Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0x3oVCQBt3zuzWP23ZRyvmdMxY0.roa
File:                     0x3oVCQBt3zuzWP23ZRyvmdMxY0.roa (raw, json)
Hash identifier:          neRIsU6BnElpew0RUCA+Sro/48//k4vaMgvCrNN097s=
Subject key identifier:   D3:1D:E8:54:24:01:B7:7C:EE:CD:63:F6:DD:94:72:BE:67:4C:C5:8D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B07
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0x3oVCQBt3zuzWP23ZRyvmdMxY0.roa
Signing time:             Wed 29 Sep 2021 02:46:02 +0000
ROA not before:           Wed 29 Sep 2021 02:46:02 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.193.180.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6919 (0x1b07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:02 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=D31DE8542401B77CEECD63F6DD9472BE674CC58D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ba:55:c3:43:a0:87:3c:67:37:9e:17:64:17:
                    1f:45:a9:d3:57:86:75:80:2e:33:0e:96:29:c1:88:
                    84:6b:5c:af:2e:fe:74:e2:c1:37:4d:e1:d3:a0:fc:
                    11:4b:cb:92:18:d1:b3:a0:c0:1b:74:3d:b0:0a:3c:
                    78:4b:94:d7:be:ee:85:13:c8:c8:9a:2e:0c:62:9a:
                    27:88:86:d6:6c:91:7e:3c:fb:59:d2:00:57:5a:85:
                    f6:20:96:a3:37:39:08:86:8b:68:e2:74:6f:c9:45:
                    03:53:f1:e3:c1:b3:09:92:ab:3c:0b:6a:ea:28:6d:
                    37:f7:a0:e9:42:e5:6a:1f:f3:ae:4f:9b:c0:51:8e:
                    fb:92:08:89:3b:4c:26:aa:b2:5a:ad:12:29:de:5a:
                    73:8f:5e:85:fd:2d:c9:7b:fd:3b:08:b7:59:76:4e:
                    0d:ac:9c:fe:8b:36:6d:32:b2:28:8d:3a:55:70:00:
                    d3:d2:91:e3:64:93:7b:1d:6d:6d:cc:34:57:e4:04:
                    1a:62:26:a4:49:82:82:96:ee:0f:82:63:86:6e:83:
                    72:75:12:fb:c8:1c:5b:8e:6f:fb:75:ea:56:86:2b:
                    25:97:8e:ad:c2:b4:91:b5:60:6f:2d:8a:68:e9:c3:
                    cd:06:bf:7d:a7:e7:e1:5e:f8:54:59:6f:33:26:9c:
                    91:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:1D:E8:54:24:01:B7:7C:EE:CD:63:F6:DD:94:72:BE:67:4C:C5:8D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0x3oVCQBt3zuzWP23ZRyvmdMxY0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:92:c0:e2:2d:79:ee:5f:a6:be:e6:f9:1a:f6:cc:fc:9d:90:
         11:7f:de:2e:94:c8:b5:c4:45:80:67:cd:70:d8:4d:57:8f:ab:
         24:d3:e4:da:91:b3:3f:58:bd:c1:18:4b:ab:e0:d0:4e:bb:c4:
         27:dc:23:e9:24:3a:69:2e:66:64:41:6c:c6:49:53:92:21:3a:
         53:79:28:e6:1e:2c:8d:fe:e4:a7:29:48:26:e5:2a:89:3d:fc:
         12:cb:26:60:f7:57:97:bd:4d:2f:8e:53:86:4f:46:3f:76:ac:
         bf:87:3e:7f:23:29:52:e3:aa:d7:17:e4:68:48:3c:1c:68:ee:
         2c:ef:7f:d8:d9:9d:26:9d:af:e8:86:68:3a:dd:5d:f8:cf:53:
         bb:da:d9:8d:8e:5f:46:bb:6d:53:7f:55:89:c0:d1:03:75:51:
         36:fb:07:4a:12:b8:64:27:37:21:ab:c2:af:0e:ce:13:18:7a:
         0d:de:47:f3:18:7c:61:28:18:7e:a6:1a:2c:f5:b5:78:b6:94:
         6e:32:6d:1a:2e:62:7d:32:4f:ef:00:0e:c9:0f:f9:91:c9:0f:
         a0:07:75:3e:c6:27:d0:a4:d7:41:66:a7:a9:d6:8f:5b:e6:4f:
         0d:95:87:85:97:e4:b6:ab:32:09:0d:50:45:94:4a:87:19:1f:
         6e:90:ac:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----