Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zPAGbfQ0xLJ4FaBUnWD-v-3ggMQ.roa
File:                     zPAGbfQ0xLJ4FaBUnWD-v-3ggMQ.roa (raw, json)
Hash identifier:          6YCVYHiDORDYLcmUuSe8fs+0z5hJAu54WWrOAtRIHYY=
Subject key identifier:   CC:F0:06:6D:F4:34:C4:B2:78:15:A0:54:9D:60:FE:BF:ED:E0:80:C4
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       13D9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zPAGbfQ0xLJ4FaBUnWD-v-3ggMQ.roa
Signing time:             Sun 07 Feb 2021 11:56:26 +0000
ROA not before:           Sun 07 Feb 2021 11:56:26 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.192.0.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5081 (0x13d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 11:56:26 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=CCF0066DF434C4B27815A0549D60FEBFEDE080C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fd:a4:8b:94:e5:c8:8a:a4:16:c0:21:2d:0e:
                    5b:71:1b:28:84:9d:f0:1b:1a:6d:3c:5b:4c:6f:51:
                    43:d9:68:9a:df:09:c6:6b:59:0a:d6:88:93:e9:dc:
                    3e:06:7b:a2:a4:e8:24:b4:3b:cd:42:33:4d:c7:63:
                    73:82:26:51:06:a7:f5:ef:1b:72:16:84:ad:5d:4e:
                    8e:51:9f:5b:7d:1e:bf:e8:9d:c7:05:b9:74:9c:6c:
                    d6:02:0c:71:f5:3d:de:79:da:54:0e:60:e6:0d:a7:
                    1e:1b:62:90:dc:44:8b:c4:a6:e3:f5:a6:41:98:75:
                    a5:45:fc:39:ed:c6:70:a7:14:3c:f4:cd:7e:15:ee:
                    d7:ad:7c:0c:63:7c:2d:ca:63:dd:f8:44:19:ca:c9:
                    98:0e:5d:b9:c6:e8:49:69:c2:26:ec:ed:eb:f4:ca:
                    1d:31:01:5a:b2:45:bb:66:46:a3:36:de:ed:88:17:
                    e2:03:30:ab:9e:40:e1:d7:6b:d0:98:7c:74:37:90:
                    50:99:eb:1a:24:21:6c:e3:07:47:6a:5f:d1:c4:31:
                    6e:6c:05:ca:b2:bb:af:94:d9:db:6e:81:56:af:a6:
                    36:b7:ff:22:75:ae:fd:53:32:71:2f:8e:44:e2:17:
                    57:73:e7:42:ad:e3:3c:75:8d:9a:db:a5:98:7e:5c:
                    27:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F0:06:6D:F4:34:C4:B2:78:15:A0:54:9D:60:FE:BF:ED:E0:80:C4
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zPAGbfQ0xLJ4FaBUnWD-v-3ggMQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         75:8b:1a:ab:6e:88:51:c2:57:8f:1d:28:95:36:b6:9a:cd:ea:
         a0:a8:0c:a4:83:d9:e7:cf:98:8e:60:13:e5:17:bc:c3:92:2c:
         45:12:69:2c:e6:14:82:e0:da:2d:95:83:c2:8e:9d:13:a1:65:
         90:7d:07:a0:27:1c:54:21:8f:29:e8:02:07:46:e6:0e:f6:de:
         09:ea:22:c7:da:f7:de:f6:e6:f9:43:04:00:b8:3b:e4:a1:be:
         27:7b:5a:a6:da:be:44:f0:b0:a4:15:e3:76:aa:b5:24:95:da:
         87:36:a9:15:21:3d:ee:7b:0c:7e:18:d2:0a:07:65:f1:f9:48:
         6b:3f:18:07:00:bb:25:7d:15:97:5b:1a:9f:2f:c3:bc:a1:1a:
         74:b2:70:f4:52:90:59:d6:97:42:c9:35:ab:76:ef:c1:87:e5:
         40:e3:af:e6:9c:0e:a0:99:59:87:01:da:59:8c:df:41:6b:fa:
         33:9d:cf:c0:e5:1c:5a:7c:a0:92:0a:44:6d:56:91:9f:de:fe:
         cd:c2:9f:7b:b0:e2:0a:ab:fa:1e:8e:ca:82:d6:49:4c:a0:83:
         75:1d:28:0c:73:ce:bf:af:2f:8f:2a:cc:48:18:62:74:35:3b:
         ef:7e:5e:a8:c6:43:d3:30:27:74:ef:f7:f6:40:54:f7:0c:3f:
         58:ac:b2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----