Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yoyQPVGKX_fHtpgdn1mKOPDZ878.roa
File:                     yoyQPVGKX_fHtpgdn1mKOPDZ878.roa (raw, json)
Hash identifier:          Myv5S5t3KL7Q1HYJxeddTBn+ajbcgCirQRERK287B0U=
Subject key identifier:   CA:8C:90:3D:51:8A:5F:F7:C7:B6:98:1D:9F:59:8A:38:F0:D9:F3:BF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0CFB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yoyQPVGKX_fHtpgdn1mKOPDZ878.roa
Signing time:             Tue 29 Sep 2020 09:54:02 +0000
ROA not before:           Tue 29 Sep 2020 09:54:02 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.76.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3323 (0xcfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:02 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=CA8C903D518A5FF7C7B6981D9F598A38F0D9F3BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a8:54:80:02:f2:93:4e:97:80:cf:3c:aa:21:
                    ad:0d:3d:63:85:eb:d2:98:4f:b3:54:c1:e9:65:2a:
                    01:fb:55:f7:9d:c7:85:8c:a3:86:d0:6f:48:f7:b0:
                    c7:00:4b:1a:67:e6:7c:f5:bb:ce:ed:4a:45:b9:41:
                    0c:8c:39:9c:17:6f:61:fc:10:bf:37:c5:57:04:c8:
                    e3:2d:44:92:14:53:07:36:a4:59:40:08:16:45:07:
                    5a:f4:68:a4:2f:cd:64:66:a7:32:9c:5e:e5:3c:4e:
                    a1:00:cb:f2:00:b3:d2:24:c6:1c:28:ee:8b:d5:75:
                    d8:96:ca:55:c3:ff:67:37:2f:99:56:8d:9d:e3:3a:
                    95:1c:ec:5c:87:05:9a:9f:bd:f5:69:ef:9f:2b:7a:
                    50:f9:df:28:ba:57:e4:5f:c2:d0:b8:58:0b:d5:08:
                    08:97:88:7d:05:91:b7:09:74:d0:01:9e:7b:02:54:
                    37:e8:21:e6:8c:c8:64:6a:b1:d6:37:79:4e:4a:de:
                    56:bb:69:be:85:f6:f5:d5:cc:3d:e8:d9:c9:4f:5d:
                    d9:12:20:7f:4c:3b:b6:98:8c:3b:92:cf:7c:08:a2:
                    4a:ca:11:37:ba:d7:a5:92:20:5e:25:23:a3:29:01:
                    60:7f:48:61:b6:9c:a5:9c:fa:3e:4c:7a:f6:88:d5:
                    43:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8C:90:3D:51:8A:5F:F7:C7:B6:98:1D:9F:59:8A:38:F0:D9:F3:BF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yoyQPVGKX_fHtpgdn1mKOPDZ878.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:3e:ee:62:df:4c:85:de:e2:c2:6a:64:0f:3d:37:eb:61:e1:
         08:78:78:d4:57:e4:0e:ab:4d:9b:ec:15:ce:c0:78:62:13:b9:
         2f:59:8e:80:fe:0e:c9:d9:8a:c6:1e:f9:d7:75:2b:6b:1d:a2:
         be:d1:19:cf:cc:c2:20:fb:4a:ab:dc:c9:f4:bd:16:85:a7:4c:
         40:7e:10:66:a1:b3:fc:e5:b5:51:01:96:5a:2e:9f:19:0f:85:
         17:49:c4:53:d1:f6:83:22:fa:3c:12:97:94:94:9a:80:45:32:
         1a:e7:30:1c:0f:7b:2d:9e:38:55:d0:6f:6d:2f:17:27:6f:89:
         ea:9d:b5:32:cb:87:d5:40:a2:09:31:3d:51:26:ba:85:bc:1f:
         cb:f5:e7:a5:65:34:dd:f1:5b:a1:9d:27:01:a6:73:f6:0f:09:
         40:17:df:f4:85:f9:4b:75:48:ba:e8:3e:a2:9b:b0:20:f3:d9:
         4b:88:39:18:5c:82:8a:f6:d9:cc:c0:d2:57:a6:8b:26:f6:83:
         20:a0:a0:f3:c9:08:72:ab:15:02:46:27:0b:6b:07:16:03:de:
         29:03:9a:05:50:ed:dc:c4:e2:e9:59:0c:a3:2c:1a:0b:86:b2:
         22:e6:fd:71:bb:80:23:96:89:ee:29:89:61:7d:69:4b:1d:8d:
         dd:84:c0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----