Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1vZmZvxBB2uQUWMyokUKZhA8CaI.roa
File:                     1vZmZvxBB2uQUWMyokUKZhA8CaI.roa (raw, json)
Hash identifier:          zgO0we9l4PSbSjcW4JIrA2NwmlZ8VCHG7wsugsMrcJM=
Subject key identifier:   D6:F6:66:66:FC:41:07:6B:90:51:63:32:A2:45:0A:66:10:3C:09:A2
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D7B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1vZmZvxBB2uQUWMyokUKZhA8CaI.roa
Signing time:             Mon 04 Oct 2021 01:44:04 +0000
ROA not before:           Mon 04 Oct 2021 01:44:04 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        2407:4d00:ff03::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7547 (0x1d7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Oct  4 01:44:04 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=D6F66666FC41076B90516332A2450A66103C09A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e0:b0:bc:fc:e6:08:d1:87:71:12:14:30:69:
                    d6:83:66:68:8a:77:53:3a:a7:3c:12:6a:2a:b3:b3:
                    3f:76:fc:61:50:4e:64:8e:a6:40:b6:a2:4a:60:f6:
                    44:08:f5:19:48:5c:a9:9e:4c:3f:0b:c8:ca:0f:fe:
                    a3:75:43:c8:e1:ab:54:97:e7:dc:45:65:52:17:8e:
                    f9:1c:a8:c5:27:e1:2c:36:33:51:c5:1c:49:b9:ce:
                    f9:35:41:23:b1:c6:a7:ef:1c:fe:ea:d8:de:bf:45:
                    cd:7d:90:ac:38:38:5a:93:13:31:d0:5c:d7:25:c8:
                    87:ed:fb:60:19:2f:cf:3b:64:ad:d5:d6:4c:b6:14:
                    83:5d:3d:f5:7f:d0:6b:e0:d8:83:d1:51:cf:9a:e2:
                    12:d5:3d:22:6c:45:2b:b9:91:c0:5a:d3:d4:e9:d4:
                    07:1d:2d:68:91:cc:82:58:8b:f0:fb:5d:6d:4e:67:
                    bd:67:93:f4:85:e2:13:f4:95:ec:a7:35:8b:0a:52:
                    8f:70:b8:15:32:04:1f:82:6d:88:08:c2:de:9e:91:
                    9b:94:0b:b0:ac:11:2e:b2:57:5d:c2:88:c7:22:12:
                    33:ad:62:1b:b3:ce:a8:c4:75:7b:35:66:46:3d:b3:
                    50:f1:c8:4d:8b:4f:63:6f:fa:fa:19:73:11:4a:7e:
                    b3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F6:66:66:FC:41:07:6B:90:51:63:32:A2:45:0A:66:10:3C:09:A2
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1vZmZvxBB2uQUWMyokUKZhA8CaI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4d00:ff03::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:b4:69:b4:6a:b2:d7:ac:46:d5:5e:42:a6:dc:2c:b1:ae:8a:
         a1:7f:3b:85:20:8b:9e:51:e6:2f:ba:06:77:ef:f3:60:fa:26:
         ff:29:fa:a3:e5:bf:b6:09:64:b8:cb:c9:c7:4c:57:2d:d7:bc:
         cd:32:25:ba:04:16:8a:99:17:5c:f8:22:65:bd:18:73:3e:f0:
         1f:fc:b7:c0:32:18:9c:ee:e7:2b:c9:8b:60:e8:2a:af:dc:82:
         73:bd:ce:e3:61:f4:ac:84:86:b4:b6:c8:bc:7b:b0:9d:e9:66:
         9f:73:0b:62:ae:8c:7b:8f:d2:d0:90:6c:ff:57:88:50:81:65:
         b6:90:de:5f:53:4b:29:78:18:8b:72:98:ad:15:1f:62:b1:ac:
         3a:d1:ea:5f:9f:f3:eb:51:d9:90:36:d4:38:e2:8a:69:d0:76:
         09:c1:a7:6b:62:2c:79:29:47:d8:8a:b9:c1:4d:9d:f9:c4:74:
         89:ed:25:ed:04:7b:e9:01:78:4b:4a:40:8f:7f:5e:dc:db:4d:
         e1:f6:06:ce:21:ff:66:1e:8a:71:b4:b4:91:2f:5f:57:42:03:
         4b:ba:31:6e:53:91:2c:41:0b:55:dc:d8:da:d4:71:c0:77:67:
         c2:a5:e5:95:0c:36:b5:93:69:98:a1:38:73:47:00:a7:d3:72:
         4c:6f:a4:68
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICHXswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTEwMDQw
MTQ0MDRaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEQ2RjY2NjY2RkM0MTA3
NkI5MDUxNjMzMkEyNDUwQTY2MTAzQzA5QTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDC4LC8/OYI0YdxEhQwadaDZmiKd1M6pzwSaiqzsz92/GFQTmSO
pkC2okpg9kQI9RlIXKmeTD8LyMoP/qN1Q8jhq1SX59xFZVIXjvkcqMUn4Sw2M1HF
HEm5zvk1QSOxxqfvHP7q2N6/Rc19kKw4OFqTEzHQXNclyIft+2AZL887ZK3V1ky2
FINdPfV/0Gvg2IPRUc+a4hLVPSJsRSu5kcBa09Tp1AcdLWiRzIJYi/D7XW1OZ71n
k/SF4hP0leynNYsKUo9wuBUyBB+CbYgIwt6ekZuUC7CsES6yV13CiMciEjOtYhuz
zqjEdXs1ZkY9s1DxyE2LT2Nv+voZcxFKfrMZAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU1vZmZvxBB2uQUWMyokUKZhA8CaIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzF2Wm1adnhCQjJ1UVVXTXlv
a1VLWmhBOENhSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk
B00A/wMwDQYJKoZIhvcNAQELBQADggEBAIu0abRqstesRtVeQqbcLLGuiqF/O4Ug
i55R5i+6Bnfv82D6Jv8p+qPlv7YJZLjLycdMVy3XvM0yJboEFoqZF1z4ImW9GHM+
8B/8t8AyGJzu5yvJi2DoKq/cgnO9zuNh9KyEhrS2yLx7sJ3pZp9zC2KujHuP0tCQ
bP9XiFCBZbaQ3l9TSyl4GItymK0VH2KxrDrR6l+f8+tR2ZA21DjiimnQdgnBp2ti
LHkpR9iKucFNnfnEdIntJe0Ee+kBeEtKQI9/XtzbTeH2Bs4h/2YeinG0tJEvX1dC
A0u6MW5TkSxBC1Xc2NrUccB3Z8Kl5ZUMNrWTaZihOHNHAKfTckxvpGg=
-----END CERTIFICATE-----