Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xO1ahX4YF14nfaEnfF6rc2gHYas.roa
File:                     xO1ahX4YF14nfaEnfF6rc2gHYas.roa (raw, json)
Hash identifier:          EllnV2jV7crG/MaodCpvbqSKNrcBwl39IMGprpUthkY=
Subject key identifier:   C4:ED:5A:85:7E:18:17:5E:27:7D:A1:27:7C:5E:AB:73:68:07:61:AB
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0EC4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xO1ahX4YF14nfaEnfF6rc2gHYas.roa
Signing time:             Tue 29 Sep 2020 09:56:07 +0000
ROA not before:           Tue 29 Sep 2020 09:56:07 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.152.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3780 (0xec4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:07 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C4ED5A857E18175E277DA1277C5EAB73680761AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1e:ac:a7:c7:04:68:37:88:a7:56:3f:07:05:
                    38:95:04:d6:a9:3a:70:e2:c3:98:7e:63:60:87:af:
                    b0:04:0f:d3:38:22:9a:6d:8d:21:c8:50:4f:b9:8d:
                    59:9d:86:5e:1d:55:6d:03:41:2f:34:2f:69:5c:5a:
                    bc:c8:3f:1e:33:b0:08:06:ba:bc:40:94:77:d0:24:
                    3e:f0:a8:3b:a1:cc:3e:76:47:fd:cd:77:8b:48:b2:
                    91:ee:31:16:09:5f:82:fb:f6:1d:73:64:b6:3e:be:
                    47:d4:cc:84:40:44:ef:18:43:26:43:96:57:e5:2b:
                    b8:cf:09:88:09:92:14:76:af:aa:32:ad:c0:17:2b:
                    f9:b0:e2:38:02:20:5d:c0:4f:54:22:d9:f1:4c:52:
                    65:f3:4f:ca:a6:ff:a2:c1:fa:e2:cb:17:3e:dd:e7:
                    4e:42:14:9a:ac:d8:7d:5a:74:ce:8e:19:1d:a1:f8:
                    9e:d8:a4:00:b9:2e:eb:49:87:a4:af:fa:5b:95:43:
                    71:02:a3:38:ed:c2:29:b8:30:e4:7c:3d:0d:01:02:
                    5b:8f:28:af:b9:47:31:c1:6e:c3:0b:26:cb:67:8a:
                    f4:30:0a:c5:2b:76:8c:45:74:c7:43:28:52:f6:e1:
                    e2:b2:53:4e:7d:63:fa:37:48:f1:45:53:21:01:73:
                    57:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:ED:5A:85:7E:18:17:5E:27:7D:A1:27:7C:5E:AB:73:68:07:61:AB
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xO1ahX4YF14nfaEnfF6rc2gHYas.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         08:c1:4d:76:b3:9f:59:ec:f9:bf:25:fe:9e:43:4a:a9:a4:7f:
         c7:ea:3c:b6:70:bb:a1:69:79:bd:bb:c6:26:ea:23:2c:eb:04:
         d2:c9:dc:4a:86:10:9c:34:ae:b7:31:27:c5:dc:2d:23:f4:d8:
         42:fd:c4:f1:d9:06:7e:9f:5e:3e:79:2c:f0:0e:9c:23:b4:ee:
         9f:12:6d:25:5e:73:b5:1e:c0:5c:be:7f:1e:d5:9e:66:cc:2a:
         f2:85:dd:44:60:b9:f9:6b:69:4c:0c:39:79:50:6b:8e:4b:8d:
         5e:ba:12:b8:ed:50:8d:2e:c4:92:8a:f3:e7:30:64:ff:f0:3e:
         b5:39:39:73:62:6f:27:34:c5:1d:0f:ae:e7:96:58:91:24:22:
         b2:d3:7b:c7:0b:36:07:ff:e6:a2:eb:8c:3b:d1:17:46:05:48:
         74:dc:ff:ea:19:05:47:81:ee:61:0d:e6:db:37:89:7e:64:52:
         17:93:e0:92:e8:d9:f3:5a:e2:c1:7b:d2:92:e8:b8:e4:02:d8:
         0e:07:f1:ba:e5:29:30:7e:de:df:89:56:b6:6c:e8:12:49:0b:
         c4:02:ec:bb:22:26:44:28:cb:d9:00:bf:f3:55:b7:09:14:68:
         ee:4c:9f:0f:0e:16:61:a8:19:90:9c:23:3f:b3:67:18:b5:9b:
         0f:49:b2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----