Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uypT5C1Pa6dQf-GyyFdCGnH6x3I.roa
File:                     uypT5C1Pa6dQf-GyyFdCGnH6x3I.roa (raw, json)
Hash identifier:          OPJN6oqGplV1hLi9GKLC8cRcgDZhKIQzAwFKKIcJ/4k=
Subject key identifier:   BB:2A:53:E4:2D:4F:6B:A7:50:7F:E1:B2:C8:57:42:1A:71:FA:C7:72
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F7F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uypT5C1Pa6dQf-GyyFdCGnH6x3I.roa
Signing time:             Tue 29 Sep 2020 09:57:02 +0000
ROA not before:           Tue 29 Sep 2020 09:57:02 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.128.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3967 (0xf7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:57:02 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BB2A53E42D4F6BA7507FE1B2C857421A71FAC772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3c:11:22:28:20:cd:24:f7:1f:37:53:5b:0e:
                    86:ce:6f:e3:cc:12:87:1e:65:b0:a5:f1:ff:66:12:
                    52:b3:e7:70:59:3d:fa:68:82:23:54:31:11:26:41:
                    a7:55:45:82:25:21:6d:26:a7:93:8c:ab:d2:31:29:
                    44:42:9d:8a:c1:f9:c4:42:42:11:78:cb:94:ca:47:
                    06:00:78:e4:96:f0:52:68:77:fe:89:5f:93:01:c7:
                    8c:49:eb:48:46:1e:0f:a7:99:b9:1e:0a:76:f0:3c:
                    9c:06:20:b0:f4:b7:11:a5:87:29:26:e0:44:73:d4:
                    55:61:41:82:cf:b8:db:c7:73:54:a7:cd:18:bc:40:
                    07:9d:9f:ab:d9:6a:dc:f0:56:cf:db:77:67:ee:08:
                    dd:e7:18:98:a2:8b:6f:4f:c1:cd:23:82:61:02:4b:
                    76:68:e1:96:a1:c8:35:b4:74:2c:b4:96:ea:24:97:
                    03:79:0f:1e:ae:02:f1:fa:5a:d4:4d:c0:de:d0:0c:
                    63:20:65:20:10:e3:46:f4:5d:3b:ed:7e:ad:6d:7a:
                    5f:68:99:b9:11:4e:42:44:3c:f6:ec:0b:90:dd:91:
                    86:bc:e0:eb:8e:4e:d7:a9:e5:ec:45:62:dd:33:ac:
                    4f:5a:d7:c3:64:3c:77:13:b4:bc:b3:cf:45:95:db:
                    47:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2A:53:E4:2D:4F:6B:A7:50:7F:E1:B2:C8:57:42:1A:71:FA:C7:72
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uypT5C1Pa6dQf-GyyFdCGnH6x3I.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:a7:c1:25:db:ff:15:00:25:ff:d5:59:07:28:7c:be:48:f5:
         f4:95:70:d5:8b:ad:4b:9d:3a:8a:64:46:0f:b7:b3:cf:28:14:
         97:9e:d8:68:d4:28:0a:03:4e:4e:37:7d:67:f5:2f:62:71:c4:
         be:e8:03:e7:1f:80:00:45:2c:70:af:d0:6a:b5:0b:ee:e4:2a:
         6a:c3:b0:9c:50:3b:7f:92:ac:b4:a6:a9:37:25:3d:63:48:d9:
         55:2c:0a:b9:df:51:d8:0c:70:0e:a1:29:14:17:73:11:6c:2b:
         3f:4d:74:f8:d6:32:2a:ff:25:a9:3b:a9:c0:d2:67:d4:e1:9b:
         1b:67:b2:75:69:fc:34:64:06:d5:c5:97:8f:6f:30:b4:96:55:
         b2:fb:c8:67:57:1e:ba:74:e2:82:39:4c:0e:c9:ef:36:17:a7:
         a1:fe:5a:b0:84:08:bd:95:a6:4e:35:1c:63:5e:51:cf:63:c7:
         29:08:29:fc:bc:d7:1a:72:0d:c5:c8:5f:08:5f:d8:24:8c:14:
         3c:1f:24:03:f7:5a:fd:bf:07:30:98:f5:29:63:30:c1:93:f2:
         51:d7:21:f0:09:25:be:63:6b:76:c7:37:bf:5f:a6:3e:c0:15:
         6b:e6:45:0a:5a:97:4c:85:1c:a8:e4:83:da:ba:c3:22:e9:24:
         df:ba:ad:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----