Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z4SSRtViA4Pom_LsodP-ptRd0pQ.roa
File:                     z4SSRtViA4Pom_LsodP-ptRd0pQ.roa (raw, json)
Hash identifier:          WN5tkmsF3azalnoJyuq4WRTyEZLLrR1R3CremB3KFQQ=
Subject key identifier:   CF:84:92:46:D5:62:03:83:E8:9B:F2:EC:A1:D3:FE:A6:D4:5D:D2:94
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E62
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z4SSRtViA4Pom_LsodP-ptRd0pQ.roa
Signing time:             Tue 29 Sep 2020 09:55:40 +0000
ROA not before:           Tue 29 Sep 2020 09:55:40 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.8.128/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3682 (0xe62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:40 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=CF849246D5620383E89BF2ECA1D3FEA6D45DD294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:31:48:83:f6:08:93:b3:9a:2c:52:a7:fd:e7:
                    71:3e:6b:33:2c:48:74:81:1e:84:20:57:1a:67:f7:
                    1e:39:0d:91:c1:e3:67:06:37:39:20:bc:45:32:73:
                    51:fe:93:10:47:9d:bc:e8:4a:71:90:77:11:dd:88:
                    a7:f8:fb:a9:52:20:d1:91:6d:33:67:09:d7:87:d0:
                    fa:ef:48:3f:cf:8f:a4:e5:91:dd:5b:3b:da:20:57:
                    b7:df:be:fe:99:f4:0d:18:ad:2e:aa:46:cb:80:74:
                    a7:bd:ec:4b:c8:4c:59:c9:c7:6d:5e:5d:54:ed:e2:
                    08:c4:39:fe:ed:14:c7:f1:12:af:f9:88:4a:ba:10:
                    74:30:5a:34:a8:89:62:cb:68:4c:b6:c9:27:b8:53:
                    65:83:5a:15:93:02:cd:49:60:2b:ec:57:56:40:c8:
                    6f:0e:ef:e6:f6:73:a3:5b:ce:29:1e:c5:f7:30:13:
                    54:a2:71:a2:7a:e3:72:1d:0d:4b:1b:61:0f:89:d3:
                    79:34:26:44:6e:98:7c:a4:b1:d2:37:cc:07:95:12:
                    2d:9d:a3:50:6d:01:4b:d9:97:88:5d:38:2c:6c:b8:
                    be:d4:49:f9:77:b3:b1:3a:bc:d5:9a:8f:86:32:2a:
                    75:56:56:e6:03:d4:c9:ac:f3:29:28:17:45:27:70:
                    69:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:84:92:46:D5:62:03:83:E8:9B:F2:EC:A1:D3:FE:A6:D4:5D:D2:94
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z4SSRtViA4Pom_LsodP-ptRd0pQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.8.128/26

    Signature Algorithm: sha256WithRSAEncryption
         92:52:83:f9:8b:55:a5:8d:0d:f5:16:48:e0:a3:bb:55:49:5a:
         4c:dd:42:db:98:db:08:39:22:04:d9:6d:55:ed:2e:c7:f0:ad:
         3a:3f:ca:50:1b:b3:f5:cf:33:9d:0f:6a:04:e4:55:c6:0d:a3:
         ab:e7:21:c8:a4:4e:8b:90:05:6c:26:23:e1:c7:66:52:49:de:
         9f:7d:b6:25:f8:03:75:24:cf:c2:3c:1e:02:dc:f5:73:94:8e:
         8c:86:6b:e7:b4:a4:f0:5a:24:9a:76:74:a0:92:19:3c:ce:59:
         08:a6:ec:6b:9d:0a:8e:4d:72:c2:f9:fc:2b:12:3b:10:45:4c:
         c3:c2:c5:95:09:c1:59:a3:15:95:86:6c:6a:17:64:21:d7:c4:
         a6:3d:f6:aa:0e:11:fd:1e:65:98:10:40:a6:e6:ae:2b:08:d7:
         ea:83:b0:c4:c0:20:18:3a:99:f9:82:89:b2:88:bb:19:76:17:
         20:ab:94:8c:a8:6a:1a:bc:88:62:dd:bf:7c:72:a7:2a:56:10:
         8f:d4:81:e3:c3:03:19:2d:85:f6:7e:5a:07:f2:a3:7c:36:fb:
         82:ab:bb:bc:17:b9:47:99:a2:1f:5f:1f:26:68:1c:d0:f3:59:
         05:48:8f:6f:ad:3d:38:1b:3d:e5:d3:44:6b:a6:40:3e:c9:cb:
         51:72:96:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----