Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uNqJltNOOsIDtGv6NL3rJE1lkD8.roa
File:                     uNqJltNOOsIDtGv6NL3rJE1lkD8.roa (raw, json)
Hash identifier:          VFChJfFeBDGHCWFNjF/lYJu2VfYSTjwYXgdzGZq0wow=
Subject key identifier:   B8:DA:89:96:D3:4E:3A:C2:03:B4:6B:FA:34:BD:EB:24:4D:65:90:3F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D54
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uNqJltNOOsIDtGv6NL3rJE1lkD8.roa
Signing time:             Tue 29 Sep 2020 09:54:27 +0000
ROA not before:           Tue 29 Sep 2020 09:54:27 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.205.16/28 maxlen: 28

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3412 (0xd54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:27 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B8DA8996D34E3AC203B46BFA34BDEB244D65903F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ea:04:3a:d5:16:96:40:7f:92:1d:ed:0f:95:
                    d6:b5:22:6c:fa:fd:be:43:09:64:d4:1b:f6:30:ea:
                    26:14:a4:e7:92:fc:52:5d:a4:da:d5:90:02:75:87:
                    53:d4:da:d5:3f:82:3e:8e:bb:50:e7:29:cc:fd:40:
                    9b:a6:d2:48:5b:1c:73:3d:d9:6f:b3:fb:d5:aa:77:
                    d2:fc:0c:a3:fd:c5:04:8e:9b:72:d8:b7:7f:b2:65:
                    08:1e:e1:79:e3:61:c3:9a:a6:6b:c2:41:77:8f:b1:
                    11:b0:5f:5f:6e:23:4d:95:09:ea:20:86:b3:3c:22:
                    5a:8b:f0:50:8c:e1:07:f6:2c:f7:3a:eb:b8:9b:d0:
                    84:b3:e2:b1:92:f6:92:c5:48:40:86:6f:0f:ad:0c:
                    9e:36:34:b6:f0:03:13:9e:57:bd:8e:c3:c8:4d:72:
                    02:3c:b8:85:77:b0:9a:a0:dd:d0:2c:aa:c8:d7:f2:
                    c2:27:19:68:e0:c8:29:1d:36:66:5e:5f:4e:f7:8b:
                    ab:63:d5:8e:23:01:02:cf:10:49:1c:87:cb:9c:99:
                    b5:fa:19:2d:ed:12:e2:60:fa:ec:42:93:c9:ca:8c:
                    ce:23:8d:5a:c5:d3:ab:bf:f9:0c:82:cc:2e:d3:9d:
                    3b:4e:f4:0a:8f:b8:ef:32:2c:62:93:19:55:d0:62:
                    ee:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DA:89:96:D3:4E:3A:C2:03:B4:6B:FA:34:BD:EB:24:4D:65:90:3F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uNqJltNOOsIDtGv6NL3rJE1lkD8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.205.16/28

    Signature Algorithm: sha256WithRSAEncryption
         ae:1a:1d:9d:01:1a:ff:e9:61:a5:cf:46:3c:61:c1:79:27:10:
         34:3c:8f:4f:3d:3a:bc:19:45:51:91:71:3b:b7:b0:3f:06:b6:
         85:4a:a3:f9:ac:f1:9c:8c:61:57:a1:44:bc:58:b1:5d:fe:00:
         9f:05:b7:22:e6:01:82:60:20:fb:54:8b:2e:f3:98:e5:bd:c9:
         5a:b7:f8:40:96:b5:12:4d:0b:b9:af:3d:19:61:0f:77:c0:ff:
         b7:45:cc:9c:fd:3e:09:31:30:bd:12:b2:34:eb:eb:c5:a2:81:
         9b:37:d2:a5:3c:cc:5e:7d:cb:cd:c3:9e:bd:22:60:61:fd:b5:
         0e:3d:8e:cd:2b:d7:7e:6a:16:dc:86:60:09:71:05:e5:fa:1e:
         90:ad:ba:18:72:bd:2a:38:95:6f:b2:4b:b0:c6:2d:72:ee:b6:
         bb:e8:cf:a5:ca:91:42:de:43:36:b4:38:a6:4e:0b:b9:50:e2:
         4a:b6:64:e3:3a:1b:19:f9:ff:11:54:83:eb:cc:f3:f0:e9:ac:
         41:0e:89:22:5d:4d:e8:aa:0d:1d:a1:fe:5a:65:c2:f7:3d:0a:
         78:18:51:98:cd:37:99:4d:85:2c:08:d3:4c:87:78:66:76:d5:
         e8:80:cb:1d:76:d5:47:ab:1e:a6:66:44:9d:4c:27:82:3e:b6:
         1c:ee:43:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----