Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-9jaLg-lJUja7jia5XWqUfrFrvQ.roa
File:                     -9jaLg-lJUja7jia5XWqUfrFrvQ.roa (raw, json)
Hash identifier:          ZyImse7gg9Qp3Ribr0WTQ84JVKpwwkvcsxJ9b4+biEE=
Subject key identifier:   FB:D8:DA:2E:0F:A5:25:48:DA:EE:38:9A:E5:75:AA:51:FA:C5:AE:F4
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C19
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-9jaLg-lJUja7jia5XWqUfrFrvQ.roa
Signing time:             Wed 29 Sep 2021 02:47:21 +0000
ROA not before:           Wed 29 Sep 2021 02:47:21 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        118.232.16.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7193 (0x1c19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:21 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=FBD8DA2E0FA52548DAEE389AE575AA51FAC5AEF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:56:6e:e8:d7:14:d5:f6:cd:3f:3d:94:05:c8:
                    0d:96:2f:98:b7:8e:69:07:49:99:aa:57:64:d7:33:
                    8a:37:6f:3d:83:02:9c:38:f2:6f:d2:a9:a9:e7:b2:
                    e2:bc:86:d1:7f:cf:57:4a:0f:9f:9e:aa:05:a5:5c:
                    90:72:62:fb:3d:df:45:ba:89:aa:9e:b6:8e:af:ef:
                    ae:8d:a7:d2:bf:2b:e3:54:61:82:b8:77:71:4e:fc:
                    3a:81:fa:47:9d:ff:78:79:9d:3b:c7:9c:2e:a4:14:
                    a9:9a:f7:fe:4c:1a:a6:ba:70:69:ab:b4:dc:b8:02:
                    89:8a:31:3f:db:ac:f1:5d:78:10:78:47:cb:8d:90:
                    4f:4d:36:ab:10:6d:3a:3a:ac:67:e2:01:84:e0:88:
                    9a:8d:fe:cf:92:72:26:15:be:a6:0c:34:58:52:61:
                    a9:db:cd:8b:cf:0d:f3:05:a9:ba:2b:76:54:c9:0e:
                    29:ff:0e:a5:39:67:64:55:7c:26:0a:13:0c:25:79:
                    c7:64:4a:53:52:55:ac:f2:ec:06:da:61:a6:a5:1b:
                    34:ca:9e:f7:57:5d:34:4b:ac:ee:95:e6:b0:94:67:
                    79:27:2f:87:35:b0:f6:d7:55:25:c5:19:b0:64:4d:
                    5c:52:48:f7:51:05:c9:78:41:bf:71:cb:2f:a7:c6:
                    50:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D8:DA:2E:0F:A5:25:48:DA:EE:38:9A:E5:75:AA:51:FA:C5:AE:F4
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-9jaLg-lJUja7jia5XWqUfrFrvQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b5:5b:25:0e:9d:df:46:01:e7:44:48:82:a2:c3:07:2a:1c:14:
         6f:97:ad:2d:ee:59:35:99:30:c4:8a:4d:51:41:16:6d:09:81:
         e6:65:45:c2:14:1a:c6:60:42:45:13:58:8f:b6:2b:33:cd:b1:
         cc:0d:64:7b:7a:35:8c:d7:0b:6a:68:ad:63:60:2b:1d:e2:7e:
         ae:95:b6:7d:ec:d9:13:cb:37:a2:07:76:7e:54:92:d3:a9:af:
         7e:96:99:10:ef:0e:cb:7b:11:cb:29:d4:f5:ec:5b:d8:4a:77:
         e9:a3:49:3d:2a:e4:52:c7:69:e9:30:29:36:a7:57:0b:fd:cd:
         27:9b:8d:8c:aa:e0:c7:7e:1b:94:6d:5b:83:d5:67:18:86:94:
         c2:37:5c:05:85:75:bd:6b:88:35:4e:18:b2:99:a5:1a:70:21:
         07:10:9d:f1:8a:95:ca:52:d4:d4:30:9f:bf:4f:61:23:95:90:
         df:7d:ac:17:7c:8d:e3:2c:ae:fe:70:de:34:b1:f0:e9:28:f1:
         a8:01:82:56:9d:5a:aa:76:9a:26:4e:69:73:86:c4:9b:a8:28:
         62:67:36:02:93:e0:ec:c7:b9:dc:fb:cf:86:02:23:67:58:a6:
         10:7d:8d:c7:78:c9:01:de:d7:47:87:b3:d8:a1:6b:81:3b:60:
         4a:4e:38:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----