Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sJ9IErbumzxO7v2k1PQbf7L0U8I.roa
File:                     sJ9IErbumzxO7v2k1PQbf7L0U8I.roa (raw, json)
Hash identifier:          CUUosJRsYAHWeJ1zkrYE8pcVUAX/u6DSSY7iKXqNrvg=
Subject key identifier:   B0:9F:48:12:B6:EE:9B:3C:4E:EE:FD:A4:D4:F4:1B:7F:B2:F4:53:C2
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E4D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sJ9IErbumzxO7v2k1PQbf7L0U8I.roa
Signing time:             Tue 29 Sep 2020 09:55:34 +0000
ROA not before:           Tue 29 Sep 2020 09:55:34 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.193.180.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3661 (0xe4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:34 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B09F4812B6EE9B3C4EEEFDA4D4F41B7FB2F453C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d1:82:31:f0:56:0f:5c:f1:cc:b4:57:01:cf:
                    c1:1d:64:b2:37:8c:1d:3c:7f:e7:b4:a8:64:4c:79:
                    68:a0:b8:5f:47:04:50:9b:e5:95:ba:5b:28:2e:0f:
                    f3:d4:f2:e7:2f:fc:b3:c5:16:69:c2:95:26:1c:99:
                    84:68:4d:b9:4e:de:6e:c1:28:04:86:1c:dc:7f:6b:
                    9b:28:f9:9c:da:0b:6c:8b:55:fd:b6:1e:41:74:64:
                    c5:7e:87:24:6d:88:dd:b1:e2:9f:13:db:f0:4f:65:
                    76:6c:1c:a2:05:c5:d5:5e:ff:3e:62:bc:b9:24:e9:
                    26:e0:4b:90:85:8f:54:84:f9:2c:1b:b6:f5:b1:79:
                    e7:5f:b0:5c:0c:e3:4c:a9:3b:60:09:69:51:a1:3c:
                    cf:f4:22:5d:d2:6c:01:1e:29:30:ff:5a:e9:a9:fc:
                    c8:52:d5:9e:35:6f:a9:bf:fd:cd:4b:22:c7:96:2f:
                    5d:4d:02:77:29:17:90:ee:bc:72:88:8f:18:07:e3:
                    b7:44:bb:3c:03:72:63:27:cd:a4:17:04:5e:74:57:
                    25:38:ee:0a:5d:f2:7d:af:d7:91:b7:45:f3:b6:9b:
                    ae:92:2b:5f:c2:17:ad:c1:d3:48:48:d6:31:49:c0:
                    2e:84:4d:f5:62:8d:a6:fd:2a:d7:45:87:e8:36:44:
                    5f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:9F:48:12:B6:EE:9B:3C:4E:EE:FD:A4:D4:F4:1B:7F:B2:F4:53:C2
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sJ9IErbumzxO7v2k1PQbf7L0U8I.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:31:93:f0:e8:bc:8f:d6:5b:bb:ff:d3:6c:79:e5:33:c1:37:
         d5:f5:dd:16:b5:e0:66:7b:6a:ff:1c:5e:01:34:d3:c4:45:82:
         0d:6d:4f:fb:63:fd:33:a4:ca:1e:ae:2f:d5:e9:ec:ba:51:11:
         5b:3d:e9:3d:c6:dd:5c:15:b5:a1:00:6b:66:90:9c:cd:a5:ca:
         15:73:e3:05:fb:55:ac:a4:95:9f:29:fc:a2:44:db:73:c5:4f:
         67:ea:03:d7:16:9c:21:b0:48:92:29:db:cf:0f:dd:8b:de:47:
         c0:04:03:e9:21:08:42:d0:78:fa:01:88:7e:4f:56:13:75:3d:
         5d:92:3b:97:f9:6e:73:27:7d:b7:f0:34:78:3c:bf:83:ce:18:
         a7:18:d9:21:8c:1d:9c:68:91:40:76:dd:c0:6c:65:0d:ae:fa:
         cc:08:bd:57:de:1c:08:da:35:2c:49:f7:07:29:db:32:cb:18:
         8e:09:87:8d:7d:53:c2:23:0b:8c:16:3b:cf:20:7c:71:90:bb:
         0a:48:67:11:cd:48:fc:4f:c9:2f:87:8c:9a:4a:40:81:49:bb:
         f8:f3:9e:08:10:9b:24:ae:52:1c:27:0b:e5:f2:4b:0c:fb:89:
         11:09:c2:26:b4:ee:8c:8c:35:a6:f6:4c:8d:d0:19:41:1f:ff:
         7b:3e:3d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----