Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-jsyOib2DJHd354B20myK6iF8Ds.roa
File:                     -jsyOib2DJHd354B20myK6iF8Ds.roa (raw, json)
Hash identifier:          6rG4COQiJaiKcQNBvfZI3qqqQaXGB7j0bHU9/+sEuLg=
Subject key identifier:   FA:3B:32:3A:26:F6:0C:91:DD:DF:9E:01:DB:49:B2:2B:A8:85:F0:3B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B90
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-jsyOib2DJHd354B20myK6iF8Ds.roa
Signing time:             Wed 29 Sep 2021 02:46:45 +0000
ROA not before:           Wed 29 Sep 2021 02:46:45 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.194.96.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7056 (0x1b90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:45 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=FA3B323A26F60C91DDDF9E01DB49B22BA885F03B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:42:30:20:7e:65:2a:31:90:49:42:68:08:1e:
                    5b:3f:a2:64:c7:5e:9a:2e:97:18:6a:a2:13:32:10:
                    6a:5e:af:de:2f:88:22:50:1e:52:16:54:2d:24:47:
                    32:2c:08:35:ab:1a:65:c4:91:08:54:db:83:c8:7a:
                    61:54:15:37:6a:37:81:4e:af:f9:a2:68:e8:fd:01:
                    80:9b:18:04:e1:32:52:1f:f0:e1:6f:32:81:bb:24:
                    07:dc:3d:4b:06:e1:72:a2:b7:d5:67:7f:35:05:fd:
                    ad:d6:a1:ce:15:7b:e3:53:7e:30:e2:43:a6:fd:30:
                    91:6a:fa:47:1c:88:f9:df:17:25:c2:85:60:38:3c:
                    50:e0:c1:64:77:b5:40:b8:74:e4:27:0f:20:47:8e:
                    e5:0a:63:06:70:53:0a:88:35:94:c8:60:83:d3:2f:
                    68:f1:bd:44:6f:39:d7:cf:bd:c5:b9:14:98:e3:0f:
                    2b:fd:3b:5d:9c:01:90:31:12:98:3d:66:05:94:0a:
                    79:73:ee:f8:5b:2d:57:60:b5:f9:65:d3:8e:6a:d9:
                    0f:43:aa:8f:78:88:60:80:39:b7:54:db:3d:9b:30:
                    60:11:e3:7b:2c:27:03:2f:dd:7c:a5:6a:9a:e5:10:
                    49:38:e9:00:96:1e:12:c7:d4:90:7b:20:fd:55:e6:
                    a4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3B:32:3A:26:F6:0C:91:DD:DF:9E:01:DB:49:B2:2B:A8:85:F0:3B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-jsyOib2DJHd354B20myK6iF8Ds.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2b:35:2a:bf:72:d7:48:b9:c8:e6:d2:96:7c:a4:77:3f:8b:d1:
         9c:b0:e2:56:c5:54:54:9b:7e:4d:b0:ed:cc:ac:fd:f7:9c:6f:
         c6:05:0d:35:39:49:59:b5:fa:bd:cb:98:8a:46:7c:81:61:8e:
         97:1a:bd:2f:5e:fd:bc:78:93:33:99:21:5f:2c:ad:ce:5e:4c:
         19:d4:dc:9f:4e:ae:87:06:fa:70:a1:3c:8f:51:1c:3c:01:5a:
         3a:b8:d1:28:60:f7:99:fc:99:57:40:bd:77:e4:3f:49:b4:84:
         84:7c:e6:c5:2a:18:aa:31:18:03:98:a5:e0:cf:a3:e0:13:48:
         9f:91:72:40:19:90:52:3c:c8:29:49:c3:5b:f9:20:cc:cf:39:
         8d:71:31:a1:05:0a:e9:5f:08:b7:9c:63:2a:52:5e:d7:36:b9:
         51:88:c8:46:ef:eb:94:8d:8c:8b:52:f1:f1:9f:43:cc:b6:ca:
         c9:14:72:41:a9:aa:01:89:24:55:7b:78:18:26:fb:89:0a:1f:
         4f:5a:69:fb:61:02:d0:66:d7:bc:3b:e5:89:b3:e1:57:8a:46:
         cc:66:a7:26:49:cd:c7:79:b4:e3:25:01:58:59:04:43:1d:ba:
         d6:96:92:27:9b:f8:84:70:2a:47:96:fb:5f:62:be:18:d2:2a:
         a2:f0:38:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----