Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p8v3YGyLuZuGB-sTn_aGSI0uS1Q.roa
File:                     p8v3YGyLuZuGB-sTn_aGSI0uS1Q.roa (raw, json)
Hash identifier:          GvOOpuafGrPSfwmdWc2Xw3wBoQZJOC3OJOaekq5JV8Y=
Subject key identifier:   A7:CB:F7:60:6C:8B:B9:9B:86:07:EB:13:9F:F6:86:48:8D:2E:4B:54
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B23
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p8v3YGyLuZuGB-sTn_aGSI0uS1Q.roa
Signing time:             Wed 29 Sep 2021 02:46:13 +0000
ROA not before:           Wed 29 Sep 2021 02:46:13 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.193.0.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6947 (0x1b23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:13 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=A7CBF7606C8BB99B8607EB139FF686488D2E4B54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:76:f0:82:dc:78:6a:68:f3:ca:f4:29:4e:42:
                    54:80:8f:fd:e8:90:46:96:39:e2:52:a3:4e:9b:3b:
                    f4:49:d6:f4:f2:43:28:ed:48:be:88:2b:e5:df:ee:
                    b5:3a:22:13:53:ff:1f:ea:a9:a4:97:2d:79:9c:5e:
                    4a:8c:6b:a9:ac:e6:55:f0:82:36:77:82:37:ea:1f:
                    e8:47:c4:f2:93:2a:88:2f:6a:b5:48:ec:8d:3f:14:
                    69:7c:5d:ae:85:70:45:90:1d:30:b3:c1:e6:c2:7e:
                    68:66:27:bf:66:03:35:42:5f:90:80:11:f4:71:2d:
                    cf:b5:91:40:d9:e1:2d:22:ae:43:dc:57:ce:5d:31:
                    5c:ee:ec:06:48:3a:1e:2a:56:d2:42:d3:34:62:ee:
                    07:da:61:2d:f1:fd:cf:3a:a2:e6:ad:ad:c9:b2:36:
                    f8:8f:03:19:b2:c1:95:6f:8a:54:06:31:a8:d5:f8:
                    3f:b5:fa:38:07:72:6e:fe:25:9d:56:95:11:df:ca:
                    8c:28:8b:90:71:49:4d:69:74:32:63:df:f0:e1:f5:
                    7e:be:74:07:02:be:c1:5d:f1:bd:f9:cc:7b:0b:58:
                    fb:d8:a6:d3:be:0b:a9:2a:38:f6:c4:f1:e3:a5:ef:
                    65:5d:ff:f4:9f:1f:56:d3:48:44:74:7c:55:a6:62:
                    cc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:CB:F7:60:6C:8B:B9:9B:86:07:EB:13:9F:F6:86:48:8D:2E:4B:54
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p8v3YGyLuZuGB-sTn_aGSI0uS1Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8e:8c:c3:3c:15:e4:00:22:52:ac:c3:0a:42:07:f6:c2:2f:11:
         12:01:04:3a:e1:0b:93:a5:a2:1d:d7:be:8e:e6:d2:5a:70:a9:
         91:38:73:e2:7d:61:9e:5b:09:93:77:c8:90:9c:74:af:55:9b:
         ca:f9:3c:1f:5d:df:af:20:60:a2:63:66:cb:c3:7e:02:be:0d:
         83:22:13:37:60:ed:a4:99:97:25:ff:11:0d:b4:4b:e8:b7:e7:
         9e:df:16:60:df:10:ee:0c:ca:19:82:e7:25:04:fd:e6:91:75:
         2c:29:50:6e:0a:c8:ce:7e:aa:ec:b4:6c:22:00:ea:f1:08:bc:
         a2:b6:df:80:62:8f:0a:e6:83:ae:30:82:dc:ee:2a:05:58:68:
         53:37:72:0d:43:c1:f8:90:a1:22:7c:ea:d5:ff:80:d8:2e:0b:
         bc:2e:1d:d6:26:9e:17:10:86:31:ca:48:6c:b9:ef:66:8b:5a:
         9d:79:de:be:ec:40:3f:be:fa:b5:59:aa:ed:cd:8c:8e:df:74:
         25:33:77:ef:01:01:94:96:6f:c3:a5:81:39:39:f5:6a:6b:af:
         7a:7c:1c:4f:45:1a:e1:68:04:1b:34:0c:79:20:60:5e:46:88:
         7a:f4:45:c1:e6:01:18:a4:a7:76:f0:ea:d6:3e:f9:fe:7a:46:
         18:4c:f5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----