Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oMUDxhCzL91RtizgFq3mAHZPvi8.roa
File:                     oMUDxhCzL91RtizgFq3mAHZPvi8.roa (raw, json)
Hash identifier:          rya5EuwMkh6g7IzsvYMyF5QVe3LUrQ/uDVPnobznHC0=
Subject key identifier:   A0:C5:03:C6:10:B3:2F:DD:51:B6:2C:E0:16:AD:E6:00:76:4F:BE:2F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0DB9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oMUDxhCzL91RtizgFq3mAHZPvi8.roa
Signing time:             Tue 29 Sep 2020 09:54:53 +0000
ROA not before:           Tue 29 Sep 2020 09:54:53 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        211.76.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3513 (0xdb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:53 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A0C503C610B32FDD51B62CE016ADE600764FBE2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1c:c4:2a:b2:01:4f:2d:98:16:28:f5:ad:55:
                    56:56:07:dd:cd:c2:3e:3f:cf:bd:92:58:94:85:3c:
                    30:50:30:c0:7c:a9:2b:24:16:ab:b6:35:3d:96:e6:
                    21:5c:1b:a4:da:ec:98:b3:bf:84:10:2c:c6:03:da:
                    c1:d5:98:7c:f0:0c:15:18:49:8a:40:d0:6a:59:49:
                    65:ea:f5:81:87:6b:7a:4b:8d:68:bd:88:a2:40:aa:
                    50:b3:13:c2:ec:57:90:5c:ae:5a:a9:92:c1:d6:30:
                    f7:ef:5d:8b:6d:3e:fe:a4:58:38:e4:64:a7:ea:c6:
                    05:c4:37:be:0e:a5:5a:be:40:17:28:e2:a1:b4:a3:
                    17:1a:e6:17:dc:74:83:13:3f:47:3c:65:1e:cb:f3:
                    f4:1a:9e:9c:db:61:dc:e3:ee:1a:fa:8d:77:81:d8:
                    a1:14:59:5d:d2:db:bf:e5:ad:8e:6a:30:d8:db:53:
                    3c:41:58:54:4b:14:04:16:ef:ed:d4:44:81:be:f0:
                    68:44:30:f8:76:83:5e:63:ea:5e:6a:ec:78:ee:dc:
                    23:dc:ca:0d:0d:26:5e:7d:58:c9:61:5a:b4:91:a6:
                    89:16:2c:3a:d1:5e:f4:96:44:3a:7b:5a:d2:a3:4a:
                    a0:91:1d:7f:68:84:8c:d7:e6:4c:7c:d1:fb:84:c7:
                    a1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C5:03:C6:10:B3:2F:DD:51:B6:2C:E0:16:AD:E6:00:76:4F:BE:2F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oMUDxhCzL91RtizgFq3mAHZPvi8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:90:61:04:06:ac:2a:4c:e9:26:d1:b8:6e:3f:fd:58:ed:86:
         12:33:f8:f4:95:98:ce:86:37:55:be:c7:48:41:9d:ab:c7:83:
         26:86:1b:46:40:42:6c:f6:ba:97:ee:db:a6:8a:b1:5e:8d:cc:
         20:33:27:01:42:32:f4:72:d5:d7:7d:82:52:37:92:3e:0c:a3:
         df:94:fe:e4:b4:e1:6b:b1:8f:54:5a:8a:ec:73:3d:9e:96:35:
         6b:16:ed:1e:13:47:ea:2c:57:70:a1:8d:4b:bb:52:51:1e:ce:
         3f:34:fc:b5:7b:6b:6c:d8:70:3b:fe:80:d9:c9:95:ff:24:bc:
         63:9a:5b:62:f9:a2:3b:35:65:4e:8f:dc:45:d1:f6:60:d3:42:
         9b:da:c8:cb:9a:90:ba:fc:14:25:89:67:ef:b4:d1:8c:a0:bb:
         64:a0:8e:fb:9a:c7:e5:5b:4e:ab:78:dc:09:2d:17:66:58:b1:
         4a:08:57:a1:6e:02:11:8f:31:ba:0d:a2:e4:8a:52:3a:ed:0d:
         90:f9:de:7b:16:85:45:1a:a1:a5:b3:33:4c:65:fe:c4:54:27:
         a5:3c:d9:0d:37:dc:cf:42:e9:64:f7:e0:0d:24:15:85:40:f9:
         ee:8c:6e:65:69:ee:3f:db:84:24:84:82:6e:d0:31:63:2c:4e:
         2e:8e:51:19
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDbkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU0NTNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEEwQzUwM0M2MTBCMzJG
REQ1MUI2MkNFMDE2QURFNjAwNzY0RkJFMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqHMQqsgFPLZgWKPWtVVZWB93Nwj4/z72SWJSFPDBQMMB8qSsk
Fqu2NT2W5iFcG6Ta7Jizv4QQLMYD2sHVmHzwDBUYSYpA0GpZSWXq9YGHa3pLjWi9
iKJAqlCzE8LsV5BcrlqpksHWMPfvXYttPv6kWDjkZKfqxgXEN74OpVq+QBco4qG0
oxca5hfcdIMTP0c8ZR7L8/QanpzbYdzj7hr6jXeB2KEUWV3S27/lrY5qMNjbUzxB
WFRLFAQW7+3URIG+8GhEMPh2g15j6l5q7Hju3CPcyg0NJl59WMlhWrSRpokWLDrR
XvSWRDp7WtKjSqCRHX9ohIzX5kx80fuEx6EdAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUoMUDxhCzL91RtizgFq3mAHZPvi8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL29NVUR4aEN6TDkxUnRpemdG
cTNtQUhaUHZpOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT
THgwDQYJKoZIhvcNAQELBQADggEBAAGQYQQGrCpM6SbRuG4//VjthhIz+PSVmM6G
N1W+x0hBnavHgyaGG0ZAQmz2upfu26aKsV6NzCAzJwFCMvRy1dd9glI3kj4Mo9+U
/uS04Wuxj1RaiuxzPZ6WNWsW7R4TR+osV3ChjUu7UlEezj80/LV7a2zYcDv+gNnJ
lf8kvGOaW2L5ojs1ZU6P3EXR9mDTQpvayMuakLr8FCWJZ++00Yygu2Sgjvuax+Vb
Tqt43AktF2ZYsUoIV6FuAhGPMboNouSKUjrtDZD53nsWhUUaoaWzM0xl/sRUJ6U8
2Q033M9C6WT34A0kFYVA+e6MbmVp7j/bhCSEgm7QMWMsTi6OURk=
-----END CERTIFICATE-----