Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tdPfEmtMds3KPW0eZXK977KoIZk.roa
File:                     tdPfEmtMds3KPW0eZXK977KoIZk.roa (raw, json)
Hash identifier:          0uzk31YNO48v/hk7r7gvrUNh+3azRI0KP+qeOup/PLY=
Subject key identifier:   B5:D3:DF:12:6B:4C:76:CD:CA:3D:6D:1E:65:72:BD:EF:B2:A8:21:99
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1555
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tdPfEmtMds3KPW0eZXK977KoIZk.roa
Signing time:             Sun 07 Feb 2021 12:04:04 +0000
ROA not before:           Sun 07 Feb 2021 12:04:04 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        211.76.113.128/25 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5461 (0x1555)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:04:04 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B5D3DF126B4C76CDCA3D6D1E6572BDEFB2A82199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:24:38:c8:53:6e:c8:8b:fd:da:74:1e:92:9b:
                    5a:7e:30:02:b1:cd:07:4f:77:a2:c3:e9:de:9f:0d:
                    26:ad:e9:e3:60:b2:ee:38:e8:d7:ff:f0:95:77:3b:
                    87:a1:b4:a8:42:ae:03:27:b4:54:6d:95:d9:79:86:
                    aa:7e:63:1b:12:b8:1f:fe:9e:e0:77:1d:42:e1:ce:
                    c7:b4:5e:93:2b:fc:05:ae:53:ac:1b:98:1c:79:73:
                    b9:fe:b8:29:41:16:43:08:cd:0e:00:c2:c2:81:c9:
                    54:16:6d:39:9a:63:b0:49:34:8a:06:bc:a7:df:c6:
                    e4:14:9b:33:2a:c0:71:36:5d:f2:7d:73:ee:b1:6b:
                    44:39:64:61:ec:93:89:ba:82:0b:42:06:1e:4f:bb:
                    eb:9a:df:2d:36:6b:f0:49:29:51:8b:fd:d4:97:0d:
                    de:54:47:47:c2:f0:a7:5a:14:e0:da:1f:9a:00:96:
                    ad:07:02:ba:d8:18:c7:22:76:06:23:4f:6b:19:b5:
                    25:ba:03:4c:52:92:2a:64:0c:e1:4d:0d:57:74:5e:
                    3c:b7:68:6e:f0:8d:f9:d2:40:d5:30:0c:0a:99:19:
                    a5:39:8f:ac:86:b0:ee:04:9b:6e:54:4f:69:c7:0e:
                    8d:0f:b5:2f:70:c2:ac:25:c4:96:4a:05:7b:c3:c6:
                    e1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D3:DF:12:6B:4C:76:CD:CA:3D:6D:1E:65:72:BD:EF:B2:A8:21:99
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tdPfEmtMds3KPW0eZXK977KoIZk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.113.128/25

    Signature Algorithm: sha256WithRSAEncryption
         b7:d2:ae:15:73:45:92:aa:34:54:08:a1:6e:5e:95:9a:2d:b6:
         66:5e:9f:ca:8a:16:0f:ec:41:e2:ce:79:ec:34:b7:ec:b3:c8:
         5d:6d:f6:fb:4e:26:ee:2b:2a:60:ba:ed:ce:94:aa:ae:b0:da:
         ea:6f:f0:4c:53:08:e3:0e:27:dd:5d:c6:d0:2f:85:e3:df:2c:
         39:27:0c:e1:e9:4a:45:1e:0f:58:ad:1a:74:db:35:a8:e4:1f:
         a4:10:8e:0a:45:ad:21:08:cd:1d:d3:4c:c8:73:39:85:ce:05:
         4e:d1:80:7c:0b:a7:b5:c4:89:fa:c3:cc:25:4b:f2:2d:e8:e4:
         1f:37:49:d7:b4:53:3e:a6:fc:61:48:ef:3e:67:0b:c8:c1:18:
         fb:fe:f1:ca:ae:07:e7:a2:58:1e:46:dc:27:9b:0f:1c:bb:a1:
         66:f5:f2:c4:57:d6:27:20:e5:66:c3:63:9c:16:2d:0a:ee:49:
         6b:27:72:86:19:5d:fc:52:7e:fe:bb:ab:d9:88:12:d6:53:0e:
         b6:64:78:bc:20:e3:cf:b9:39:de:0f:a3:c4:7d:7b:ea:53:a3:
         63:e5:c3:39:23:c2:6f:5e:46:4e:ca:99:67:35:4c:69:46:37:
         1c:0a:7d:48:18:ae:23:2c:72:45:96:4f:d5:6c:59:f0:d8:9e:
         7f:1e:c9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----