Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2Tvvk7t8aipDE5gVXkLOdCr-cuM.roa
File:                     2Tvvk7t8aipDE5gVXkLOdCr-cuM.roa (raw, json)
Hash identifier:          lGJFgYU2C3yeWSojrg/qh6jq74YR5Pd6OiS5wvX+WWk=
Subject key identifier:   D9:3B:EF:93:BB:7C:6A:2A:43:13:98:15:5E:42:CE:74:2A:FE:72:E3
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1ABE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2Tvvk7t8aipDE5gVXkLOdCr-cuM.roa
Signing time:             Wed 29 Sep 2021 02:45:42 +0000
ROA not before:           Wed 29 Sep 2021 02:45:42 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        103.224.194.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6846 (0x1abe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:45:42 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=D93BEF93BB7C6A2A431398155E42CE742AFE72E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:8d:09:e0:38:d4:e9:9c:8c:67:e1:5b:8c:49:
                    0a:95:39:2e:40:a2:41:df:80:15:0e:54:54:13:65:
                    f6:d6:b2:ff:23:d0:e7:e3:5e:68:d0:77:b2:ae:6b:
                    b1:c3:9b:61:ca:0c:00:96:59:aa:69:e2:75:44:83:
                    f5:09:d3:5d:3c:6c:bb:30:e9:5f:15:c4:0f:e4:0b:
                    2b:54:d1:69:b9:d1:22:2c:bd:b3:c9:da:d3:49:aa:
                    b3:b8:52:b6:bd:be:f2:84:04:00:21:cc:2c:e5:c8:
                    f1:92:7a:7e:45:be:e2:29:67:40:a7:7b:17:94:36:
                    b6:8d:2c:83:2d:6a:c3:59:b6:06:29:58:6d:cb:ad:
                    3e:2c:05:75:aa:50:4d:e1:9a:52:00:7b:34:39:fe:
                    fa:57:32:33:d4:bd:fb:e4:c2:97:45:f8:04:ef:56:
                    6d:c6:13:5b:2a:da:2d:5b:d9:8c:98:44:dd:c9:fe:
                    67:68:fb:36:35:f4:e7:80:be:78:4a:c8:b6:e2:41:
                    2d:db:43:09:e4:da:6b:87:3b:fd:e9:45:a5:5a:0c:
                    00:be:f6:46:c3:c5:82:89:03:db:ba:f0:3b:5d:ab:
                    cf:42:bc:35:8a:c7:e7:e2:41:3b:6c:b0:60:16:06:
                    da:3d:2f:59:43:37:ea:2b:f7:75:10:ea:c9:d7:87:
                    8c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:3B:EF:93:BB:7C:6A:2A:43:13:98:15:5E:42:CE:74:2A:FE:72:E3
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2Tvvk7t8aipDE5gVXkLOdCr-cuM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:90:f4:74:c9:c9:2f:86:7a:a1:02:a4:77:ce:74:f9:56:11:
         ee:cb:8a:b1:aa:e7:74:90:57:26:d6:2e:f1:1f:99:0a:af:81:
         46:39:ed:fa:8e:bb:88:4a:9d:37:21:d0:a3:93:e0:e0:66:28:
         20:07:d0:de:46:10:a4:fe:85:77:0f:f9:98:a1:c6:50:ca:80:
         2f:61:2d:aa:77:7e:88:4c:70:96:4f:5a:ee:31:49:f9:22:d8:
         fd:6f:86:fa:86:8b:c1:22:c8:3b:ed:cc:61:e0:80:dc:be:90:
         ff:21:d1:e7:35:fa:4f:dc:ed:7a:bb:95:1b:cb:5a:f2:b9:17:
         7c:a1:01:90:97:5d:51:19:7c:ba:44:20:2f:92:23:a1:ac:be:
         ec:36:25:81:b8:e7:54:85:e6:00:32:32:61:0b:3a:88:c6:91:
         97:c9:8f:0c:c7:4e:9c:5e:63:a2:dd:14:66:97:46:85:6b:6d:
         88:15:0d:01:1a:11:79:1d:1c:33:25:93:47:cf:bb:2d:1d:f5:
         22:2f:f0:ba:f1:9e:51:6d:6d:6e:90:3e:24:44:7f:b8:da:e8:
         68:ff:b8:89:a7:d2:16:09:d2:d7:4e:ff:6a:7b:c3:50:ea:83:
         20:45:84:b4:12:0b:b0:c0:1c:5b:90:06:db:1d:c6:6b:7a:47:
         82:a6:11:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----