Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ojDQ85OU9eYYYsdEmim3oj2ApYg.roa
File:                     ojDQ85OU9eYYYsdEmim3oj2ApYg.roa (raw, json)
Hash identifier:          USea6Xdr19hWzRNqnfjRY5MnKBXZ+rzYTlMR7oA8OA0=
Subject key identifier:   A2:30:D0:F3:93:94:F5:E6:18:62:C7:44:9A:29:B7:A2:3D:80:A5:88
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E5C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ojDQ85OU9eYYYsdEmim3oj2ApYg.roa
Signing time:             Tue 29 Sep 2020 09:55:38 +0000
ROA not before:           Tue 29 Sep 2020 09:55:38 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        211.76.122.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3676 (0xe5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:38 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A230D0F39394F5E61862C7449A29B7A23D80A588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:51:66:b6:a1:78:d1:e5:f4:cf:8a:5e:7f:a6:
                    d3:a6:94:5f:18:9a:3f:0d:a0:b7:29:c9:d9:90:ba:
                    65:ff:08:d0:9c:78:94:17:3f:38:3d:af:e5:62:be:
                    cb:6c:a4:6d:b4:40:ec:28:fc:b7:79:ed:04:de:80:
                    6b:b6:b6:1b:45:4f:e4:a2:ea:4a:69:f3:03:9b:a3:
                    81:19:ba:9b:3b:99:78:77:83:45:ec:b4:bb:81:19:
                    a3:e8:61:e8:4b:6e:f5:cc:01:b8:bb:c6:62:ff:14:
                    4f:2e:1c:8d:09:ed:11:38:d9:2c:47:30:fb:34:a2:
                    93:8b:93:b9:cc:d5:fd:46:b8:d2:12:06:5d:b7:83:
                    ae:6c:b0:a0:ec:dd:98:15:f5:36:7e:9d:cb:f8:e8:
                    8e:8c:76:ae:95:07:57:8e:e1:19:45:3d:f7:ef:32:
                    73:44:ab:d2:1b:e7:6c:c6:f9:84:aa:18:17:70:16:
                    7e:fc:60:39:f2:57:61:e0:89:25:fc:d7:ce:d6:fb:
                    29:04:7b:86:c9:f4:94:59:dd:d1:64:85:70:10:f3:
                    ca:7e:61:04:23:bd:f2:2b:f1:16:94:0c:31:30:3d:
                    1c:13:0b:b8:14:ba:0b:68:f7:f4:4f:4d:c5:c6:0c:
                    61:7c:6e:8e:69:b2:6f:fd:7a:9f:b9:be:2e:c0:bf:
                    ba:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:30:D0:F3:93:94:F5:E6:18:62:C7:44:9A:29:B7:A2:3D:80:A5:88
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ojDQ85OU9eYYYsdEmim3oj2ApYg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:2b:0d:da:f2:bb:f8:a5:69:d7:b9:46:3b:e2:85:f6:be:b0:
         13:09:69:5b:fd:3f:c3:d6:d4:66:ff:eb:d3:a8:0c:7b:ce:ba:
         30:55:03:d6:5e:99:21:b2:10:37:2d:25:56:43:ba:c5:26:80:
         fe:31:a4:1b:53:98:d8:e4:94:b0:f0:b9:f8:bd:70:a4:30:4e:
         c6:e3:cf:d4:e0:55:60:63:28:5f:41:96:33:1e:9b:8e:18:6a:
         54:e7:32:11:32:b4:3c:42:3d:6e:d5:4c:9f:87:f5:01:f2:58:
         90:52:b1:b0:22:78:bc:dc:79:3e:48:9f:ad:1f:75:cc:e8:93:
         68:e7:46:9f:21:ef:06:ea:7b:e1:2a:14:6a:1a:67:85:1f:65:
         09:67:58:fa:fd:36:82:bb:63:d5:63:80:61:01:80:85:2a:b4:
         c5:a3:fe:61:57:9f:c6:f7:0f:ae:4c:ca:4a:20:2e:e1:f0:66:
         e7:e8:00:e5:e7:25:2d:ba:ae:e4:d5:0a:06:13:d9:86:97:6a:
         b9:6b:4b:0b:33:94:c2:9e:f3:6e:81:b5:ce:62:75:42:a4:5d:
         23:cd:42:4f:43:ea:a1:1a:1a:98:56:61:78:68:56:ed:b9:48:
         17:de:89:0c:d7:64:ea:66:b0:ec:4b:ce:28:53:86:f6:7c:eb:
         11:a3:44:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----