Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qq01vCjxphMlp3ifI20i9yXi280.roa
File:                     qq01vCjxphMlp3ifI20i9yXi280.roa (raw, json)
Hash identifier:          a4RAxJFsQ42LYMhpjI95fUtTMUAegNqC/apmx/TYc0A=
Subject key identifier:   AA:AD:35:BC:28:F1:A6:13:25:A7:78:9F:23:6D:22:F7:25:E2:DB:CD
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D5D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qq01vCjxphMlp3ifI20i9yXi280.roa
Signing time:             Tue 29 Sep 2020 09:54:28 +0000
ROA not before:           Tue 29 Sep 2020 09:54:28 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.233.178.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3421 (0xd5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:28 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=AAAD35BC28F1A61325A7789F236D22F725E2DBCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:87:e0:c5:a2:79:e9:ce:0f:f3:62:ad:b4:74:
                    e0:e3:0c:7a:a7:96:af:08:e7:53:50:cd:8f:21:c2:
                    12:cd:09:ed:e5:14:3b:9a:f6:7b:80:4a:c7:9e:52:
                    ea:f0:5e:38:5b:8a:04:b2:79:c7:02:94:8e:0e:5c:
                    9c:d9:44:4d:00:2e:cd:d8:de:60:fd:5b:34:e7:c0:
                    6a:e5:34:46:e4:0f:d7:27:a2:fa:e6:1e:95:0b:db:
                    5c:b1:68:b3:bd:1a:09:56:f2:5e:11:8f:79:a0:27:
                    91:39:0b:23:3d:6c:95:eb:cc:c9:40:83:1b:0c:23:
                    c7:bf:eb:af:c4:3e:5c:5c:76:3c:24:cc:1b:30:48:
                    8f:ed:2c:f6:af:09:67:33:79:bf:12:22:8c:74:22:
                    84:0c:9e:d0:b8:19:6c:75:b3:33:03:5d:10:87:3b:
                    b6:d1:a2:9e:73:0b:9c:f0:d9:14:9e:6a:57:50:f2:
                    55:ca:68:c7:c5:f9:d4:c5:9b:4b:df:30:62:9d:e4:
                    78:d4:60:7a:24:2e:17:fb:3f:e3:c6:4a:ac:6f:8c:
                    a2:e3:37:b2:05:53:51:b1:44:68:e0:62:00:8a:9a:
                    61:3e:68:34:d8:4f:d2:81:b1:d0:fa:9e:e5:2e:3c:
                    56:fb:05:19:31:0a:08:aa:f3:e5:6f:94:4f:2c:78:
                    95:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AD:35:BC:28:F1:A6:13:25:A7:78:9F:23:6D:22:F7:25:E2:DB:CD
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qq01vCjxphMlp3ifI20i9yXi280.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:b9:a6:f5:a9:bb:0a:9d:5c:c6:4e:2d:f7:9a:54:71:ad:fe:
         ea:90:01:60:d0:8a:d2:63:71:5e:d0:9b:05:98:3a:7a:23:e1:
         33:e2:f9:0c:df:e3:54:aa:79:89:b1:eb:e9:2d:12:66:10:7a:
         0a:d3:a2:bd:72:6b:87:1a:81:f1:b3:35:af:ed:e4:c8:7e:81:
         82:cd:99:fe:d7:0d:63:a9:94:e6:04:af:da:0d:f2:08:6e:cf:
         7a:4b:74:3e:d2:04:c7:25:39:24:b2:e7:07:02:3c:f7:ce:11:
         a8:01:b9:61:00:17:a0:e1:ca:93:c9:62:b4:7f:f5:35:99:ad:
         dd:43:b8:f6:c0:15:0c:27:19:bf:f1:ba:93:98:2b:39:a0:55:
         7c:c8:b0:15:47:89:23:39:05:e5:b1:9b:1f:fc:2b:2f:64:dc:
         c5:ab:ad:5e:0d:5a:5b:4c:78:63:1f:ff:52:38:50:9d:f6:ab:
         05:14:90:2c:bd:15:6d:28:47:f4:5d:a6:cd:2d:45:af:a3:ff:
         dc:7a:03:79:cc:ec:db:13:42:77:f0:e8:e1:64:b3:ba:b6:9e:
         b5:79:1c:36:42:ec:65:91:83:cb:c6:0c:53:4b:47:fc:c6:c4:
         f0:4f:69:33:69:99:b3:2c:ef:0c:b8:c1:71:fe:ac:75:a3:46:
         0c:78:e2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----