Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xUfD-Pskfsyevwn3CpZ57IoQdfY.roa
File:                     xUfD-Pskfsyevwn3CpZ57IoQdfY.roa (raw, json)
Hash identifier:          2RqcinLTZbU8lUanN3/hbEQ8+8/cTU54OE/gDVAdbLQ=
Subject key identifier:   C5:47:C3:F8:FB:24:7E:CC:9E:BF:09:F7:0A:96:79:EC:8A:10:75:F6
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       10B2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xUfD-Pskfsyevwn3CpZ57IoQdfY.roa
Signing time:             Wed 25 Nov 2020 04:19:50 +0000
ROA not before:           Wed 25 Nov 2020 04:19:50 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        118.232.244.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4274 (0x10b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:19:50 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C547C3F8FB247ECC9EBF09F70A9679EC8A1075F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:19:f4:ac:d0:ca:19:24:54:a1:40:c3:fa:68:
                    c6:36:aa:40:a7:21:c7:c1:1e:6b:0a:96:70:c2:c3:
                    69:3e:d4:88:d3:a2:ee:e9:73:a2:84:5c:7f:3b:57:
                    94:55:cf:e9:05:ed:93:3f:85:27:1e:8e:29:97:df:
                    ad:e8:62:e5:e1:f7:81:0b:66:a1:25:07:b0:b0:f7:
                    1f:de:29:41:92:68:c8:3d:69:53:dc:31:b9:88:ae:
                    f1:5d:e0:70:2b:c1:c3:d5:4e:1d:03:80:ac:9e:2c:
                    19:f6:83:ae:dc:f2:ec:3c:63:16:d8:81:9f:0f:e6:
                    1b:42:36:49:80:0e:26:aa:52:d3:83:24:f4:ea:f7:
                    c9:db:d0:39:2d:af:46:84:59:da:bf:ff:69:d5:f1:
                    76:10:1f:68:82:2f:2b:25:67:9e:de:f9:11:2f:45:
                    e2:84:6a:60:06:ce:fa:cf:6b:aa:72:50:d1:dd:b5:
                    4e:a5:01:74:a9:c7:55:a0:5a:10:d8:de:67:81:4c:
                    4a:6d:24:7a:93:39:d7:0b:35:0b:ff:ef:93:b7:33:
                    b6:ae:16:f2:9e:17:15:dd:15:9d:81:e9:e1:64:c9:
                    cd:62:6c:92:21:ca:2a:de:0f:0b:20:86:ab:53:58:
                    77:29:b3:0c:e6:88:02:05:7d:9d:69:84:a4:5d:ba:
                    51:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:47:C3:F8:FB:24:7E:CC:9E:BF:09:F7:0A:96:79:EC:8A:10:75:F6
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xUfD-Pskfsyevwn3CpZ57IoQdfY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:55:e0:64:78:9f:24:e3:0a:63:be:41:bc:8f:03:39:bf:43:
         16:87:07:14:2d:5d:64:e5:b3:b4:9a:43:1f:ed:68:7b:2b:a1:
         29:46:96:3a:6f:c2:16:4e:4a:dc:8f:0a:58:f3:f9:a6:0d:ac:
         2c:c2:62:cd:d5:6f:1d:07:27:33:c6:12:6c:7c:13:60:f4:9a:
         30:b2:b8:47:2d:bf:50:fa:bd:4f:76:fe:bb:7b:66:e3:98:88:
         22:ec:d8:95:3d:3b:d2:87:0c:af:f8:59:cc:2a:dd:0a:f0:09:
         16:69:50:38:14:d9:ab:86:cc:b8:ad:8f:ef:7d:50:6f:e3:72:
         09:83:89:b7:b4:c0:29:14:66:60:05:93:c8:fc:13:17:b3:cf:
         39:a6:14:10:0c:91:be:db:4a:26:ed:fc:5a:35:0f:6a:ee:15:
         40:61:84:63:97:a8:d6:50:fb:a2:85:6a:ba:42:ee:e5:ef:f3:
         8c:2c:46:86:73:77:06:25:b0:86:6b:d1:7c:e1:7b:4e:a3:27:
         4d:4c:0d:e6:f1:d4:21:4b:57:81:30:ff:a5:f2:16:79:be:42:
         bf:ae:f2:d6:63:6d:7c:37:25:a4:e6:d3:6c:95:2e:3a:03:1c:
         51:2b:ce:05:a9:f6:8c:f7:a3:a1:07:86:91:c1:96:49:51:ba:
         25:31:e6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----