Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u8u-zDFHdKNWgzfCJ1yxtwM7cwc.roa
File:                     u8u-zDFHdKNWgzfCJ1yxtwM7cwc.roa (raw, json)
Hash identifier:          SlvbuYKyQ60OgoJSP4eIIVNVOtdNAGY7Zb3o5/TQxT4=
Subject key identifier:   BB:CB:BE:CC:31:47:74:A3:56:83:37:C2:27:5C:B1:B7:03:3B:73:07
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1CDC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u8u-zDFHdKNWgzfCJ1yxtwM7cwc.roa
Signing time:             Wed 29 Sep 2021 02:48:19 +0000
ROA not before:           Wed 29 Sep 2021 02:48:19 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.193.160.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7388 (0x1cdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:19 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=BBCBBECC314774A3568337C2275CB1B7033B7307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f0:f1:ad:9a:3b:e7:f1:12:88:13:d2:b7:7e:
                    41:d9:8e:6e:49:0a:30:18:5c:62:70:08:42:8f:9d:
                    4a:d2:34:57:6c:46:7e:63:c3:84:2a:d0:82:92:7a:
                    41:53:06:03:90:34:6a:2b:9c:ed:d6:f9:cf:9f:c1:
                    14:19:34:07:8b:8c:1f:5f:11:b2:fa:39:7e:00:9c:
                    6b:c8:c6:f2:ba:32:bc:85:47:b5:ba:8b:90:7d:0b:
                    b3:21:56:87:9e:e7:a0:6c:7f:46:8a:6e:57:fa:45:
                    2a:43:f2:ff:f4:a4:7f:e3:22:a3:88:76:1b:24:b2:
                    0b:0e:4e:4b:e6:1c:cb:f5:0f:dc:ce:52:5f:4c:c5:
                    41:52:98:44:b4:18:a2:ee:4b:df:b3:f2:ff:ad:83:
                    7f:68:4d:83:27:b4:b5:c4:c5:a5:70:0f:69:a8:40:
                    3c:4e:67:52:2b:d6:fc:4b:ac:29:6a:19:2e:95:e9:
                    b1:f4:ed:ae:0f:75:40:ca:8e:60:64:63:93:91:c4:
                    4b:77:19:8e:fa:63:6d:9b:ec:30:42:3a:93:32:57:
                    52:7a:89:cf:a4:45:e1:a3:68:4a:55:b7:fa:34:b4:
                    74:dd:61:0c:b3:ae:e1:78:04:58:73:01:b8:c5:6e:
                    02:70:96:72:82:8b:2c:09:18:a3:28:9b:3b:ca:4a:
                    2a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CB:BE:CC:31:47:74:A3:56:83:37:C2:27:5C:B1:B7:03:3B:73:07
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u8u-zDFHdKNWgzfCJ1yxtwM7cwc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:92:00:4e:f5:e0:04:2a:a7:3b:3f:9c:a4:7b:ce:1e:85:f2:
         bc:1b:52:4a:cf:ca:93:12:d9:06:01:52:c3:bc:4f:6e:c1:2b:
         7b:b0:6a:2f:03:3d:15:3e:e7:f9:d7:4e:42:fb:3e:ab:27:4a:
         16:5e:09:8b:59:cb:77:8f:53:48:7b:0a:2c:88:71:ff:7e:d1:
         7b:12:7d:8f:85:f4:16:d0:a5:24:c2:7d:09:37:c1:4d:a3:0a:
         a6:c0:fb:dd:3d:48:60:f9:7a:fa:8a:cb:df:0f:e1:e3:fa:de:
         b8:08:95:1a:ae:06:ff:d4:d6:fd:a0:ea:72:6e:2a:6e:8e:24:
         ff:8a:5a:57:b7:c0:28:2a:6b:cc:1c:f8:64:8d:63:6b:b9:1f:
         94:e1:5c:e9:94:dc:f6:09:4d:a7:21:c9:e8:77:7b:11:51:35:
         99:d6:4c:f1:87:16:9e:3d:00:26:f6:9f:4d:de:e6:59:ee:a1:
         6e:3b:4d:76:3d:b9:28:af:5e:c8:e4:47:81:62:ec:78:87:a7:
         3b:20:f2:3f:4d:3c:fb:52:21:52:e6:a1:a1:75:51:e2:b1:9f:
         3a:d4:30:5a:90:36:30:a6:70:6e:ab:ad:2e:04:3c:6e:c2:7b:
         63:00:ea:65:a2:3a:6f:14:f0:9c:53:c6:52:87:47:6d:e5:1c:
         69:82:1c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----