Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q5U1u1KkDMod4Lxcb9wa3kZtiOQ.roa
File:                     q5U1u1KkDMod4Lxcb9wa3kZtiOQ.roa (raw, json)
Hash identifier:          bjBSCBqmqfgUeH0WfAxcaH+Q1umB99GaryaoqJvP60M=
Subject key identifier:   AB:95:35:BB:52:A4:0C:CA:1D:E0:BC:5C:6F:DC:1A:DE:46:6D:88:E4
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0CEC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q5U1u1KkDMod4Lxcb9wa3kZtiOQ.roa
Signing time:             Tue 29 Sep 2020 09:53:58 +0000
ROA not before:           Tue 29 Sep 2020 09:53:58 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.88.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3308 (0xcec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:53:58 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=AB9535BB52A40CCA1DE0BC5C6FDC1ADE466D88E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d9:df:87:3c:dd:0c:8e:70:61:e5:99:f7:01:
                    50:72:4d:f4:31:c0:0d:f5:7d:1f:0e:5e:64:e3:14:
                    c2:c3:b3:16:c7:a7:6d:d6:4f:ba:fc:68:3d:b2:93:
                    c3:7a:59:af:51:73:cf:57:57:92:a5:8e:54:4e:38:
                    f9:d8:4c:b4:d8:c0:7e:3a:cd:85:39:18:16:e1:af:
                    8f:dd:ec:98:e8:87:d5:29:e6:b9:14:66:5d:a9:29:
                    54:2a:b3:8f:bf:28:ad:4e:04:79:a2:07:55:fc:ad:
                    08:b5:a4:98:17:52:d8:8a:56:72:f3:e5:5d:8b:be:
                    32:1a:16:8b:cf:18:7c:42:a1:ab:9d:83:fd:89:f9:
                    1b:4c:f9:c4:4a:aa:1e:4c:14:11:b9:a8:30:30:c9:
                    91:9e:d5:0a:c8:c7:bb:7b:ac:1f:00:29:17:65:97:
                    f6:c5:3a:8e:93:13:0b:c7:0e:53:2b:32:08:cd:50:
                    14:9f:55:dc:24:ab:c3:33:ab:fc:6b:ff:d9:f0:52:
                    dd:e3:67:35:96:09:24:a7:26:02:7b:f7:d0:d5:24:
                    23:08:67:57:27:cb:43:0d:8d:84:b3:87:31:80:44:
                    63:36:18:b0:90:92:b2:63:2a:b3:5f:14:76:9d:d8:
                    da:8e:c8:86:3d:6d:81:6f:c5:86:c7:64:53:f5:67:
                    40:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:95:35:BB:52:A4:0C:CA:1D:E0:BC:5C:6F:DC:1A:DE:46:6D:88:E4
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q5U1u1KkDMod4Lxcb9wa3kZtiOQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0d:9c:ea:d8:a3:8f:52:5c:cd:ae:d3:fa:0b:e4:88:59:b2:73:
         01:74:c4:43:57:da:9b:f5:c4:65:0a:e7:93:3d:51:50:b5:15:
         de:6f:51:90:8c:7c:3f:39:80:f4:52:9a:2f:27:2f:50:e5:42:
         83:50:c6:e3:59:8a:6c:1e:8c:75:f7:7f:06:08:5e:1b:e3:a8:
         ed:51:b6:e3:17:06:12:97:48:78:e8:bc:ee:a7:69:1a:59:7b:
         ca:21:4b:71:84:54:86:c9:b8:f9:f8:ff:74:90:e8:23:ad:c8:
         bb:c2:a7:60:c4:06:2b:e5:57:5e:07:37:05:f1:db:29:d8:c9:
         77:e9:d0:d2:21:c5:66:14:cb:fe:8a:e1:ef:05:d1:9e:32:fb:
         12:b0:9b:f7:ed:d8:98:10:3e:bb:57:70:c6:58:13:e2:87:7c:
         ac:ac:4a:b4:de:84:08:76:65:f2:38:2f:9c:55:10:01:eb:3b:
         3a:aa:19:a7:18:31:66:bb:82:76:7e:eb:b8:62:ee:b9:e4:47:
         62:72:f0:ca:54:0c:4f:17:f4:a6:6e:19:d3:31:c0:9c:df:71:
         83:0c:e7:2f:f6:6b:32:22:1d:bc:cc:7a:b0:07:22:26:5d:ba:
         58:3b:f4:9f:14:8e:9e:97:f1:3c:be:5a:b0:2e:d7:55:e7:39:
         dc:f6:5c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----