Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/myThtO0yAH6npUKtvawmNdPJjBk.roa
File:                     myThtO0yAH6npUKtvawmNdPJjBk.roa (raw, json)
Hash identifier:          UtX87Mxp4mFHORZ+ZHH3/5XghEaz+/vspYJtgn3YyiE=
Subject key identifier:   9B:24:E1:B4:ED:32:00:7E:A7:A5:42:AD:BD:AC:26:35:D3:C9:8C:19
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0CD8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/myThtO0yAH6npUKtvawmNdPJjBk.roa
Signing time:             Tue 29 Sep 2020 09:53:53 +0000
ROA not before:           Tue 29 Sep 2020 09:53:53 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.192.24.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3288 (0xcd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:53:53 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=9B24E1B4ED32007EA7A542ADBDAC2635D3C98C19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b4:e8:b5:50:07:83:64:d6:93:87:aa:f0:55:
                    60:42:e4:92:22:30:71:ff:18:c5:be:d4:3f:f0:b3:
                    01:77:4f:67:86:17:a7:15:0f:0a:7a:96:7d:34:94:
                    05:e7:1c:fd:eb:53:5d:32:bd:fa:3b:1f:78:93:83:
                    b5:2c:c6:fc:01:29:69:81:7b:ec:c8:65:b2:8c:43:
                    1a:af:97:0e:e3:64:79:01:dc:79:0b:ed:ea:e6:af:
                    0b:68:42:ff:f3:2e:a2:4b:3f:82:a3:ed:08:58:6c:
                    7e:9d:97:60:cb:df:06:08:07:ef:66:78:32:1d:a6:
                    7d:1c:fc:1f:cb:79:51:2a:17:aa:3d:1b:f4:48:35:
                    9a:10:09:30:42:75:a7:f1:73:4c:c4:9e:4c:ea:1b:
                    d0:f3:15:70:de:6d:ec:09:eb:70:c8:40:d6:3d:08:
                    cd:d0:6e:93:1c:e3:7f:b6:bb:fc:8b:6a:c6:5d:40:
                    03:a3:2f:6b:e1:40:c5:ce:af:5b:d8:61:3e:d4:ee:
                    50:8e:2d:38:e2:c2:ce:5e:a4:54:b8:89:98:45:76:
                    3a:eb:47:a1:2a:9a:7c:5b:95:1a:36:85:45:f9:38:
                    13:80:d8:f1:3b:1b:37:00:5a:8b:c6:8e:70:8c:4e:
                    0f:ee:0e:d3:71:d6:46:b5:8d:33:1b:5f:13:92:ea:
                    d1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:24:E1:B4:ED:32:00:7E:A7:A5:42:AD:BD:AC:26:35:D3:C9:8C:19
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/myThtO0yAH6npUKtvawmNdPJjBk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9c:43:3c:a8:3d:66:57:23:48:84:87:bb:48:06:b4:15:8a:a7:
         b4:f8:eb:a0:61:2f:07:29:b2:d9:7f:08:a6:bf:d7:af:72:ec:
         7d:20:a3:fc:18:f9:f0:30:0f:5d:44:00:cc:a7:ac:1d:1a:f6:
         42:ad:d0:b7:9c:2b:63:26:b0:a8:e7:7a:c9:c2:bb:ec:14:9c:
         2a:58:ee:aa:8d:1d:6f:97:04:a7:6b:46:4f:04:16:24:41:b3:
         ef:dd:57:34:af:8b:15:9f:fb:f1:54:66:4a:da:3c:d4:68:1d:
         f9:c6:a6:78:fa:be:16:50:ec:89:2a:bd:2e:f2:fa:a8:d2:24:
         3d:34:7c:c5:d4:c0:59:34:e8:e6:f2:6f:34:22:9e:7a:ee:10:
         e0:46:5c:c3:d3:20:14:e4:83:17:50:3c:31:98:00:f3:28:c2:
         1d:d9:ce:0b:2e:be:51:27:93:08:ea:c1:db:51:7e:36:4d:e1:
         a3:94:61:80:4f:8c:d4:c9:55:d3:c7:66:fb:fb:d4:a4:a8:e4:
         ad:8d:20:2c:0a:4c:61:ce:4f:77:6d:77:90:3c:1b:2a:df:73:
         5a:18:3f:33:d2:ae:b2:6b:8b:7e:26:eb:d6:25:74:03:a9:bd:
         83:7b:ac:1c:02:ae:53:13:54:69:64:6e:6e:55:51:48:a5:4e:
         35:ee:d6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----