec:8f:b9:23:7f:59:a8:c2:b2:
         19:c2:84:e4:ef:75:bf:61:4e:66:bc:4a:d1:d2:70:82:c2:60:
         7e:70:65:7d:2b:1b:a7:1b:1d:99:5a:41:5b:3f:5f:7c:d7:d8:
         aa:ed:7e:c9:5b:50:58:d6:72:b8:3d:d5:45:4c:50:a6:b7:bc:
         d8:70:fd:91:db:4d:78:ca:dc:b9:9d:ce:73:ec:e8:a3:c8:ec:
         2c:7d:06:d6:34:f3:26:44:f6:b4:ca:4c:8f:a1:d2:03:68:21:
         d3:52:0d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----