Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uPdcCRgYJXoLW4E_4Bdj0_f3C9o.roa
File:                     uPdcCRgYJXoLW4E_4Bdj0_f3C9o.roa (raw, json)
Hash identifier:          v3vCCAxVavydLm+unEkBjF90PgWMUEPK+s1FfrGVCEQ=
Subject key identifier:   B8:F7:5C:09:18:18:25:7A:0B:5B:81:3F:E0:17:63:D3:F7:F7:0B:DA
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1609
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uPdcCRgYJXoLW4E_4Bdj0_f3C9o.roa
Signing time:             Sun 07 Feb 2021 12:07:56 +0000
ROA not before:           Sun 07 Feb 2021 12:07:56 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.32.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5641 (0x1609)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:07:56 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B8F75C091818257A0B5B813FE01763D3F7F70BDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d3:49:db:e8:6e:5a:09:bb:b6:ca:9b:62:15:
                    be:f0:3e:86:4e:23:2c:e6:e7:78:bc:db:b8:49:01:
                    11:f2:96:14:97:61:bc:1c:8b:13:a8:87:63:ad:87:
                    3f:ec:33:de:56:fc:b3:49:4a:79:eb:23:a8:4f:89:
                    cd:fc:8d:dd:ba:70:58:3c:5b:39:96:77:d8:50:05:
                    52:3f:2a:3f:17:6f:4c:e0:4c:87:26:5b:ec:9e:ee:
                    46:1e:f5:02:0f:71:7e:e3:17:64:5e:b1:f2:de:dd:
                    37:5c:5c:a7:86:20:79:6b:66:c5:9f:4d:6f:98:84:
                    4d:fc:f2:3c:df:c5:1b:27:5d:bf:d1:72:83:65:ae:
                    69:5e:1d:07:59:8f:9e:03:e3:4d:a9:f8:0b:36:6a:
                    43:ac:20:a1:3f:41:87:c2:b7:78:a6:42:1e:e4:18:
                    9e:b8:93:ed:eb:fe:ee:cb:e6:67:12:30:88:08:8e:
                    77:c8:b4:49:77:a3:79:b1:dd:07:15:db:a4:4b:05:
                    43:3c:2d:92:ce:b9:e7:7d:05:39:88:89:0c:e4:26:
                    15:84:d0:90:d7:60:30:0d:ec:e4:93:5f:86:cc:25:
                    32:5b:79:96:ef:c0:e0:4b:af:bc:83:f7:88:5a:b1:
                    00:7c:c7:91:58:9b:05:aa:47:5e:e2:f9:68:26:f0:
                    a5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F7:5C:09:18:18:25:7A:0B:5B:81:3F:E0:17:63:D3:F7:F7:0B:DA
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uPdcCRgYJXoLW4E_4Bdj0_f3C9o.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         13:5a:8b:d6:fe:70:1c:37:2d:1f:5e:be:3a:53:3d:18:39:d7:
         98:c3:25:4d:62:cf:40:18:a4:34:3e:49:03:d7:69:2b:45:ec:
         93:14:8a:3c:35:2f:c5:9d:58:45:d9:59:f7:5d:51:ad:63:2a:
         12:3f:80:88:05:66:11:6c:d7:e6:fc:d1:e5:9b:3a:e8:7a:9d:
         24:1d:46:55:40:96:7a:05:9b:d2:fd:52:6f:97:4a:a6:5c:1e:
         da:62:80:ae:06:55:40:45:b3:e1:7c:e0:4f:68:91:8d:f6:70:
         01:72:e1:a8:fe:71:a7:b4:0b:6d:c1:6e:c3:f5:51:44:7c:08:
         2c:45:59:04:94:c1:37:41:54:46:72:05:6d:08:32:c1:5e:8f:
         11:57:59:45:f6:fd:c5:ed:1e:dd:04:7d:21:6e:01:59:d0:ae:
         0b:4d:8d:be:13:c4:38:0c:4f:b3:29:67:3d:fb:ff:17:75:3a:
         a5:df:de:30:73:a4:c1:7d:ae:33:f8:c6:a0:68:9d:37:e7:69:
         61:eb:11:01:96:a3:50:1e:5a:56:1c:fd:db:00:25:10:4f:76:
         76:5b:fa:1e:15:79:2a:10:28:e9:a9:de:6e:c7:f3:f8:94:c9:
         e1:0b:eb:ba:1d:b3:fb:6c:e3:b8:33:30:9c:e7:9a:ea:55:29:
         be:d1:54:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----