Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/HhoECtp4-yNJiA6DhgE8Up-ejN8.roa
File:                     HhoECtp4-yNJiA6DhgE8Up-ejN8.roa (raw, json)
Hash identifier:          Z6dB/DP7q56D7JuEuZXkhSF7JyUEdUcorJaxQz/9+Vw=
Subject key identifier:   1E:1A:04:0A:DA:78:FB:23:49:88:0E:83:86:01:3C:52:9F:9E:8C:DF
Certificate issuer:       /CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF
Certificate serial:       0EF3
Authority key identifier: ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/HhoECtp4-yNJiA6DhgE8Up-ejN8.roa
Signing time:             Thu 19 May 2022 07:01:07 +0000
ROA not before:           Thu 19 May 2022 07:01:07 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     399626
IP address blocks:        103.127.236.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3827 (0xef3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF
        Validity
            Not Before: May 19 07:01:07 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=1E1A040ADA78FB2349880E8386013C529F9E8CDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:77:9b:64:67:f2:40:1f:dc:78:f0:94:8f:61:
                    b7:ec:6d:c0:95:34:36:a6:06:7a:4f:ac:35:5e:a6:
                    01:b0:48:ea:c1:c7:ea:1e:9d:e6:e0:65:af:74:d2:
                    c3:db:df:58:0f:c6:1f:72:2a:20:c4:cd:73:7f:dd:
                    df:c2:d7:73:67:a3:8a:b6:65:de:15:3f:c6:ac:bf:
                    f6:7b:26:f7:fe:fa:d5:ae:39:b9:c1:1b:6e:5d:07:
                    47:4a:16:e1:4a:8c:bc:a1:78:0c:33:30:97:a7:ee:
                    33:67:0d:a2:9e:76:c8:a9:1a:54:97:83:00:a7:cb:
                    86:f1:8a:91:58:32:c3:97:3d:e1:35:8a:c3:4d:58:
                    3a:6c:6f:dc:07:06:c3:85:5e:4b:ef:bf:d3:12:62:
                    88:03:fe:9e:e3:fe:38:10:d3:ad:4f:96:35:a9:2f:
                    ce:a7:9a:9e:bf:45:bd:8f:57:3b:45:6a:0c:e4:fb:
                    a8:f2:25:9f:ae:21:9c:cd:3a:dd:ec:74:ff:86:27:
                    59:87:77:9a:a6:2b:98:fa:06:f3:3d:ea:59:08:93:
                    d5:1c:6e:89:0f:0c:ce:d1:0e:e9:64:4e:c2:3d:52:
                    c9:16:51:18:9e:57:e0:91:95:8d:19:d5:7b:aa:5c:
                    a8:50:79:11:f4:b2:d8:69:83:43:1c:09:7e:7e:3c:
                    f3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1A:04:0A:DA:78:FB:23:49:88:0E:83:86:01:3C:52:9F:9E:8C:DF
            X509v3 Authority Key Identifier:
                keyid:ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/HhoECtp4-yNJiA6DhgE8Up-ejN8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:5c:9b:ab:7e:5b:21:2c:b8:7d:e0:08:1b:64:2f:e1:05:6c:
         8b:e2:ae:d3:f9:f3:49:34:59:79:cf:58:89:36:6e:e4:df:a8:
         57:02:8b:a8:4b:c3:08:17:4e:a4:cc:4e:db:89:d5:6d:31:1e:
         32:c9:08:5e:42:57:8e:5d:aa:83:b4:ef:2e:6e:e1:d5:11:0c:
         2f:3a:c8:f6:1f:70:86:ea:f6:62:98:9c:cb:f8:c2:93:32:9a:
         84:a4:ca:4a:2d:15:b1:49:0e:42:c6:cd:e9:84:6d:57:ca:e3:
         fb:1f:69:f6:3d:b1:9f:9c:18:e7:7e:05:39:61:0a:e5:cc:89:
         00:6f:9e:ea:98:a8:8c:6c:12:6b:b1:9a:37:47:2e:db:a1:61:
         ce:9d:f9:34:f1:19:44:97:1e:f1:80:ae:9e:39:ab:43:43:5a:
         a9:46:a9:b9:70:86:43:1c:df:14:ca:37:43:5c:c3:81:55:75:
         76:e2:f7:74:da:c6:52:ff:03:0c:32:e2:fe:1a:b0:55:aa:16:
         5e:2d:bc:59:15:66:d1:da:e1:02:49:b4:90:75:18:a2:a9:96:
         ca:8c:a6:bc:f3:eb:eb:d0:85:ab:dd:e3:29:38:71:c0:6f:77:
         62:9e:c8:a1:ed:0e:02:82:54:a6:72:34:82:bc:59:67:8e:9c:
         81:37:2e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----