Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nvq_eX-wkgcRdIrwkdQ4bUAe4dk.roa
File:                     nvq_eX-wkgcRdIrwkdQ4bUAe4dk.roa (raw, json)
Hash identifier:          QwHlKic/uLRWaujVKASVoul9KmWWYqoDXzgxc9OSDVw=
Subject key identifier:   9E:FA:BF:79:7F:B0:92:07:11:74:8A:F0:91:D4:38:6D:40:1E:E1:D9
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0DA8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nvq_eX-wkgcRdIrwkdQ4bUAe4dk.roa
Signing time:             Tue 29 Sep 2020 09:54:48 +0000
ROA not before:           Tue 29 Sep 2020 09:54:48 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.232.224.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3496 (0xda8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:48 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=9EFABF797FB0920711748AF091D4386D401EE1D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6d:07:08:a7:5a:86:03:83:0b:11:ed:56:78:
                    f2:d1:f0:ae:b5:bc:0b:21:c1:93:52:65:40:c6:53:
                    31:4a:59:0b:41:89:9a:a7:29:13:eb:84:38:ec:ca:
                    1f:83:dc:95:7f:4e:1a:4f:e0:60:8f:34:15:e7:dc:
                    f2:f9:dc:6d:76:4b:41:73:ca:75:79:d7:e7:ba:76:
                    86:88:97:21:15:21:05:4e:b9:c0:e8:76:ba:e9:16:
                    e3:ad:ad:0f:d9:0f:67:e8:e6:ac:62:29:dc:26:75:
                    8f:3e:36:cf:17:90:7f:f2:c2:dc:ee:3b:cb:69:4f:
                    3c:b1:24:03:c6:db:e4:72:3e:a1:a9:d8:7e:29:12:
                    67:44:f4:f0:9b:9a:05:5f:34:ed:1a:55:9d:9b:6e:
                    bc:81:93:21:95:52:f7:21:73:26:c0:ba:6a:7a:50:
                    d9:e6:71:cd:0d:37:a9:5f:df:c7:2a:d4:0f:da:53:
                    6c:bb:64:19:1b:fc:9a:cf:bc:c5:ed:50:a2:26:2c:
                    44:3c:fc:4e:09:3a:55:6a:1e:98:c7:b6:5d:cc:e9:
                    16:a9:6a:6a:52:01:a4:13:7b:40:c0:4a:49:8a:2c:
                    43:85:7a:ab:69:a8:b8:14:c8:99:37:60:61:3f:5f:
                    ce:dd:a9:ab:30:93:d0:e5:69:55:2f:99:5b:5b:6e:
                    50:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:FA:BF:79:7F:B0:92:07:11:74:8A:F0:91:D4:38:6D:40:1E:E1:D9
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nvq_eX-wkgcRdIrwkdQ4bUAe4dk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a8:cc:90:96:76:c1:5d:2a:bb:72:8a:2d:05:de:92:f4:b5:c6:
         6c:8d:66:8a:32:8c:62:0d:fb:5d:25:e5:96:ce:c5:9b:0b:7d:
         c6:33:3c:d8:83:34:36:25:57:f0:6f:f3:e9:cc:4a:50:91:d7:
         1e:dd:25:06:2b:30:93:6d:66:57:cc:48:6c:16:23:bc:5d:b5:
         35:08:d2:e1:69:46:a1:f7:7c:90:c8:34:16:dc:ef:03:63:c0:
         8c:70:38:dc:7e:5d:c4:e7:4d:f7:b3:9b:32:66:8b:34:80:e3:
         91:ef:5b:98:f3:d8:a7:f1:fc:2c:8b:e0:eb:9d:38:10:8c:aa:
         0b:df:cd:49:80:28:00:1f:36:97:f6:ed:9c:e8:43:75:bb:e2:
         fb:b6:58:aa:43:33:9a:da:f2:9b:a1:92:d1:2a:a7:c6:74:07:
         46:cd:fe:e8:8a:90:28:55:5a:e2:e0:0e:84:9c:83:21:d6:2e:
         d9:77:3c:f6:8f:89:7f:e1:44:76:cc:f7:bd:46:ce:75:b9:8b:
         fb:63:13:e0:8c:1a:be:ce:a3:22:34:b5:14:b1:f6:47:01:42:
         10:b5:7f:b8:8e:33:83:5e:5e:6a:7f:6c:ea:ad:25:a3:5d:16:
         6d:70:c3:d6:40:e6:0b:b8:db:40:d2:98:e4:d6:f2:0b:07:bb:
         a3:f1:f4:96
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDagwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU0NDhaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDlFRkFCRjc5N0ZCMDky
MDcxMTc0OEFGMDkxRDQzODZENDAxRUUxRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQbQcIp1qGA4MLEe1WePLR8K61vAshwZNSZUDGUzFKWQtBiZqn
KRPrhDjsyh+D3JV/ThpP4GCPNBXn3PL53G12S0FzynV51+e6doaIlyEVIQVOucDo
drrpFuOtrQ/ZD2fo5qxiKdwmdY8+Ns8XkH/ywtzuO8tpTzyxJAPG2+RyPqGp2H4p
EmdE9PCbmgVfNO0aVZ2bbryBkyGVUvchcybAump6UNnmcc0NN6lf38cq1A/aU2y7
ZBkb/JrPvMXtUKImLEQ8/E4JOlVqHpjHtl3M6RapampSAaQTe0DASkmKLEOFeqtp
qLgUyJk3YGE/X87dqaswk9DlaVUvmVtbblDDAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUnvq/eX+wkgcRdIrwkdQ4bUAe4dkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL252cV9lWC13a2djUmRJcndr
ZFE0YlVBZTRkay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2
6OAwDQYJKoZIhvcNAQELBQADggEBAKjMkJZ2wV0qu3KKLQXekvS1xmyNZooyjGIN
+10l5ZbOxZsLfcYzPNiDNDYlV/Bv8+nMSlCR1x7dJQYrMJNtZlfMSGwWI7xdtTUI
0uFpRqH3fJDINBbc7wNjwIxwONx+XcTnTfezmzJmizSA45HvW5jz2Kfx/CyL4Oud
OBCMqgvfzUmAKAAfNpf27ZzoQ3W74vu2WKpDM5ra8puhktEqp8Z0B0bN/uiKkChV
WuLgDoScgyHWLtl3PPaPiX/hRHbM971GznW5i/tjE+CMGr7OoyI0tRSx9kcBQhC1
f7iOM4NeXmp/bOqtJaNdFm1ww9ZA5gu420DSmOTW8gsHu6Px9JY=
-----END CERTIFICATE-----