Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/tuJOIiz--xs0u10yVc4_BwUBCR8.roa
File:                     tuJOIiz--xs0u10yVc4_BwUBCR8.roa (raw, json)
Hash identifier:          rkQsbWOBnaKv2KY67HIPoAtlhU3lJq8vxD8hDfRGxrk=
Subject key identifier:   B6:E2:4E:22:2C:FE:FB:1B:34:BB:5D:32:55:CE:3F:07:05:01:09:1F
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       0B0C
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/tuJOIiz--xs0u10yVc4_BwUBCR8.roa
Signing time:             Thu 16 Dec 2021 06:43:27 +0000
ROA not before:           Thu 16 Dec 2021 06:43:27 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     17809
IP address blocks:        182.155.64.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2828 (0xb0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Dec 16 06:43:27 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=B6E24E222CFEFB1B34BB5D3255CE3F070501091F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4b:bc:c7:4b:36:71:89:71:59:8c:80:e4:d8:
                    ce:e3:37:80:80:8a:34:94:59:c8:72:b6:97:53:da:
                    99:dd:f9:20:b0:b3:ed:30:4a:f0:fe:fa:35:0f:40:
                    94:c9:fb:74:d4:54:11:1b:8e:8b:f7:72:7a:35:14:
                    6b:08:b1:ff:1c:c6:08:21:66:1e:8c:a0:1d:39:f2:
                    fd:7f:0d:ba:2b:51:df:e8:11:fc:7f:70:b6:04:be:
                    8e:9c:6b:72:d3:36:37:7e:e3:43:1d:0c:01:7c:c9:
                    c7:9e:a9:a6:d6:7c:7d:77:a2:75:3a:ac:57:1a:6b:
                    d7:c1:9c:05:f0:e9:8a:2c:a1:4b:72:c0:92:75:61:
                    08:c7:41:38:fb:e2:59:2c:e5:16:ef:d7:aa:99:a3:
                    52:12:ed:77:6c:b0:6c:d3:f7:cb:a8:bd:c6:8b:f6:
                    a8:89:10:d8:47:8a:a1:20:3b:c2:84:16:eb:74:41:
                    e6:47:a2:b6:47:84:2a:6b:49:83:65:86:14:47:46:
                    0e:1d:21:1b:69:11:2e:b4:30:ec:d1:23:18:35:6c:
                    40:5e:72:62:02:d0:37:1f:47:b8:1a:9f:57:19:ef:
                    b6:b5:76:03:30:42:f9:9d:00:88:fa:ce:d3:10:50:
                    4d:5b:34:03:67:f5:22:2d:d4:d3:5f:94:e3:f7:ca:
                    e0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E2:4E:22:2C:FE:FB:1B:34:BB:5D:32:55:CE:3F:07:05:01:09:1F
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/tuJOIiz--xs0u10yVc4_BwUBCR8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.155.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         54:09:84:73:a7:c1:4e:ef:b7:a6:4f:24:d2:f5:00:c8:19:f6:
         7f:eb:e4:d5:ac:7b:9a:94:17:90:1a:14:41:57:52:16:71:f2:
         57:b8:24:50:8c:d3:3f:bb:f2:15:0f:77:e1:6c:28:86:6c:8f:
         20:39:0b:e9:44:ce:4f:5f:6f:63:3e:38:d7:03:c6:7b:73:ec:
         b0:64:d8:be:af:01:9a:1d:fe:af:fb:fc:92:76:03:1d:2a:0a:
         92:7b:47:97:00:ef:0c:cb:d7:25:90:1b:04:dc:64:cb:b9:9f:
         eb:13:09:dc:af:48:03:bf:23:06:5e:a2:af:9b:58:ce:43:4c:
         e8:33:bd:88:9a:fd:2a:28:88:dc:d5:fe:b3:8f:fb:99:bf:3a:
         d8:b0:29:c7:f6:db:fc:6e:fb:36:9d:ab:e0:df:cc:30:db:ba:
         2a:c7:32:38:cc:09:21:42:40:1e:f0:61:14:d7:43:48:62:02:
         51:13:dd:01:0e:22:68:44:66:79:5e:39:2f:8c:d8:67:cc:28:
         63:06:5c:43:09:a9:4d:81:a8:43:00:fc:93:ee:0b:ca:6f:53:
         77:97:c1:f1:77:69:6e:ba:96:13:54:e1:94:d3:0e:dd:eb:85:
         b5:b8:dd:eb:39:4b:67:a4:3a:0d:89:74:01:b1:f5:76:01:d2:
         0b:9d:ff:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----