Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p3lc06kKtD4uLXApsq2qMkoxNe8.roa
File:                     p3lc06kKtD4uLXApsq2qMkoxNe8.roa (raw, json)
Hash identifier:          BofZTnC4beSiOMazlvv3JDOPwdXgS5Zzl7GHdenwK1U=
Subject key identifier:   A7:79:5C:D3:A9:0A:B4:3E:2E:2D:70:29:B2:AD:AA:32:4A:31:35:EF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F58
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p3lc06kKtD4uLXApsq2qMkoxNe8.roa
Signing time:             Tue 29 Sep 2020 09:56:50 +0000
ROA not before:           Tue 29 Sep 2020 09:56:50 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        211.76.112.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3928 (0xf58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:50 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A7795CD3A90AB43E2E2D7029B2ADAA324A3135EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cf:f4:a8:0d:99:7e:de:71:62:26:ee:21:a9:
                    1c:68:27:5c:59:72:ca:9d:d3:29:e0:4b:ee:ff:a0:
                    3d:fc:90:0e:3c:df:e8:98:f9:66:35:64:9c:01:47:
                    c3:d8:c1:bf:d6:82:4c:19:f8:0e:84:4f:c8:78:4b:
                    e2:ca:64:a0:08:9c:9c:3c:3a:4a:fd:b7:ca:43:e7:
                    ad:a3:61:67:6b:ef:81:9e:b4:49:34:13:54:d7:f4:
                    b8:55:6e:39:9c:3c:de:19:4d:9d:ae:a2:17:d9:3a:
                    c1:18:e6:18:80:15:a6:e7:98:df:73:57:5e:ea:1a:
                    de:4a:ae:e7:0b:f9:8d:cf:a9:7b:ea:c9:16:36:27:
                    58:37:0d:99:93:ee:6b:24:1a:77:37:82:35:08:5e:
                    ea:2c:84:fb:3a:ba:6c:2c:fc:8a:48:ee:6e:85:94:
                    95:80:b4:25:35:34:4e:2a:7f:5b:c1:db:b1:04:32:
                    88:6a:24:76:26:69:31:aa:c0:c7:7c:bf:1f:98:a5:
                    9c:04:25:31:30:d1:bf:c7:6b:7b:78:a9:16:0d:e3:
                    21:93:60:73:0f:45:06:e9:4b:17:57:1a:b7:d4:f5:
                    47:da:48:67:51:71:39:f7:95:2b:39:77:74:36:70:
                    0e:6a:53:d5:b4:e7:b0:51:7e:0c:b0:e7:04:3a:39:
                    94:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:79:5C:D3:A9:0A:B4:3E:2E:2D:70:29:B2:AD:AA:32:4A:31:35:EF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p3lc06kKtD4uLXApsq2qMkoxNe8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2c:71:25:e9:f9:f6:6d:f8:cf:42:2f:60:b5:0b:bc:36:e4:1a:
         15:48:82:13:d6:6e:7d:fe:e3:24:ef:bf:c1:99:fb:69:32:72:
         a4:51:f3:20:60:17:c1:c4:65:9d:6f:c8:0f:81:ab:1a:10:2f:
         ab:1a:29:a3:01:9a:08:42:2f:41:a6:f0:e4:af:b2:e7:44:bf:
         98:17:c5:25:35:c5:23:b6:c6:94:a6:0a:e0:1d:69:ee:f0:36:
         87:3d:38:a9:be:ae:3b:88:d0:b8:a8:06:ff:e3:7b:ed:79:64:
         f3:5b:3c:96:55:df:c7:6e:8f:40:81:ac:4b:7d:9e:c8:c1:03:
         4e:bc:66:cb:8f:4b:3c:73:e0:ec:f7:b1:f9:9d:6d:e3:a7:43:
         11:61:13:dd:59:69:96:31:3e:fe:14:57:09:89:ef:62:a8:32:
         00:c8:d8:a8:f6:e8:62:27:5c:3c:72:b1:14:f8:c1:ab:bd:c0:
         3c:9e:0f:d9:c2:2e:6c:5f:52:50:32:42:3e:95:18:54:d5:fa:
         db:40:c7:3a:df:0f:4f:00:d4:19:19:a3:28:43:44:bc:35:49:
         a1:a3:b1:34:aa:9f:b4:46:a5:a8:69:65:c8:1e:ec:d3:59:59:
         dc:60:27:9d:c2:1e:68:3d:0c:7d:77:6d:8c:ad:ea:43:b3:8d:
         83:e5:5a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----