Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xDiwedfIUG730_Ef65P1oi0zmks.roa
File:                     xDiwedfIUG730_Ef65P1oi0zmks.roa (raw, json)
Hash identifier:          aJuqHB7GL9gfKMaapQT2SDuM5w2idHZfUmY7ta+fVnk=
Subject key identifier:   C4:38:B0:79:D7:C8:50:6E:F7:D3:F1:1F:EB:93:F5:A2:2D:33:9A:4B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0EAD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xDiwedfIUG730_Ef65P1oi0zmks.roa
Signing time:             Tue 29 Sep 2020 09:56:01 +0000
ROA not before:           Tue 29 Sep 2020 09:56:01 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.204.0/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3757 (0xead)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:01 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C438B079D7C8506EF7D3F11FEB93F5A22D339A4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:37:9b:a5:ad:77:06:c0:46:78:a0:c0:76:c0:
                    78:ce:87:1b:2c:dc:73:41:55:a0:de:c3:43:5c:7b:
                    13:c6:89:fc:53:99:29:87:08:a9:64:34:95:30:12:
                    a1:f9:c0:d0:58:4b:5d:ce:20:b6:ed:52:11:1f:af:
                    e5:60:52:90:b2:bf:3d:03:e4:a1:5c:95:9c:a1:12:
                    67:18:94:24:14:30:27:97:54:d9:39:f6:4c:6d:91:
                    ab:31:18:02:16:8d:44:fc:e4:3a:09:60:d5:a4:36:
                    ea:96:dd:b5:7e:a3:13:09:1e:dc:4c:60:71:dd:d9:
                    b2:92:92:5d:09:87:78:f5:8d:91:ba:c3:0a:e5:09:
                    17:6c:7e:41:97:50:02:08:cd:c7:d2:3f:93:99:92:
                    85:13:fd:0f:2d:64:01:d5:80:3b:5c:b3:c1:5c:7c:
                    48:3b:b5:ec:5f:5a:21:62:5c:0c:34:ec:14:34:64:
                    b0:61:8e:83:07:c3:3e:6a:9d:44:c0:35:53:c4:ab:
                    dd:ab:c6:c4:1e:80:14:22:4e:bd:7a:e6:98:76:6c:
                    de:09:e2:32:ad:f8:38:d6:5c:9a:47:ae:62:d7:44:
                    1a:4c:45:22:ff:c5:22:1b:a3:6e:8e:46:2f:2c:35:
                    46:e5:7f:e7:79:8b:e8:d5:ef:84:e2:76:ca:eb:bb:
                    c7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:38:B0:79:D7:C8:50:6E:F7:D3:F1:1F:EB:93:F5:A2:2D:33:9A:4B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xDiwedfIUG730_Ef65P1oi0zmks.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.204.0/26

    Signature Algorithm: sha256WithRSAEncryption
         5f:ea:b0:30:f2:69:ef:25:cb:3b:c0:98:ca:91:91:57:0a:0e:
         f5:6f:1c:85:3f:fe:ec:0b:00:9a:2a:3a:ac:51:3b:1d:8d:47:
         d3:42:5d:bd:b6:6a:1f:d8:13:d5:a4:21:11:4a:f2:1f:b2:5a:
         6c:e7:27:a5:14:9f:3d:31:4d:b5:e0:39:a5:4a:9a:07:87:e8:
         1e:3f:26:7b:aa:a3:1c:fa:aa:17:a0:a3:07:f0:b3:b4:30:2c:
         bd:10:84:58:c6:9a:95:39:e9:86:c5:4a:00:71:15:2c:4b:30:
         bc:3f:c8:13:a1:34:e8:b5:a1:09:da:68:7a:95:d8:d7:24:0f:
         6e:32:9a:fb:b1:c9:df:b5:71:87:7a:a8:75:56:3a:f6:40:70:
         5e:e5:34:8c:38:36:b1:00:b3:ae:4b:9f:59:0f:ff:10:47:01:
         c7:4f:25:fc:65:83:2c:b8:b4:7b:55:10:1a:24:7f:e9:c3:4a:
         da:ee:d4:ff:5a:3c:34:16:7c:63:c8:3b:d8:cb:5f:49:73:a8:
         e2:a8:70:82:96:33:96:de:86:10:75:42:1d:d1:f2:6c:55:37:
         c2:c1:35:61:de:cf:79:0a:84:85:e5:93:ca:dd:04:75:7b:61:
         59:a6:bc:a8:2a:50:5c:87:d2:87:e5:32:fe:c7:6e:74:5f:4a:
         99:3b:e3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----