Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yz_JjcHoZLsQ3_vfE7_Uxj8z_pc.roa
File:                     yz_JjcHoZLsQ3_vfE7_Uxj8z_pc.roa (raw, json)
Hash identifier:          kXqi5d9TNV+Tf8ie9LHSF3L2H6pEsNo9M5JzLqTkUE8=
Subject key identifier:   CB:3F:C9:8D:C1:E8:64:BB:10:DF:FB:DF:13:BF:D4:C6:3F:33:FE:97
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E4E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yz_JjcHoZLsQ3_vfE7_Uxj8z_pc.roa
Signing time:             Tue 29 Sep 2020 09:55:34 +0000
ROA not before:           Tue 29 Sep 2020 09:55:34 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.192.160.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3662 (0xe4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:34 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=CB3FC98DC1E864BB10DFFBDF13BFD4C63F33FE97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:41:da:c0:01:4c:b6:7c:d0:9e:68:6e:29:b7:
                    88:d1:a3:fb:c2:a3:9a:e4:fc:e8:78:21:45:a2:08:
                    73:fb:38:c6:74:8b:15:45:88:76:39:3d:57:84:d3:
                    8d:93:5f:56:34:da:39:33:8d:66:f0:da:9e:5a:2f:
                    39:a3:fe:fd:39:5e:fb:d0:1a:65:03:00:5a:22:b8:
                    f6:39:93:15:54:79:fd:5b:d2:93:b4:78:cb:7d:2b:
                    2a:3c:38:52:04:16:59:b7:be:bf:b2:64:ab:1c:f9:
                    4e:b1:ee:ff:c2:6c:5f:df:ee:0b:c5:b7:fb:f5:8b:
                    d1:26:c5:bc:53:e5:07:3f:d0:01:99:6b:bf:b1:c9:
                    d3:9b:96:8d:49:4b:9b:c1:46:7e:64:71:62:10:0e:
                    b3:33:e1:ac:36:9e:1c:4d:b2:13:c2:82:ef:b9:a5:
                    57:d3:20:78:01:e6:8a:7c:2f:a8:af:49:13:60:7a:
                    50:c8:84:8a:6a:ea:99:b4:bd:9b:f6:2d:0d:3f:c6:
                    5c:44:e6:c2:ad:9b:8d:03:ce:55:9c:47:38:5c:ef:
                    29:8a:e7:1c:de:85:96:ba:8a:62:a6:1c:45:ae:00:
                    01:59:56:03:a7:87:da:a9:49:4d:04:b8:8f:ae:71:
                    df:0c:53:b5:e6:7b:06:4b:da:4c:f9:ef:b8:dc:60:
                    86:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:3F:C9:8D:C1:E8:64:BB:10:DF:FB:DF:13:BF:D4:C6:3F:33:FE:97
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yz_JjcHoZLsQ3_vfE7_Uxj8z_pc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1f:8e:b2:3c:5e:f5:89:34:80:92:04:4e:f6:cd:b9:8c:a7:2e:
         76:bc:8d:52:3a:b8:64:e0:35:f8:63:f0:b8:9f:6a:d0:4b:e2:
         73:15:cb:65:08:5f:ca:31:a5:2b:12:99:08:44:01:0e:15:92:
         71:9e:5c:c7:92:7a:90:aa:c2:56:91:c9:cd:ba:26:86:9e:82:
         91:44:2f:2a:56:8a:cc:07:3f:7c:ad:9c:2f:ce:6a:96:9e:a0:
         59:d5:3a:62:5f:64:ca:d3:73:9f:ab:3c:e5:2b:b7:00:bb:ab:
         88:18:a5:63:42:dd:42:9c:31:ad:ff:9f:f0:1b:27:a7:98:df:
         29:14:be:e7:d7:e6:3a:ab:50:1a:59:ef:68:d0:1f:e1:25:1e:
         a5:be:90:eb:82:88:85:3e:ce:35:77:61:ba:37:ab:d4:ba:8e:
         84:2c:77:95:be:20:dc:80:70:d7:79:63:ed:d2:ce:b5:2c:71:
         71:3d:83:fd:a4:73:7b:0d:1b:24:d5:d2:3f:2e:47:2b:32:c6:
         b7:fa:df:3e:6c:ac:14:4e:26:b9:33:46:fc:3b:8b:d4:c7:38:
         ef:1c:bd:54:46:97:99:91:d0:a7:77:a6:ba:f6:56:d0:42:12:
         64:6d:a7:dc:05:f9:82:ba:6e:44:13:5b:51:a8:b9:6e:24:ff:
         57:31:7d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----