Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w8s1JVOfs8gAnCiySVTk0mw6l6E.roa
File:                     w8s1JVOfs8gAnCiySVTk0mw6l6E.roa (raw, json)
Hash identifier:          Jke2rAAy+OCp1iDN3RouwpmwXX+Jfk1ixGe2jNH7MhI=
Subject key identifier:   C3:CB:35:25:53:9F:B3:C8:00:9C:28:B2:49:54:E4:D2:6C:3A:97:A1
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E6E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w8s1JVOfs8gAnCiySVTk0mw6l6E.roa
Signing time:             Tue 29 Sep 2020 09:55:43 +0000
ROA not before:           Tue 29 Sep 2020 09:55:43 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        123.195.128.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3694 (0xe6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:43 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C3CB3525539FB3C8009C28B24954E4D26C3A97A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ff:d9:70:c1:e5:c0:0c:04:b5:9e:82:cc:6f:
                    13:1f:79:f7:93:39:a5:0f:c4:9b:99:96:81:0d:e2:
                    d4:14:e8:fd:de:db:e0:a7:3a:90:c7:c4:14:c6:b1:
                    7f:5c:c0:2d:94:33:3c:95:b9:eb:21:94:c9:53:e7:
                    ef:45:71:9b:fe:3b:e7:63:7e:51:5b:b4:ea:fe:21:
                    45:fb:a5:5a:cc:4e:22:55:e0:b2:f3:c2:ec:77:81:
                    b5:74:2a:88:3a:0d:7b:18:53:98:c9:fd:04:92:bf:
                    b4:4a:3d:19:34:fd:20:a8:97:84:3c:8f:d1:45:c2:
                    a8:06:9e:44:2b:1c:d7:ca:69:51:d9:26:0a:2c:a5:
                    0c:91:2c:07:5c:c2:42:f5:93:21:dc:78:71:fa:5a:
                    9d:54:8f:21:c6:68:cf:0c:ef:9c:17:aa:86:66:d8:
                    09:1f:97:3e:9b:e8:69:fa:d3:20:18:ee:56:13:2b:
                    97:c9:04:cc:79:97:c7:50:f4:5f:70:69:4b:98:9a:
                    0d:e8:9a:94:0e:b9:d6:85:9c:5d:3b:05:82:f5:12:
                    1a:fd:e6:fb:c7:84:b0:4f:d0:35:40:9a:82:0e:de:
                    38:07:3c:35:10:84:b9:43:96:9f:8d:0d:e3:e8:a7:
                    f1:a5:96:46:14:d9:32:a7:aa:45:bb:eb:50:f9:91:
                    ef:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CB:35:25:53:9F:B3:C8:00:9C:28:B2:49:54:E4:D2:6C:3A:97:A1
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w8s1JVOfs8gAnCiySVTk0mw6l6E.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4e:d2:b8:b4:a5:aa:dc:8c:0c:30:87:02:de:4d:82:84:4c:fa:
         6d:81:a2:5a:76:3d:2d:dd:32:51:ba:1b:2c:f9:84:1b:92:e2:
         30:67:7f:ee:7d:3c:67:24:f9:df:5c:ff:88:7a:26:75:d0:29:
         6e:d9:b3:49:98:11:3d:58:5b:8d:88:8c:6a:31:d8:e1:0b:1a:
         4b:8f:4c:1a:74:ba:db:09:42:6c:27:6e:22:f2:6a:5a:a6:2d:
         72:3f:55:37:d3:02:95:95:d4:66:80:9b:00:47:d0:6f:27:f6:
         14:5e:ff:58:b4:82:aa:7f:54:49:98:36:16:7e:a1:af:99:8b:
         6d:c3:9a:df:cc:13:71:e5:d2:89:59:4a:0c:52:4a:a0:c3:ab:
         6d:96:b6:66:3d:bb:c4:ca:c6:5a:24:ca:bd:71:d6:7d:f5:c7:
         c9:ac:f8:18:6e:e0:dd:02:a2:f8:e9:d7:af:25:b0:99:f1:f4:
         53:97:5b:7c:f0:9e:e5:89:f9:2d:5c:8a:3e:77:84:3d:88:3e:
         24:eb:e0:29:de:4e:06:3f:9a:f1:8e:9f:4d:81:9b:cd:51:f2:
         8b:f1:e5:20:87:36:4a:97:74:9f:ca:97:bd:f0:15:bb:6e:5d:
         0e:ba:9c:9a:b9:ea:57:4e:47:27:1d:af:0f:37:cc:30:b0:a1:
         4f:61:55:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----