Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zc6J5ArSRyIyPIYIzofNyXUEbfc.roa
File:                     zc6J5ArSRyIyPIYIzofNyXUEbfc.roa (raw, json)
Hash identifier:          o53aK+OIA7WDJGdPiuPhT2tPoT1hmmYItmGlkUR0Qgo=
Subject key identifier:   CD:CE:89:E4:0A:D2:47:22:32:3C:86:08:CE:87:CD:C9:75:04:6D:F7
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0DB4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zc6J5ArSRyIyPIYIzofNyXUEbfc.roa
Signing time:             Tue 29 Sep 2020 09:54:52 +0000
ROA not before:           Tue 29 Sep 2020 09:54:52 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.233.60.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3508 (0xdb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:52 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=CDCE89E40AD24722323C8608CE87CDC975046DF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:95:92:07:a9:8b:01:c2:65:d1:29:b8:55:1c:
                    3b:e2:3d:5c:59:8a:2a:94:c5:c3:20:e9:d6:5c:b9:
                    95:67:e1:f3:3e:64:7a:53:93:b6:8d:06:d6:59:68:
                    2a:5d:28:ab:ec:f1:17:1b:91:cd:3c:a3:3c:4f:59:
                    46:05:56:39:bc:f4:04:5e:e6:c6:02:09:14:28:0e:
                    5b:39:9f:63:46:90:83:22:b7:71:53:d4:34:97:2a:
                    fd:a7:6f:6f:bb:5d:90:45:a0:e0:bd:c1:80:2a:67:
                    3f:7e:17:7d:61:a1:7d:30:d7:25:6a:4a:c9:c7:3f:
                    b3:d8:a2:3e:72:39:30:b0:d1:c2:6a:fc:92:ae:b1:
                    7c:ed:10:ee:74:a2:b7:40:aa:ed:92:20:29:d3:12:
                    8d:37:c8:19:d3:0d:bc:9d:51:06:5a:46:55:98:92:
                    2f:fa:b8:8e:55:65:7b:15:00:8a:3f:7c:58:78:1f:
                    77:8a:2a:c9:32:a4:fd:79:08:04:48:1c:b5:df:b7:
                    0a:e7:8a:91:a9:cd:30:3b:e7:44:b2:a4:6f:dd:01:
                    2f:0e:af:a0:ca:55:14:44:69:04:70:07:30:35:7e:
                    d5:45:ba:24:5a:05:91:de:b7:e2:36:cb:29:f5:18:
                    b5:9d:43:5e:16:6e:80:73:d7:7c:ef:3b:b7:75:ec:
                    ed:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CE:89:E4:0A:D2:47:22:32:3C:86:08:CE:87:CD:C9:75:04:6D:F7
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zc6J5ArSRyIyPIYIzofNyXUEbfc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:17:62:2f:30:05:44:ec:04:c8:ac:65:4b:73:23:fd:4d:7a:
         1d:e5:c0:b9:9e:63:92:f0:f7:41:92:25:fc:a0:f9:ac:52:53:
         05:67:16:b6:82:13:f1:5b:be:5d:06:cb:92:f0:ab:d4:b9:6c:
         04:dc:f1:98:b5:6a:f8:7c:9f:f6:19:c1:c3:d0:2b:b8:92:62:
         f9:ac:29:a9:e4:99:8c:30:45:10:fe:ea:20:d5:b5:b5:1f:31:
         be:be:5f:90:8d:99:91:d8:56:03:c4:68:99:44:37:47:06:4b:
         29:de:a6:d8:fb:e3:c7:8f:d8:8a:a3:ac:fa:4b:e0:ba:31:7b:
         5d:2a:aa:ff:ce:cd:03:74:22:cd:c9:57:f1:d2:49:7c:df:3f:
         8f:13:08:e5:50:79:bb:1b:39:e7:ec:8d:81:93:59:3e:e5:5e:
         b1:6e:fc:3b:91:5c:c8:a6:65:c8:94:f8:38:6d:e1:08:84:83:
         dd:d4:78:0a:2c:33:38:bd:ea:45:14:e0:f4:22:86:c3:11:9d:
         57:8c:dc:05:98:38:62:11:50:3c:a7:94:40:4b:59:75:39:14:
         8c:7e:8e:e8:a3:2e:60:6e:75:b2:95:a2:7b:89:e7:f9:6b:ec:
         95:4b:08:82:52:65:fe:d9:12:e9:51:af:31:09:e4:9d:48:89:
         84:0f:e5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----