Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/19YK9rDD6omL0_kGmS9HZCqd34c.roa
File:                     19YK9rDD6omL0_kGmS9HZCqd34c.roa (raw, json)
Hash identifier:          3sTGSKjPBNySyR93jhDZgH7hyDaiEeE+xZ0QAXwM76w=
Subject key identifier:   D7:D6:0A:F6:B0:C3:EA:89:8B:D3:F9:06:99:2F:47:64:2A:9D:DF:87
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D77
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/19YK9rDD6omL0_kGmS9HZCqd34c.roa
Signing time:             Mon 04 Oct 2021 01:43:34 +0000
ROA not before:           Mon 04 Oct 2021 01:43:34 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        2407:4d00:ff01::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7543 (0x1d77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Oct  4 01:43:34 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=D7D60AF6B0C3EA898BD3F906992F47642A9DDF87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:02:f1:d5:4c:7d:c7:da:0c:40:42:6f:05:90:
                    78:fd:c3:30:3d:14:9a:40:0d:68:ed:a3:d8:31:60:
                    4a:f6:bb:ef:62:65:47:de:4c:5d:c7:35:9f:c1:54:
                    e9:dc:5f:6d:4b:e1:ad:da:58:b4:dc:30:44:5f:67:
                    3f:32:a8:30:9a:dd:84:e0:b9:12:f4:79:87:93:01:
                    04:d4:97:0f:fc:f8:bb:ab:4f:47:7d:43:04:4e:8f:
                    27:84:4a:76:9a:7b:6e:03:13:f4:8f:4f:16:f6:80:
                    67:8c:c6:22:04:70:5d:45:6c:69:5f:35:20:e1:1b:
                    6d:35:39:f3:81:bf:f7:94:0f:dd:67:81:04:a2:a7:
                    1c:e2:d6:ae:6f:28:17:94:b5:5b:45:d4:d9:25:b7:
                    1d:58:49:b0:8f:7d:22:bf:3c:a0:35:8e:3a:d5:4c:
                    37:62:24:84:80:60:d4:31:7a:20:96:48:f6:02:d4:
                    97:63:f6:42:aa:25:9f:84:86:a4:03:cd:3d:92:33:
                    e5:69:15:b6:ac:2a:8b:ac:39:ad:fe:69:c6:62:22:
                    ed:99:4c:e2:19:98:cc:bd:45:35:63:27:c1:51:17:
                    3e:94:b8:0c:a7:90:50:90:7e:bb:c3:b9:0d:6d:3f:
                    41:8a:fb:90:02:e2:06:fd:3b:bf:3b:41:2e:15:95:
                    a7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D6:0A:F6:B0:C3:EA:89:8B:D3:F9:06:99:2F:47:64:2A:9D:DF:87
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/19YK9rDD6omL0_kGmS9HZCqd34c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4d00:ff01::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:92:d1:4c:58:b3:e2:93:5b:18:e7:63:d7:08:39:7d:81:01:
         d1:86:89:07:fd:88:4f:0a:23:be:85:bc:b1:cc:a2:44:d2:48:
         cf:86:92:34:c4:8e:b1:42:3c:bb:75:ae:02:2d:49:dd:a0:88:
         05:a7:d6:f5:f7:7b:34:0a:cf:cf:6d:e7:92:b5:de:a5:46:41:
         f9:8e:3e:a4:a2:71:d1:d1:0b:df:72:96:ee:36:73:96:e6:83:
         32:c8:22:f4:06:dd:56:58:9d:66:82:79:2c:40:7a:b1:74:d4:
         ac:97:82:5f:d7:6a:4d:83:31:2c:01:40:a0:a0:39:a0:20:cf:
         7a:98:ab:c0:cd:85:c6:76:48:89:c9:36:e5:c9:86:1c:24:e1:
         e4:6c:51:8e:5d:12:b8:f5:ed:a5:ca:f3:07:93:27:c4:0f:9a:
         2d:2a:92:04:9e:06:56:91:cf:1b:b1:48:9b:f8:39:98:5f:dc:
         b3:75:77:fb:cb:01:85:1e:07:c6:bd:3a:bf:e1:f5:a1:8b:da:
         fc:ec:00:9b:a9:34:bb:77:21:b9:34:93:83:ce:b5:fa:a2:60:
         2b:74:cd:92:95:89:d1:cf:8a:94:29:c5:b9:aa:ce:61:87:af:
         31:ab:5d:87:5c:b6:cc:d4:45:72:6c:13:b7:47:02:3c:ee:1c:
         1c:ca:4f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----