Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vjkzXBBRSyDOiSaGTWH2DMD1GDY.roa
File:                     vjkzXBBRSyDOiSaGTWH2DMD1GDY.roa (raw, json)
Hash identifier:          1qmvjA2ueKf/0wveUVAItyoqhiFEGoMPkKxVCKoha0E=
Subject key identifier:   BE:39:33:5C:10:51:4B:20:CE:89:26:86:4D:61:F6:0C:C0:F5:18:36
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F8D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vjkzXBBRSyDOiSaGTWH2DMD1GDY.roa
Signing time:             Tue 29 Sep 2020 09:57:05 +0000
ROA not before:           Tue 29 Sep 2020 09:57:05 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.120.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3981 (0xf8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:57:05 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BE39335C10514B20CE8926864D61F60CC0F51836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:26:67:52:53:4b:50:d7:8b:a0:61:25:98:68:
                    90:68:87:44:1b:6c:3c:00:42:09:23:f4:af:15:a8:
                    f4:a5:59:9b:11:94:6b:ac:50:3a:24:35:7c:db:66:
                    2d:ae:59:de:64:13:2a:0f:b3:86:92:f2:ed:d9:b8:
                    13:45:58:c2:45:46:8d:bb:5d:1d:9a:69:ec:dc:75:
                    2f:b9:ed:aa:f3:c8:e1:50:a3:8a:69:89:8b:28:99:
                    2e:7e:7c:49:0e:54:fe:7c:56:94:1a:fa:93:2a:5f:
                    db:8c:85:34:6c:3c:95:62:30:d9:5e:f8:50:30:12:
                    50:ac:b3:3d:48:74:c9:b1:b1:51:f7:e3:96:b7:4f:
                    bd:8c:14:21:63:f6:41:f9:6d:e7:28:d6:22:8d:3b:
                    96:71:d7:7d:eb:b0:45:e6:ab:72:eb:5d:92:a4:df:
                    92:3c:1d:a7:49:9b:13:ca:ed:fe:d4:9e:00:d3:09:
                    ce:29:2b:b3:f3:35:0b:eb:0b:d6:c1:d3:d2:c8:76:
                    9d:b2:f4:1a:48:05:85:6d:c0:ed:a3:64:35:be:16:
                    cb:92:d7:fb:d0:3c:27:ab:e9:cb:10:b0:5d:09:e6:
                    33:74:fc:9c:23:42:81:06:29:63:af:6d:a9:6e:85:
                    94:4c:85:62:03:6e:c0:8f:44:bf:d3:c5:ff:76:82:
                    26:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:39:33:5C:10:51:4B:20:CE:89:26:86:4D:61:F6:0C:C0:F5:18:36
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vjkzXBBRSyDOiSaGTWH2DMD1GDY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         50:89:ee:f5:c7:06:bf:c7:cc:87:4d:e9:c9:c5:67:c7:ef:8c:
         1d:c2:60:54:a4:17:55:d4:be:cc:b8:6e:14:b6:16:18:ca:49:
         1a:81:c7:92:82:58:89:4d:8d:35:5f:6a:c1:eb:0f:9a:d2:e5:
         81:58:bc:59:f4:be:05:93:2c:cd:1b:f7:86:11:3b:21:5d:e2:
         02:6b:3a:e7:fa:97:b1:05:7e:88:0e:00:85:96:6c:ff:1f:eb:
         e6:f1:3d:45:63:2b:94:14:9c:b2:84:81:7e:72:dd:12:33:3f:
         ff:d1:ca:88:aa:2e:61:46:9d:46:2d:50:23:9e:ec:d4:a5:c4:
         62:37:70:c1:b2:5b:ac:cc:aa:4a:50:ea:2d:55:0c:2c:d9:a2:
         0c:f3:eb:63:01:f3:69:87:b8:b1:e7:67:8d:a1:2e:bf:88:80:
         c9:3e:0f:4d:5e:50:f9:7a:f9:85:4a:83:4f:5c:99:2e:ea:a9:
         d1:b8:b5:5f:35:d6:81:4a:4c:21:f3:3c:5b:16:a9:d8:73:bf:
         9b:c9:85:63:dc:fa:0a:62:2c:f6:b0:a4:69:e4:43:17:09:c5:
         0f:d9:0a:8d:99:8e:e2:da:f7:b1:f9:03:14:3d:cf:4d:4c:9b:
         fd:82:ef:aa:0a:72:dc:9a:33:69:3a:92:bd:1c:13:02:cf:52:
         04:7d:b5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----