Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/y4gtIblMJmT2S2DxQoRtJKF7TiI.roa
File:                     y4gtIblMJmT2S2DxQoRtJKF7TiI.roa (raw, json)
Hash identifier:          gkxFCh/gnnMjeUXrdOhxvJ5DvjjJENcJHrSSk5TwDkw=
Subject key identifier:   CB:88:2D:21:B9:4C:26:64:F6:4B:60:F1:42:84:6D:24:A1:7B:4E:22
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F48
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/y4gtIblMJmT2S2DxQoRtJKF7TiI.roa
Signing time:             Tue 29 Sep 2020 09:56:45 +0000
ROA not before:           Tue 29 Sep 2020 09:56:45 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.193.100.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3912 (0xf48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:45 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=CB882D21B94C2664F64B60F142846D24A17B4E22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fa:8f:dd:4e:01:c8:29:e3:99:b4:39:19:da:
                    2d:2a:8e:6c:47:52:3c:16:0c:b3:9e:9b:78:46:07:
                    c1:c3:9c:ca:8d:9b:02:4e:07:b7:77:d4:c9:ba:01:
                    85:c2:16:23:6c:f6:77:2d:f7:7c:ef:3a:75:6a:32:
                    93:60:eb:ca:bb:f8:6b:21:72:f6:29:6a:2b:3d:69:
                    a1:11:91:95:4c:a7:40:74:86:ad:69:0e:1f:d8:36:
                    6b:ac:8b:51:69:0e:f0:b2:d5:8d:e5:12:a1:3e:88:
                    b1:78:37:16:57:7d:df:4e:7f:8e:5e:40:1e:d5:57:
                    fa:5a:1c:12:ab:c1:06:a2:72:e0:bd:9c:e4:e9:d1:
                    03:f3:aa:d4:0f:49:41:60:ca:41:1d:11:4a:cc:e3:
                    83:4f:a9:3b:37:a3:fb:e1:70:28:fe:e8:78:57:ce:
                    dc:38:9e:2e:e1:70:9c:27:f3:16:df:8c:d2:5f:78:
                    02:00:4b:35:6c:bc:50:74:9d:d4:b6:99:4d:2c:fa:
                    01:32:bd:4c:17:34:36:75:98:9d:d4:95:88:e8:d2:
                    4a:3a:05:6d:e3:59:4c:c4:65:74:ae:84:80:82:9a:
                    f4:7d:42:7b:6f:b7:89:06:b6:eb:57:94:20:83:85:
                    0e:cb:8a:87:a5:c9:3e:4c:8f:9f:2e:4c:f3:e5:bb:
                    48:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:88:2D:21:B9:4C:26:64:F6:4B:60:F1:42:84:6D:24:A1:7B:4E:22
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/y4gtIblMJmT2S2DxQoRtJKF7TiI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:cd:f5:93:40:10:2e:5d:f0:c7:6e:e1:3e:42:86:2e:ff:c7:
         ff:79:37:fd:3d:4b:1b:cc:b0:36:bc:61:a5:8d:6a:6e:9b:46:
         7b:24:69:ee:66:0f:62:63:78:62:a6:e5:58:72:f8:0c:d7:27:
         85:29:1b:34:1d:c4:09:ac:30:48:f4:e9:6a:85:64:5d:37:28:
         5f:bf:e0:c3:81:6a:59:c9:bb:9a:9b:92:e1:10:24:91:3b:a4:
         1e:00:07:cc:79:b8:25:7c:43:95:0c:9d:b7:5f:6a:43:8b:c7:
         79:6f:cd:cc:90:c4:9a:de:53:c3:b5:8d:25:92:c0:c6:fc:f4:
         e5:22:b2:1f:70:cd:cd:af:46:10:be:fd:52:7a:2d:4c:fe:ab:
         7b:bc:00:b3:9a:a2:5a:e7:a4:d5:2c:49:a0:f5:09:4d:4e:c8:
         4a:f3:5b:e7:a9:27:b7:71:a9:1b:eb:34:e7:3e:82:07:47:ba:
         0f:b0:89:e5:0c:56:0a:dc:4c:41:18:b7:92:a3:7e:7e:d5:22:
         e4:dd:5d:54:50:11:a6:f9:ce:0b:89:02:44:da:33:68:56:14:
         88:e9:a6:d9:dd:df:54:a0:fa:38:27:20:ac:09:e3:62:1d:86:
         bd:6f:3a:b7:27:9b:65:28:ba:ef:72:1f:b1:82:90:7b:df:18:
         82:62:2f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----