Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pdZsS7R7B5525hb3Cam_rX7T2hs.roa
File:                     pdZsS7R7B5525hb3Cam_rX7T2hs.roa (raw, json)
Hash identifier:          X4SzLcewVoiKGCGRfmDph2cwbC/HoAIVdxxpP04fDzA=
Subject key identifier:   A5:D6:6C:4B:B4:7B:07:9E:76:E6:16:F7:09:A9:BF:AD:7E:D3:DA:1B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0EB5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pdZsS7R7B5525hb3Cam_rX7T2hs.roa
Signing time:             Tue 29 Sep 2020 09:56:03 +0000
ROA not before:           Tue 29 Sep 2020 09:56:03 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        211.76.121.128/25 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3765 (0xeb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:03 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A5D66C4BB47B079E76E616F709A9BFAD7ED3DA1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9c:65:43:44:47:2e:c7:05:91:fb:4d:2b:22:
                    fc:c2:29:d1:e1:d8:5b:b6:94:0a:f6:c1:96:24:69:
                    d0:74:d6:ac:99:a4:8f:d7:d1:c8:3b:e7:57:d9:6e:
                    38:f2:00:9e:48:ea:27:c9:e4:c9:dd:64:d5:6f:71:
                    d9:32:e9:1f:a4:36:df:06:b8:13:a7:44:bc:de:e6:
                    22:ee:6f:8e:6d:c1:7d:5e:6e:42:23:3b:c8:2d:d9:
                    e1:57:ba:6d:e9:e3:2b:ff:58:fd:8c:26:fe:d6:94:
                    cc:26:8f:31:c0:80:30:2f:39:bb:02:23:69:ee:83:
                    a8:04:b5:a0:2f:c6:cc:7e:5b:0b:fb:d4:b6:a6:d7:
                    5e:29:ff:5d:cb:3d:8f:a5:8b:90:6b:f8:d9:02:be:
                    67:50:87:21:7a:82:e6:15:24:74:2a:17:48:0e:b6:
                    ea:2b:d0:9b:2a:46:a0:09:39:4e:c2:f6:b1:ea:6b:
                    82:00:40:21:bf:95:25:54:15:85:7b:4d:00:ae:e1:
                    ef:aa:c8:5a:d3:3b:7f:62:39:5c:bd:c5:8e:36:d8:
                    20:55:a7:de:3d:d1:0a:17:f5:8c:0c:50:a8:b6:25:
                    2a:46:4c:7f:48:38:7e:a0:13:bc:f0:5a:0d:43:47:
                    a5:47:14:af:41:e4:ba:75:55:96:09:7f:1c:64:98:
                    61:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D6:6C:4B:B4:7B:07:9E:76:E6:16:F7:09:A9:BF:AD:7E:D3:DA:1B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pdZsS7R7B5525hb3Cam_rX7T2hs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.121.128/25

    Signature Algorithm: sha256WithRSAEncryption
         6c:99:3f:57:84:98:7d:3e:24:b6:44:03:a2:0d:b2:9c:a3:c2:
         3f:90:1f:e3:4f:af:72:a7:2f:f5:b3:be:4f:ee:3d:ba:09:62:
         9f:f6:a3:69:77:f8:56:cd:cb:94:db:22:59:df:29:b9:d4:ac:
         fe:61:b0:56:9e:f8:dc:89:4f:45:91:36:14:7a:55:b9:b3:06:
         a5:7f:73:ea:93:0f:ea:47:9d:f7:89:b5:0d:2e:72:ae:84:51:
         9f:c0:3d:50:88:6f:eb:e8:4c:38:1a:90:5f:20:af:fa:ec:06:
         26:8b:b4:77:84:26:39:72:fc:8d:01:b7:8a:ba:46:47:6e:f5:
         21:cf:10:d9:32:d6:30:48:8e:c9:b7:3f:2e:ea:fa:3b:72:2b:
         c7:d8:65:bb:b3:47:39:db:2f:e3:b3:2f:f6:a6:d1:b0:36:41:
         9a:64:70:80:b1:a3:49:bd:5a:f3:34:51:8a:93:89:c9:fd:24:
         00:e4:50:ee:57:4c:c0:c0:31:41:89:22:47:c6:c6:f9:52:67:
         f6:f7:a3:3a:55:65:6f:5a:ca:15:59:f7:b7:d5:1e:45:8c:6d:
         40:5a:52:02:9a:87:ac:ca:03:74:7a:e0:04:6b:17:21:a6:e6:
         c0:a2:95:be:de:70:16:c2:b4:a0:da:25:10:6b:a2:ef:65:98:
         89:1a:67:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----