Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uycFfo3cx2q8BE8qsImiwJBjIc4.roa
File:                     uycFfo3cx2q8BE8qsImiwJBjIc4.roa (raw, json)
Hash identifier:          2Le1B1XBDfWrqQyFX3enQH1lPOUjYnxg/2aESMlrek4=
Subject key identifier:   BB:27:05:7E:8D:DC:C7:6A:BC:04:4F:2A:B0:89:A2:C0:90:63:21:CE
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D80
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uycFfo3cx2q8BE8qsImiwJBjIc4.roa
Signing time:             Tue 29 Sep 2020 09:54:37 +0000
ROA not before:           Tue 29 Sep 2020 09:54:37 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        123.193.224.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3456 (0xd80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:37 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BB27057E8DDCC76ABC044F2AB089A2C0906321CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:05:57:a7:63:84:8f:70:20:5a:ad:72:e3:8f:
                    87:a1:5f:90:31:f5:b5:84:39:84:df:b8:2b:0a:8d:
                    a3:c9:57:c7:8e:6e:14:19:05:d5:8c:fb:a2:02:a0:
                    81:2b:ca:eb:06:c5:6c:0f:b9:b1:90:43:74:2c:f0:
                    0c:82:35:0b:20:21:60:ee:5f:b0:0b:82:a3:4a:3d:
                    c5:64:34:87:d9:9d:10:1f:fb:1b:4d:07:04:39:1c:
                    2d:76:ca:62:2b:70:cf:3c:d9:b9:75:6e:fc:9c:db:
                    ec:81:c2:ec:af:b2:fb:8a:65:2d:d1:2c:d8:0f:e8:
                    b8:fa:ae:ab:40:51:cd:36:92:ef:11:51:4b:67:78:
                    28:5a:a8:bb:46:8c:75:55:ed:c2:b0:74:f0:6c:44:
                    1e:8f:83:d2:98:e4:43:a4:2b:ac:db:db:6d:2f:5c:
                    ba:ee:c6:32:61:d0:da:e5:e2:e2:cd:2f:9d:7a:86:
                    7f:2b:92:0e:01:cb:4d:f8:38:d1:3c:7d:da:10:64:
                    eb:14:58:d8:e0:25:e3:1e:a8:04:3d:b6:6b:fc:82:
                    a4:a4:78:c8:ea:06:33:62:95:b2:e5:44:d9:b6:fa:
                    79:3e:1d:12:62:b7:94:fa:60:19:31:fc:ba:20:c2:
                    01:4b:21:08:ce:a6:39:28:95:18:74:99:c2:2c:c9:
                    0b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:27:05:7E:8D:DC:C7:6A:BC:04:4F:2A:B0:89:A2:C0:90:63:21:CE
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uycFfo3cx2q8BE8qsImiwJBjIc4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9a:41:e4:ea:22:8c:ac:58:22:48:c3:87:a1:be:b7:05:38:0d:
         67:49:e9:11:2f:cc:fe:9f:59:ac:e3:b1:7d:43:d1:53:18:b6:
         a3:c5:e8:d6:58:58:dd:3c:09:4e:de:81:11:21:76:7f:8c:86:
         05:7d:ba:67:e8:91:21:fe:fb:10:d3:01:a2:d1:44:de:21:12:
         4b:8e:25:07:c7:a1:ec:81:69:e8:b1:e5:79:b4:cc:23:2f:5d:
         4d:fc:3f:49:4f:57:80:96:12:78:9d:f3:5f:cc:11:21:a4:dd:
         2d:12:b8:09:46:c2:15:e3:7f:eb:1b:4f:0d:4d:99:65:e8:1d:
         7c:65:4e:bd:e9:55:da:fe:91:60:b4:3d:a3:d7:24:51:69:e1:
         74:42:e4:eb:34:b5:17:e4:45:43:2a:9f:8c:ba:cd:1f:23:e1:
         70:28:7c:50:d0:ed:c5:68:8d:d5:0b:d2:c8:7b:9e:27:8a:9f:
         cb:a6:2a:a0:9b:77:17:70:a5:a2:2b:76:a9:90:9f:a0:e6:bf:
         87:52:e9:ee:a8:9a:9b:30:f0:42:24:d9:46:0f:3a:79:8d:43:
         25:55:73:ee:e6:55:12:ee:25:ae:99:32:9a:b3:61:72:97:56:
         56:f5:71:ab:d3:2d:c2:f6:c9:3b:a2:e5:69:6c:38:b3:a0:b5:
         44:15:4f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----