Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0sWU3KnHPM0KYqM1sGfXTZ04ens.roa
File:                     0sWU3KnHPM0KYqM1sGfXTZ04ens.roa (raw, json)
Hash identifier:          2GohOm12Lo3snHcDAq0zK0YLZQHaTcOUGGiGT6YCt8s=
Subject key identifier:   D2:C5:94:DC:A9:C7:3C:CD:0A:62:A3:35:B0:67:D7:4D:9D:38:7A:7B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1E41
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0sWU3KnHPM0KYqM1sGfXTZ04ens.roa
Signing time:             Wed 27 Apr 2022 09:02:56 +0000
ROA not before:           Wed 27 Apr 2022 09:02:56 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.193.220.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7745 (0x1e41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Apr 27 09:02:56 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=D2C594DCA9C73CCD0A62A335B067D74D9D387A7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:73:77:14:98:cc:a8:8d:5a:3e:e0:39:ef:f2:
                    b2:6b:11:48:bf:46:ae:de:8f:67:68:e6:b0:3e:bf:
                    27:d4:eb:93:4e:32:be:4d:cd:de:69:ea:ff:c6:89:
                    2c:c5:fa:f8:4f:7d:8a:94:48:fd:19:d8:ee:5b:a8:
                    f4:c6:6c:cc:9f:7a:3f:b1:36:cb:c3:b6:a3:f3:21:
                    51:62:16:0f:4c:c2:7c:d4:73:7e:25:d1:62:f1:07:
                    0d:30:c8:19:1a:7b:cd:f7:e1:8d:fe:9e:7b:3c:b7:
                    14:95:db:d4:82:00:10:4f:ea:7e:6d:8a:90:68:bc:
                    11:d9:11:af:88:44:96:b1:55:7b:37:ad:19:02:ff:
                    18:f9:5c:41:15:a4:40:69:59:87:04:82:f8:83:bf:
                    f8:56:33:14:9a:f9:a9:f5:fa:41:b6:c6:ff:f0:ef:
                    af:6b:ad:44:a8:bd:ff:64:1e:49:e2:15:95:96:82:
                    b5:1a:da:7a:71:ae:63:dc:f3:4e:e9:68:30:5e:c7:
                    0b:77:29:67:bf:46:5c:24:53:9d:30:b7:b2:b9:4a:
                    de:bd:3d:d4:f0:1b:e5:60:17:9c:b8:a7:3a:02:4a:
                    18:1e:2e:47:42:e2:c1:dc:a5:c6:20:e4:8f:ed:b7:
                    dc:ac:9a:0c:22:52:14:c8:e6:36:aa:8d:09:5c:ce:
                    f9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C5:94:DC:A9:C7:3C:CD:0A:62:A3:35:B0:67:D7:4D:9D:38:7A:7B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0sWU3KnHPM0KYqM1sGfXTZ04ens.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:8d:ac:11:12:43:1d:ed:58:7b:4d:01:9e:ec:6c:b2:b7:8f:
         a7:39:bf:b4:16:55:33:28:07:37:d7:43:92:96:51:da:f2:35:
         b2:1d:d3:a7:49:8d:a7:3e:e9:76:ba:bf:f2:1b:95:99:a1:85:
         6e:66:5d:57:51:dd:8d:75:5d:c1:38:c9:7c:25:d4:47:f6:09:
         c5:e9:ff:66:b9:06:40:1f:3a:92:1f:89:a2:27:19:1a:f9:7f:
         e3:d8:a4:0f:e6:dd:10:46:a5:7c:ce:e8:31:0b:d4:4a:42:be:
         f4:43:f4:23:b8:d5:1c:bb:5b:01:50:d2:60:33:a2:bb:66:47:
         84:b5:b6:d2:c9:8a:36:12:2d:ff:73:c4:07:5e:83:eb:f3:b0:
         00:42:b7:33:f4:6d:44:24:69:06:f3:b4:c9:f5:83:8c:87:dd:
         0b:07:65:32:c9:61:cc:bc:be:0f:ad:a7:26:5d:7e:00:e1:17:
         7e:a7:92:0f:ad:14:61:a8:6d:42:ff:4f:db:82:e5:e0:61:72:
         2b:60:76:de:ed:7f:37:21:bd:4f:eb:d1:0b:f5:c3:17:59:1a:
         5b:35:47:65:46:5e:17:a4:68:9d:96:20:9e:1b:c4:a4:4c:64:
         cb:42:a5:20:40:72:c4:37:4d:4b:21:df:14:b1:42:9a:42:c2:
         ad:5b:4f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----