Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/24K443yfMrttzvOR6a2E56ydv0Y.roa
File:                     24K443yfMrttzvOR6a2E56ydv0Y.roa (raw, json)
Hash identifier:          ZnOTNV8jE3+zRENd9eDEE/jfc7BBQrstL94cFyEkK/E=
Subject key identifier:   DB:82:B8:E3:7C:9F:32:BB:6D:CE:F3:91:E9:AD:84:E7:AC:9D:BF:46
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B89
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/24K443yfMrttzvOR6a2E56ydv0Y.roa
Signing time:             Wed 29 Sep 2021 02:46:43 +0000
ROA not before:           Wed 29 Sep 2021 02:46:43 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.194.72.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7049 (0x1b89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:43 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=DB82B8E37C9F32BB6DCEF391E9AD84E7AC9DBF46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:db:b4:cf:a7:d2:fb:78:e7:fe:c4:3a:77:1f:
                    7b:99:9b:93:88:53:59:db:fd:40:6f:a2:70:82:fb:
                    23:5e:0c:7a:59:b3:3b:9a:83:af:76:1c:e2:19:f7:
                    47:d4:7b:75:06:ca:ac:b3:b0:90:ae:2b:aa:22:00:
                    13:0f:62:85:f2:1e:02:4a:e3:77:50:59:c2:3d:00:
                    29:83:03:08:b0:e9:82:10:ae:3d:b3:c4:19:4b:62:
                    f0:e4:ea:f1:34:e5:97:51:b3:ef:0d:df:05:7a:6b:
                    e8:ea:63:88:a4:84:da:37:42:22:0d:27:d1:ef:ab:
                    49:a9:b8:6e:16:61:28:92:30:99:6b:db:90:2c:35:
                    cb:19:56:1e:5c:90:5e:d6:ef:13:47:ce:eb:d4:47:
                    1b:30:ca:18:91:1d:6c:ee:b8:df:80:c7:69:e6:48:
                    5e:c4:be:e0:57:cc:44:b7:bd:fd:aa:dc:c3:4c:b1:
                    ad:4d:90:53:bc:c7:99:6d:09:4f:dc:44:58:71:9d:
                    70:84:e4:11:1c:81:2d:78:d4:f2:4e:c5:3a:77:eb:
                    1c:2b:e4:e3:b7:03:74:3f:99:26:da:64:b2:75:f8:
                    82:8a:92:5c:65:69:24:6e:fe:99:03:fc:15:7a:73:
                    4e:ac:ae:5d:2f:0a:f4:a7:04:90:bc:39:84:35:b8:
                    2f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:82:B8:E3:7C:9F:32:BB:6D:CE:F3:91:E9:AD:84:E7:AC:9D:BF:46
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/24K443yfMrttzvOR6a2E56ydv0Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:13:b3:82:54:fd:09:cd:3d:eb:84:7d:7a:04:2a:90:1d:05:
         c9:fb:6e:06:9e:67:7d:65:69:9f:f4:68:7b:3b:0e:06:92:97:
         a9:d1:c8:da:54:ee:ff:c5:3d:0b:15:24:dc:24:38:d0:03:f5:
         e5:c0:8f:ec:6f:83:20:c2:1b:52:5a:bb:f6:e0:07:d4:61:02:
         df:29:05:ad:84:b6:02:ba:4d:07:19:73:ae:dd:3a:74:52:46:
         21:97:84:44:81:4a:88:be:b1:8e:ce:bd:74:ac:9a:98:b3:28:
         ba:9e:da:da:6e:51:85:ce:4c:11:a8:9e:d5:14:40:ec:64:8f:
         13:54:7f:d0:e8:49:c9:02:14:42:25:7d:0c:a5:10:69:3d:f2:
         07:01:b7:79:6e:24:f8:f7:59:41:fd:ff:9f:f9:05:df:85:d0:
         1b:3b:68:bd:1e:55:f7:ce:0c:53:b8:bf:9d:a4:ac:6d:7d:37:
         b8:4f:1e:fa:28:cb:50:a9:56:e2:f9:fe:f3:45:68:a0:9b:d6:
         43:fa:98:e6:86:f1:7f:b0:50:fa:01:74:99:42:4a:3e:64:0f:
         3a:f8:5a:2c:c1:7d:d3:b5:d7:a4:31:78:0e:c3:a4:5e:e0:95:
         fd:2c:90:61:81:44:17:f1:e1:71:6c:e0:8c:35:a6:07:c9:ac:
         fb:a9:57:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----