Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yR1iwPpR3RqD4YwFUYxNML7DpPU.roa
File:                     yR1iwPpR3RqD4YwFUYxNML7DpPU.roa (raw, json)
Hash identifier:          s8rfdrVImD3gnEq0FHv1mzr/TkTmAFZcsRZWqGSS+Jk=
Subject key identifier:   C9:1D:62:C0:FA:51:DD:1A:83:E1:8C:05:51:8C:4D:30:BE:C3:A4:F5
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E64
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yR1iwPpR3RqD4YwFUYxNML7DpPU.roa
Signing time:             Tue 29 Sep 2020 09:55:40 +0000
ROA not before:           Tue 29 Sep 2020 09:55:40 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.233.124.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3684 (0xe64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:40 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C91D62C0FA51DD1A83E18C05518C4D30BEC3A4F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:55:6f:02:5c:b0:c7:9e:2a:72:95:c6:4d:89:
                    2d:c7:19:c0:ac:98:d4:ca:93:a3:6c:b6:9f:e9:09:
                    6a:bb:42:f6:c5:c6:2c:64:23:28:dc:8a:31:0d:8d:
                    f8:a0:5a:ff:6e:6b:86:04:03:50:db:a0:21:c1:ee:
                    55:1d:d1:7e:5e:fa:56:a6:e3:33:cc:7a:a9:75:60:
                    65:56:b2:07:33:69:f4:05:c2:6f:a4:4a:e2:b9:a8:
                    60:11:91:50:8f:da:9f:44:a5:9e:a2:db:cf:bb:64:
                    d0:29:84:b6:5e:be:a5:e1:86:6a:54:16:f9:f3:3a:
                    e1:9e:5f:ff:27:a2:de:64:33:ee:da:ce:32:99:38:
                    08:35:4c:4f:49:46:0e:68:8e:10:ea:12:00:2d:89:
                    af:ab:01:42:4d:ba:72:37:0b:b6:d0:d7:7b:ae:61:
                    23:50:02:e7:4c:20:a9:81:41:04:0b:6e:85:a3:eb:
                    0c:60:04:fa:bb:e5:c9:85:9a:85:c9:1a:e5:83:2b:
                    0f:03:2c:22:58:55:f3:2c:df:af:ce:8a:b5:fb:44:
                    28:21:01:4c:49:ed:7a:4d:74:74:87:a7:23:4e:7b:
                    cd:45:4e:e8:18:ed:54:7c:88:b5:8f:db:08:f0:b7:
                    41:b3:01:34:87:11:5d:a4:80:84:93:a6:7e:55:8a:
                    1d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1D:62:C0:FA:51:DD:1A:83:E1:8C:05:51:8C:4D:30:BE:C3:A4:F5
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yR1iwPpR3RqD4YwFUYxNML7DpPU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:33:b3:ce:d0:a1:cb:a4:9c:3f:fc:2a:cd:1d:56:2c:c8:21:
         b0:17:22:15:04:0c:38:9f:7f:23:8a:09:a8:32:79:13:ce:ec:
         06:22:95:66:01:f8:90:87:41:b6:1d:75:e5:5d:f4:59:ff:bd:
         7a:e8:81:e8:74:1c:0b:ae:c1:39:27:3a:80:c6:84:be:4b:9d:
         60:8b:1d:39:1e:78:75:72:1b:7d:5d:a0:76:54:da:94:d7:18:
         01:c7:4e:30:b3:1c:8c:6f:e7:ef:8c:a9:6b:a6:16:0b:37:9d:
         5e:c1:8d:cb:1d:76:8b:f4:64:cc:9f:ab:24:3e:a9:f1:55:7c:
         b0:53:44:98:34:b2:19:3b:08:94:de:f7:c9:de:35:93:fa:c6:
         79:69:79:f8:2e:2d:2e:51:68:f4:fb:7a:87:9a:cd:26:bb:fd:
         96:56:f0:16:4f:8f:38:bd:93:a8:39:e7:6b:34:70:04:7a:33:
         23:b3:46:d9:26:1e:76:2e:07:2f:95:5a:3b:3d:8e:5a:c0:cd:
         f5:8e:8a:00:14:c2:03:8f:af:31:eb:f1:59:0d:09:9c:14:98:
         1a:10:c4:78:a2:df:e2:cb:b1:8a:f2:3d:49:ba:13:85:cd:e8:
         41:18:5d:6e:9c:fe:c7:cf:78:f9:27:bd:4e:43:04:34:51:7b:
         04:9a:77:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----