Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tEy5lHjDYOHh7vmsjx3KZA24-Es.roa
File:                     tEy5lHjDYOHh7vmsjx3KZA24-Es.roa (raw, json)
Hash identifier:          oNFswSmNyPLwQTt6h0nhkFYVAx0+2LPKWQgdAMohHwo=
Subject key identifier:   B4:4C:B9:94:78:C3:60:E1:E1:EE:F9:AC:8F:1D:CA:64:0D:B8:F8:4B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0CF5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tEy5lHjDYOHh7vmsjx3KZA24-Es.roa
Signing time:             Tue 29 Sep 2020 09:54:00 +0000
ROA not before:           Tue 29 Sep 2020 09:54:00 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        211.76.113.0/25 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3317 (0xcf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:00 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B44CB99478C360E1E1EEF9AC8F1DCA640DB8F84B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7d:ad:af:da:c0:01:50:4a:20:3b:82:be:a4:
                    e3:13:5b:60:2f:b9:d6:23:e0:df:1a:3d:89:6c:71:
                    84:a2:0a:ab:e5:c1:fc:36:f6:33:6e:3c:ca:7d:26:
                    01:73:b2:ca:91:a1:1d:40:fd:b8:15:15:3e:fb:19:
                    4e:2d:ea:6d:5a:85:2f:fe:7b:00:ea:aa:76:d3:57:
                    14:8e:83:83:07:4d:bc:a0:91:11:5e:75:cb:61:a6:
                    ce:ee:67:6e:9a:e8:2c:18:bb:da:bb:52:f6:b0:df:
                    8a:54:1a:cd:a2:69:3d:25:08:61:b7:0a:50:5f:54:
                    8b:1a:68:ee:f9:db:1b:04:d5:59:85:04:e7:66:74:
                    53:38:47:38:63:e8:d0:e8:fc:4b:c8:04:16:88:81:
                    13:c1:fe:51:a4:b3:ed:67:75:dc:20:9e:d5:96:1c:
                    47:b6:b4:dd:fd:db:6c:52:69:d3:5c:05:ac:3b:ae:
                    0a:20:0f:17:34:61:d6:1d:14:77:93:62:eb:2d:11:
                    d6:7e:f1:d9:e8:8d:b7:57:da:94:1a:2d:6c:17:8a:
                    ba:fb:d0:de:f8:98:64:b7:44:5e:ae:26:39:53:2d:
                    9c:e7:89:c3:89:d4:51:65:98:fb:cb:34:8c:83:db:
                    79:d1:76:2f:af:73:af:cb:8b:81:c2:f2:34:20:bc:
                    41:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4C:B9:94:78:C3:60:E1:E1:EE:F9:AC:8F:1D:CA:64:0D:B8:F8:4B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tEy5lHjDYOHh7vmsjx3KZA24-Es.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.113.0/25

    Signature Algorithm: sha256WithRSAEncryption
         08:56:2a:44:6a:ca:1b:f3:58:79:36:29:06:4c:b1:fb:ac:a8:
         11:a1:e8:61:0e:f4:3a:35:80:cc:85:68:1b:18:4c:c0:53:df:
         c6:0a:b1:1c:f5:02:3e:8a:b0:c9:74:98:8e:36:cd:9f:7a:a8:
         d3:80:24:3e:4b:55:18:da:26:e4:f1:08:57:7e:d5:9c:f3:46:
         7e:66:55:3c:67:10:ac:3d:53:a9:e3:64:b2:7f:75:f3:38:a4:
         7e:ca:77:d8:ff:5d:49:93:de:b7:9d:1e:15:74:ff:1e:c8:0b:
         01:28:88:f9:50:52:23:0c:ad:f2:14:88:9f:c5:51:5f:9a:e4:
         76:32:77:48:15:29:0a:4e:cd:d9:d5:a1:ba:86:a8:d6:de:51:
         01:78:f3:a7:3f:54:81:9b:33:b6:65:8a:00:7f:9d:97:07:32:
         77:f5:ad:ec:e4:b5:55:f1:36:da:0b:5f:e0:68:7f:9f:5c:bd:
         5e:59:21:e3:f1:11:61:40:82:c7:95:71:ec:b5:42:e3:71:f8:
         f1:92:f5:ce:64:de:7c:80:63:35:63:fa:27:c1:b4:dc:f6:d2:
         f3:5e:69:17:a9:e2:95:c0:b5:9f:38:88:c4:3e:70:6e:d9:1a:
         48:70:30:16:9b:5d:fe:98:b3:7b:99:99:02:6e:9f:47:18:2a:
         eb:96:f1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----