Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/scsE6xCkiz5C4bi2E7ypp5wg10E.roa
File:                     scsE6xCkiz5C4bi2E7ypp5wg10E.roa (raw, json)
Hash identifier:          8BTKqtmdEoCYTuI0r414TPaviZMcPQhSA2tf1s3Vkyo=
Subject key identifier:   B1:CB:04:EB:10:A4:8B:3E:42:E1:B8:B6:13:BC:A9:A7:9C:20:D7:41
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0EC0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/scsE6xCkiz5C4bi2E7ypp5wg10E.roa
Signing time:             Tue 29 Sep 2020 09:56:06 +0000
ROA not before:           Tue 29 Sep 2020 09:56:06 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.192.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3776 (0xec0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:06 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B1CB04EB10A48B3E42E1B8B613BCA9A79C20D741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:68:cf:5c:84:dd:f8:a6:c5:bc:1c:fc:2d:9e:
                    b5:83:41:86:1a:1a:17:a6:f5:5b:d5:6c:94:af:b5:
                    11:72:16:e9:cd:5d:f3:c6:88:17:c6:01:36:68:ab:
                    06:a4:cb:77:70:3c:03:1b:91:be:f8:24:3a:45:85:
                    2f:aa:d0:48:43:18:75:bc:fa:0d:64:6d:58:19:1c:
                    8b:a8:7b:f6:a1:a6:a8:cc:da:9f:4d:f0:76:10:f4:
                    35:09:44:7c:61:ec:da:07:66:88:50:3d:e8:83:cb:
                    b3:c3:61:d8:6d:9e:2b:0c:c7:76:30:92:c9:3c:62:
                    30:15:b6:3c:5d:64:c6:b4:98:b0:67:cb:43:72:7f:
                    9e:4c:0e:d0:fe:97:21:4a:0f:50:a1:35:b7:4a:c9:
                    30:b4:f3:28:50:80:82:b4:54:1a:e5:f9:98:5a:6c:
                    db:2e:ff:6a:e0:ee:de:20:04:a7:ed:5b:96:fc:5e:
                    7c:e5:47:f3:bb:a5:51:0d:b9:22:c2:3b:11:c8:3f:
                    d6:83:b6:06:63:da:cd:fa:63:64:af:bd:c8:6f:ce:
                    7e:65:15:73:5c:6c:50:ad:fa:91:ba:1c:b9:bc:39:
                    01:19:28:30:d4:1e:1c:96:a3:66:69:ea:2c:03:94:
                    43:2f:26:dc:c2:f9:ed:f0:2b:0e:69:7f:c3:1e:7d:
                    28:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CB:04:EB:10:A4:8B:3E:42:E1:B8:B6:13:BC:A9:A7:9C:20:D7:41
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/scsE6xCkiz5C4bi2E7ypp5wg10E.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:73:38:4d:b3:f6:5b:3b:39:70:8e:bd:bb:12:a4:e3:f1:44:
         3b:fa:5b:43:a5:24:11:0f:b7:3d:d3:a4:71:2d:33:ef:7c:77:
         6b:90:51:43:49:36:80:eb:31:6c:03:70:27:ae:a5:76:d3:81:
         c8:de:b6:90:d1:c4:99:6f:92:51:70:98:9b:7b:28:90:d4:61:
         e0:86:84:38:fa:13:15:77:86:c0:77:2b:bf:bb:62:87:6b:28:
         c4:e9:83:ae:e8:a4:68:9f:6f:ab:ca:73:64:7f:24:6f:f3:d8:
         af:48:91:8b:5f:e3:2c:82:df:e7:a7:e0:6a:1e:be:14:17:04:
         32:b3:f6:3f:73:ba:d8:36:9e:d1:1e:52:be:4c:61:fb:9e:0b:
         8e:d7:2b:d4:c4:dd:b8:0e:9d:74:83:3a:bc:d8:a7:aa:ab:40:
         2c:87:4f:40:79:a9:b4:63:8f:28:97:70:f1:94:18:4d:0d:7e:
         1c:fa:2f:2d:e7:27:a2:2c:2d:b3:68:3e:e9:af:37:57:75:47:
         b5:41:0a:4c:05:5d:d3:fa:78:76:ba:18:9c:a6:7e:67:8b:be:
         de:b2:6a:83:94:27:92:79:0e:3f:0b:1f:c7:dc:35:3c:37:42:
         7b:c7:39:9a:b3:ae:34:49:aa:0b:b7:4d:11:af:7e:93:40:0d:
         cc:af:03:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----