Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tw0SjS2tIE1REsxrv4aT18Q4Ync.roa
File:                     tw0SjS2tIE1REsxrv4aT18Q4Ync.roa (raw, json)
Hash identifier:          KfWN72IALrIaFeCIqQ4nx0qKq+Nor1mbVsG8ANLAMUI=
Subject key identifier:   B7:0D:12:8D:2D:AD:20:4D:51:12:CC:6B:BF:86:93:D7:C4:38:62:77
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0DC4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tw0SjS2tIE1REsxrv4aT18Q4Ync.roa
Signing time:             Tue 29 Sep 2020 09:54:58 +0000
ROA not before:           Tue 29 Sep 2020 09:54:58 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.188.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3524 (0xdc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:58 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B70D128D2DAD204D5112CC6BBF8693D7C4386277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9d:ce:84:33:3c:5d:c0:27:5a:66:bd:21:30:
                    1b:52:5d:04:33:c4:bb:c1:08:c1:9b:ee:4a:08:ad:
                    6b:95:87:06:5a:85:bc:7b:32:5f:29:60:31:9e:12:
                    8a:e7:c3:1c:66:5b:e6:b2:56:1c:44:64:55:5f:54:
                    1f:58:bf:6b:22:46:c5:48:56:3c:14:ce:2b:1c:b0:
                    4d:fe:48:2e:92:3d:3e:fd:48:c1:72:ea:be:7c:22:
                    12:38:19:e9:11:65:8b:c3:25:1c:97:4c:7a:df:c4:
                    55:02:a8:4e:30:e8:b4:99:86:aa:04:44:df:2a:26:
                    c2:fe:db:1e:3b:b8:08:97:ed:58:b7:db:e2:1c:f6:
                    53:44:1c:d8:cf:7b:71:cd:30:d7:2b:f3:df:09:3b:
                    ef:7a:ef:fe:8a:dd:e4:9e:ce:26:ce:f6:b2:3d:44:
                    c5:88:a6:65:04:89:7c:a0:f2:db:cc:b0:25:a7:9c:
                    96:d9:24:be:81:db:15:37:d1:4c:93:1a:36:53:40:
                    04:f2:03:e1:90:a7:a9:07:00:8f:ce:0d:23:78:50:
                    67:b4:8c:f4:22:8f:7d:38:fd:a9:4b:b6:37:af:86:
                    f0:36:0f:10:21:43:78:3d:b2:73:d9:0a:8a:f8:35:
                    c6:f0:4f:53:c9:f7:12:28:e4:40:f3:77:f3:10:65:
                    5a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:0D:12:8D:2D:AD:20:4D:51:12:CC:6B:BF:86:93:D7:C4:38:62:77
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tw0SjS2tIE1REsxrv4aT18Q4Ync.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:95:ca:58:86:05:ab:a9:69:70:a5:f5:3b:5f:4e:c7:7a:80:
         38:d7:36:75:c0:c2:5d:fb:44:b6:dd:4d:ff:6a:c6:90:fb:18:
         39:26:aa:8c:6f:b5:eb:f0:bd:c6:b8:db:64:de:8c:b6:3f:96:
         5d:d2:d5:8c:a3:b0:fd:ba:38:6b:ae:03:38:95:31:d7:00:4e:
         55:32:8c:f9:57:9d:a9:33:7e:40:4b:c3:8d:e3:3f:58:20:16:
         d2:5a:cf:58:76:1d:6b:62:07:f5:5a:76:04:0d:2b:a5:eb:c6:
         3b:8a:61:f5:db:d3:19:b4:2c:21:cd:53:13:63:fb:86:23:eb:
         36:f6:5a:5e:81:77:27:6b:12:34:7a:e1:07:79:77:23:2e:dc:
         79:de:4c:69:4f:e6:cf:30:51:1a:04:5d:dc:2f:41:56:ea:bc:
         c4:3a:4f:93:4b:42:ef:4f:82:97:fd:9e:16:0b:17:ca:bf:cb:
         32:64:d9:20:b9:f8:67:16:36:14:1c:b9:db:21:5d:57:1a:29:
         cc:5a:85:b4:c4:55:9e:84:d3:9c:9c:de:c0:2c:ff:45:61:3f:
         8b:3b:e6:ee:42:29:51:e7:2c:42:24:1c:83:99:47:0b:c6:fa:
         2e:2f:84:2f:d3:54:d7:1c:6e:a2:6c:8f:b3:dc:17:b1:5a:75:
         10:9c:ff:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----