Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oDkGxPIZ36o01aVWsnX7d3isnLY.roa
File:                     oDkGxPIZ36o01aVWsnX7d3isnLY.roa (raw, json)
Hash identifier:          qnJhFHBOIgsfvwCHWD3PuEAJ4W50UqK+CELfa1oV3t8=
Subject key identifier:   A0:39:06:C4:F2:19:DF:AA:34:D5:A5:56:B2:75:FB:77:78:AC:9C:B6
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       13DB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oDkGxPIZ36o01aVWsnX7d3isnLY.roa
Signing time:             Sun 07 Feb 2021 11:56:27 +0000
ROA not before:           Sun 07 Feb 2021 11:56:27 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.192.0.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5083 (0x13db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 11:56:27 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A03906C4F219DFAA34D5A556B275FB7778AC9CB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cf:fb:67:c4:d4:bc:5e:33:88:7e:99:f2:2a:
                    20:1c:ed:b9:74:6a:1d:4b:a0:db:38:6b:f0:e8:16:
                    60:26:0a:83:5c:ef:ba:75:2d:c4:c2:c0:0f:77:df:
                    34:2a:ff:a8:52:cd:f9:b8:40:5b:1d:e1:ba:d3:69:
                    83:33:28:00:de:f4:26:80:d4:49:db:9a:62:0f:6d:
                    e1:b4:32:f1:c9:13:a5:1d:86:b3:9b:15:bb:97:31:
                    74:de:58:8e:4d:aa:32:5c:53:15:03:21:73:88:70:
                    7c:59:5d:82:89:0d:a7:ba:fb:e0:73:eb:fd:38:d6:
                    17:63:a9:4a:ac:7c:49:62:96:d2:de:63:b3:e4:8a:
                    07:94:44:bd:a6:db:45:02:31:e6:0f:0b:33:3d:0e:
                    d6:db:3b:89:cd:a0:26:9b:5e:cb:70:62:dc:36:49:
                    82:b6:f3:5b:bf:ad:e3:59:50:e9:eb:71:3a:90:07:
                    50:56:76:89:b3:c5:97:90:99:15:52:58:6b:b8:59:
                    f4:5c:09:5e:e9:5d:1a:cc:de:9e:83:48:d0:47:85:
                    56:4d:69:d5:70:9e:96:77:4f:9d:33:34:a9:54:52:
                    b6:66:96:14:37:3c:50:6d:ad:e1:13:b1:a1:a4:d4:
                    89:cd:9f:eb:6a:c0:02:6a:8f:d8:37:99:49:d0:d1:
                    02:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:39:06:C4:F2:19:DF:AA:34:D5:A5:56:B2:75:FB:77:78:AC:9C:B6
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oDkGxPIZ36o01aVWsnX7d3isnLY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1a:39:8d:da:b6:66:65:4f:23:fc:d4:91:5c:90:0a:b9:c0:f2:
         55:6c:0d:21:4f:a9:77:23:65:40:48:57:8c:27:16:31:07:b7:
         15:83:09:f8:ec:80:b1:48:ac:a9:a6:92:3e:0c:7f:b3:a2:10:
         46:60:f0:3a:4d:65:de:99:af:03:65:d7:25:4b:88:85:6b:07:
         f6:ed:8b:c5:e3:81:a0:b2:b8:31:bd:ab:52:61:f1:20:6f:e2:
         11:bd:95:b7:38:c1:b2:7c:99:fe:f2:c3:42:81:e4:e4:97:f8:
         fe:e9:a9:05:49:80:77:6e:a1:26:ed:26:e5:92:e4:8d:3f:16:
         d5:5a:2d:05:be:fd:86:3d:9d:90:47:26:ca:46:bc:12:10:9e:
         3d:22:f2:73:6f:84:3c:26:82:8a:1c:bd:86:92:90:c3:54:ed:
         6f:c2:d1:a4:e9:ca:d3:0e:d8:77:25:c5:2f:16:35:17:e8:8b:
         2b:cb:31:81:6f:59:5a:6c:0d:1e:7c:b3:c6:dc:98:05:b8:a1:
         9a:6a:6c:bc:fe:61:ab:c5:81:ab:3f:1d:c2:8b:10:24:e3:f0:
         f2:b6:06:d9:f0:13:2e:75:b8:6d:fa:b0:5e:e0:d1:90:57:e6:
         26:26:e4:9a:55:21:c2:37:8b:a0:d9:e7:21:84:18:fb:88:fc:
         a4:e4:26:9e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICE9swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MTU2MjdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEEwMzkwNkM0RjIxOURG
QUEzNEQ1QTU1NkIyNzVGQjc3NzhBQzlDQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9z/tnxNS8XjOIfpnyKiAc7bl0ah1LoNs4a/DoFmAmCoNc77p1
LcTCwA933zQq/6hSzfm4QFsd4brTaYMzKADe9CaA1EnbmmIPbeG0MvHJE6UdhrOb
FbuXMXTeWI5NqjJcUxUDIXOIcHxZXYKJDae6++Bz6/041hdjqUqsfEliltLeY7Pk
igeURL2m20UCMeYPCzM9DtbbO4nNoCabXstwYtw2SYK281u/reNZUOnrcTqQB1BW
domzxZeQmRVSWGu4WfRcCV7pXRrM3p6DSNBHhVZNadVwnpZ3T50zNKlUUrZmlhQ3
PFBtreETsaGk1InNn+tqwAJqj9g3mUnQ0QIpAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUoDkGxPIZ36o01aVWsnX7d3isnLYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL29Ea0d4UElaMzZvMDFhVldz
blg3ZDNpc25MWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7
wAAwDQYJKoZIhvcNAQELBQADggEBABo5jdq2ZmVPI/zUkVyQCrnA8lVsDSFPqXcj
ZUBIV4wnFjEHtxWDCfjsgLFIrKmmkj4Mf7OiEEZg8DpNZd6ZrwNl1yVLiIVrB/bt
i8XjgaCyuDG9q1Jh8SBv4hG9lbc4wbJ8mf7yw0KB5OSX+P7pqQVJgHduoSbtJuWS
5I0/FtVaLQW+/YY9nZBHJspGvBIQnj0i8nNvhDwmgoocvYaSkMNU7W/C0aTpytMO
2HclxS8WNRfoiyvLMYFvWVpsDR58s8bcmAW4oZpqbLz+YavFgas/HcKLECTj8PK2
BtnwEy51uG36sF7g0ZBX5iYm5JpVIcI3i6DZ5yGEGPuI/KTkJp4=
-----END CERTIFICATE-----