Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-15t27b5bhTcZnd3GC5qWbXEnY0.roa
File:                     -15t27b5bhTcZnd3GC5qWbXEnY0.roa (raw, json)
Hash identifier:          V5BknsjrBgc9VI83DNmSu6EiQ4TuLequO4hd9BTJrAE=
Subject key identifier:   FB:5E:6D:DB:B6:F9:6E:14:DC:66:77:77:18:2E:6A:59:B5:C4:9D:8D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D3C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-15t27b5bhTcZnd3GC5qWbXEnY0.roa
Signing time:             Wed 29 Sep 2021 02:48:47 +0000
ROA not before:           Wed 29 Sep 2021 02:48:47 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        123.194.204.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7484 (0x1d3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:47 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=FB5E6DDBB6F96E14DC667777182E6A59B5C49D8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:84:7f:50:20:17:fe:35:56:a6:71:4a:e3:01:
                    eb:22:df:5f:83:51:8f:76:fd:b7:13:94:38:fd:bc:
                    0a:1b:34:5e:7e:72:ea:81:d1:fd:3d:9a:53:e8:1b:
                    4d:5c:14:5a:2a:e7:80:98:bb:1b:3b:9c:6c:7f:35:
                    58:24:bc:87:e0:a2:7b:d9:d8:e7:d1:af:33:f0:60:
                    88:95:6b:40:d4:cc:3a:82:12:e8:c2:1f:f3:f0:1c:
                    36:bc:0c:c2:48:f0:9b:90:5b:fa:b2:08:0a:7f:2b:
                    4b:37:68:42:68:76:6a:7c:28:76:e0:17:b2:52:90:
                    fc:f0:4a:2e:e5:90:f3:0e:0c:50:fb:f7:df:d9:97:
                    68:80:34:41:44:4c:d4:5f:d2:7d:93:99:9b:8a:fa:
                    1c:c3:90:78:68:26:03:71:ab:df:f3:06:01:a6:3e:
                    aa:3b:19:87:41:53:21:8b:48:48:40:87:b7:e3:fb:
                    7a:ba:e3:3a:25:2e:fc:9f:ec:f8:f9:2c:90:c6:17:
                    cd:45:d2:bd:29:c7:83:11:a4:83:18:a7:0e:cc:b5:
                    2f:9f:33:70:b0:f3:8f:ba:33:54:b8:bb:d4:a3:ea:
                    69:ee:33:96:9e:ac:d8:c5:f5:33:5d:de:a7:0e:d2:
                    1b:f0:57:9e:52:b4:ac:c2:ba:59:77:5a:09:5d:b0:
                    7d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:5E:6D:DB:B6:F9:6E:14:DC:66:77:77:18:2E:6A:59:B5:C4:9D:8D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-15t27b5bhTcZnd3GC5qWbXEnY0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:b1:d3:35:67:2b:a5:cc:ad:d5:58:ac:83:3c:97:19:4a:81:
         8d:98:b0:09:76:6f:e8:30:db:4a:ce:a7:1d:22:9c:d3:45:da:
         3c:23:24:11:33:7a:35:84:f0:62:f1:0b:4b:d7:a8:dd:dc:bb:
         72:0b:0b:f8:dc:3d:81:89:a7:da:14:4c:f2:1e:35:27:9b:b2:
         7f:ee:fa:04:6a:60:39:f8:df:e4:ad:ca:9e:86:50:ed:82:4c:
         7e:db:07:c1:cc:c4:b4:fd:bb:62:8a:21:aa:2d:a5:5e:2a:e9:
         a8:9a:3c:5b:5a:f6:95:f4:b5:72:68:54:8c:d9:08:99:3e:21:
         55:74:f1:e6:df:6d:52:6b:d8:82:4e:4a:2f:7b:8f:60:c3:4e:
         f5:b7:fa:6a:76:35:a6:97:38:ae:1d:3d:fe:00:f0:ec:7a:94:
         05:b4:de:4c:58:4c:67:9c:ba:5e:be:61:ad:ad:97:2c:5f:66:
         71:0d:23:a9:a3:d6:21:03:14:d8:b5:08:49:28:1c:50:2d:7b:
         b7:b3:e9:5f:98:27:b2:c4:86:1d:65:1f:d4:23:53:b9:cf:1c:
         98:a3:4e:5a:ad:11:7b:20:c9:8a:9a:ea:e6:10:b9:57:01:0c:
         85:12:39:29:82:d5:89:17:ce:f1:53:9e:38:f2:05:d2:cb:d3:
         0c:a6:dc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----