Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/s3Xe6WKsz0bcn_fUfp-47diaz5g.roa
File:                     s3Xe6WKsz0bcn_fUfp-47diaz5g.roa (raw, json)
Hash identifier:          P1/hxwsTCWHQTyXBSBk6aiVnJ5Yepk4CQ6+flF0kv4U=
Subject key identifier:   B3:75:DE:E9:62:AC:CF:46:DC:9F:F7:D4:7E:9F:B8:ED:D8:9A:CF:98
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0DFD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/s3Xe6WKsz0bcn_fUfp-47diaz5g.roa
Signing time:             Tue 29 Sep 2020 09:55:13 +0000
ROA not before:           Tue 29 Sep 2020 09:55:13 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        123.195.0.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3581 (0xdfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:13 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B375DEE962ACCF46DC9FF7D47E9FB8EDD89ACF98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:58:d7:e6:52:e4:8a:dd:c6:1f:75:59:00:b5:
                    ea:94:e3:80:db:13:99:f1:54:3b:79:5d:28:5e:4e:
                    9a:9d:b7:5a:6f:82:1a:33:0a:bf:32:f8:2a:a6:32:
                    c8:c7:d8:91:52:27:58:d6:7c:80:43:e4:8e:08:ad:
                    7a:59:24:09:97:1f:dd:6a:d0:5d:b0:d4:d4:ba:59:
                    7b:b6:d7:a9:5b:6e:86:6a:97:77:ac:10:36:4b:1f:
                    27:f4:26:33:86:1e:da:41:fd:07:4f:72:a5:98:10:
                    76:9f:47:3c:74:56:6c:90:ff:32:aa:61:f9:ac:3f:
                    16:3d:a2:1f:ce:f0:ab:0e:b3:b4:39:60:d3:12:4a:
                    61:5a:c1:c3:37:6f:90:e9:34:90:c7:01:38:41:f9:
                    bf:85:65:d3:a5:03:d7:d9:00:fd:04:74:34:cc:b7:
                    ca:41:51:ce:04:15:41:b5:28:37:12:19:db:b3:ec:
                    5f:b4:d8:80:46:7e:86:34:39:03:ac:3d:11:84:f0:
                    53:c3:a4:ba:69:da:8f:74:b9:b3:72:59:6c:c1:c1:
                    fa:4f:da:72:33:f7:a8:f7:0d:d8:b5:a0:f4:2f:50:
                    cf:4a:69:d9:14:1e:12:a2:f0:be:26:d0:21:02:f8:
                    9f:3e:89:9d:c9:bd:ff:ec:d5:55:06:f3:f6:a4:42:
                    cf:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:75:DE:E9:62:AC:CF:46:DC:9F:F7:D4:7E:9F:B8:ED:D8:9A:CF:98
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/s3Xe6WKsz0bcn_fUfp-47diaz5g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         45:92:03:eb:34:9e:0f:c6:e7:23:42:81:cf:f4:1f:b6:ad:94:
         1b:11:31:61:9e:2e:e7:77:f3:c7:e9:a6:d6:20:9d:65:51:1c:
         ef:90:76:08:30:88:c5:fe:21:5f:2f:99:e5:b2:85:bf:9b:c8:
         3c:f2:36:08:6b:19:99:00:d5:e1:d4:28:03:c7:d8:19:90:0a:
         49:3d:06:eb:ad:05:7a:96:82:4b:24:82:5b:4e:8b:33:ed:38:
         d9:86:3b:e3:51:0b:54:8b:29:3f:66:34:e1:24:8b:70:03:eb:
         9c:a2:64:df:c2:fc:80:e3:be:49:30:ee:55:9d:06:fb:2c:15:
         a7:44:7d:f8:ab:ca:13:ad:b8:bf:79:05:5d:36:d3:9d:20:67:
         dd:4e:8a:ae:d9:f8:73:8e:4f:2b:48:dc:51:8b:48:a1:72:61:
         ad:20:b9:d6:09:87:75:15:95:12:5f:54:4f:39:f0:0c:43:78:
         ef:d8:9a:19:fa:57:a1:60:34:24:38:25:38:4b:85:4e:e5:5a:
         51:19:fb:74:c1:7a:26:1e:fc:54:6f:1c:c2:54:17:ae:34:07:
         c0:53:32:5b:03:25:b3:c1:5c:4b:27:ab:83:d6:d2:8f:0e:08:
         19:18:e7:8e:cb:66:19:7d:9d:e6:f9:63:fa:d5:6c:d3:42:11:
         0c:ab:98:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----