Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zMDHNdwkMG8pIxetMZ9CEqyKFJ4.roa
File:                     zMDHNdwkMG8pIxetMZ9CEqyKFJ4.roa (raw, json)
Hash identifier:          IR22f8U48JSOPhyeDGx6lcdcAw8Kdz0BPgiK/Z/Sbws=
Subject key identifier:   CC:C0:C7:35:DC:24:30:6F:29:23:17:AD:31:9F:42:12:AC:8A:14:9E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F5F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zMDHNdwkMG8pIxetMZ9CEqyKFJ4.roa
Signing time:             Tue 29 Sep 2020 09:56:52 +0000
ROA not before:           Tue 29 Sep 2020 09:56:52 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        123.193.176.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3935 (0xf5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:52 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=CCC0C735DC24306F292317AD319F4212AC8A149E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a0:37:d9:fa:9e:b0:ce:70:ca:c7:3b:2b:1e:
                    68:b8:c5:58:2a:da:bd:90:7c:ff:4a:80:2a:79:1d:
                    66:12:d9:64:8d:b1:96:d5:ea:44:89:a3:19:f2:c5:
                    19:2a:84:62:f2:ae:5c:ad:c1:08:c2:bd:e0:af:39:
                    b8:24:b1:88:ff:b4:eb:96:b5:a7:8e:b5:fa:62:81:
                    09:b7:b5:0f:c7:78:cb:95:93:06:04:e3:94:62:f5:
                    92:b3:16:53:ce:16:68:53:ca:3f:04:54:53:c1:97:
                    ed:fc:8d:c4:f8:78:19:82:c9:a4:94:4d:c1:62:3f:
                    d1:13:3b:5a:6f:07:86:10:53:ae:52:b7:9f:0d:f9:
                    f7:2f:c1:34:c9:4b:69:9c:39:26:de:a3:e3:e3:dc:
                    fc:7a:7e:25:77:6c:a5:87:06:7e:1a:6a:1a:36:b6:
                    30:9b:c6:0f:77:da:0c:56:47:09:89:ad:b1:cb:1a:
                    af:5a:a1:f0:df:9a:8f:ff:0c:1a:b7:6c:e1:45:e2:
                    37:18:fb:fe:13:8a:13:93:64:6e:dd:26:51:a7:49:
                    82:38:ab:cd:d8:1c:59:d6:88:58:6b:e6:07:c9:a6:
                    2a:af:fb:7f:2f:09:7a:a0:f8:d5:03:e7:f0:bf:64:
                    b0:2a:33:26:b9:8c:fc:c6:e2:c7:15:40:c3:62:19:
                    f6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C0:C7:35:DC:24:30:6F:29:23:17:AD:31:9F:42:12:AC:8A:14:9E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zMDHNdwkMG8pIxetMZ9CEqyKFJ4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a5:0f:11:f5:a9:c7:0d:78:ad:8e:63:8d:47:85:4f:94:31:d8:
         09:cc:d3:22:d7:a1:20:8e:56:b2:06:96:61:c1:9e:6c:d9:97:
         b8:ee:5b:e8:c4:a8:20:9f:60:c1:b2:c9:bf:3a:f1:ae:fc:c5:
         0d:71:17:85:fd:14:5b:08:87:88:e9:02:e5:1b:36:69:2b:3f:
         df:a0:78:0e:7a:fb:63:c0:5b:30:b8:15:2e:f6:ca:c0:d7:85:
         c4:0c:08:10:03:cf:7f:e3:49:6d:78:8a:cc:da:5e:0f:c5:93:
         8f:67:86:84:35:7b:e8:80:b8:e0:e9:49:a7:0c:f4:87:a2:ff:
         7a:65:9b:cd:1f:1f:48:e5:e9:1b:cb:4e:0f:ee:c2:8e:37:3a:
         74:90:24:4a:22:71:d3:b5:08:ac:df:fa:63:b8:55:61:9b:7f:
         fe:68:e7:1d:8b:8e:e5:20:80:2e:af:c8:f4:79:02:47:f6:5b:
         9d:d1:e3:c2:16:c0:13:88:3e:16:da:6b:65:ba:e1:45:dc:ee:
         e5:52:e5:a6:f2:12:b1:9c:5d:07:81:cb:33:7e:a9:bd:07:e3:
         55:2e:b1:21:99:5a:87:6e:b1:ad:8f:ea:05:3b:8b:a5:57:39:
         cb:4a:da:62:de:8a:73:c6:15:73:87:85:50:f6:5e:23:99:b8:
         0f:09:7f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----