Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2vgu-8_TQlwDWk018c5Kefh4gN8.roa
File:                     2vgu-8_TQlwDWk018c5Kefh4gN8.roa (raw, json)
Hash identifier:          ssPPvfnBHpca9BZ6EB4A/gyT9aichRPgFfeAfaXxZmg=
Subject key identifier:   DA:F8:2E:FB:CF:D3:42:5C:03:5A:4D:35:F1:CE:4A:79:F8:78:80:DF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B5D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2vgu-8_TQlwDWk018c5Kefh4gN8.roa
Signing time:             Wed 29 Sep 2021 02:46:30 +0000
ROA not before:           Wed 29 Sep 2021 02:46:30 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.194.112.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7005 (0x1b5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:30 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=DAF82EFBCFD3425C035A4D35F1CE4A79F87880DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bd:b0:68:a0:9d:16:c6:b6:a5:1d:a7:5f:ea:
                    1b:0b:cd:b2:bc:93:d4:fb:06:f9:87:1e:1e:66:48:
                    ed:68:e8:7c:6d:0d:24:a3:39:e0:a3:e8:64:14:47:
                    b3:76:51:41:b4:32:fd:e5:4c:e5:e3:25:89:85:d2:
                    59:67:4b:83:e2:ae:26:c4:b6:d3:00:37:93:4e:32:
                    58:f9:55:d1:72:2d:ec:a8:8f:18:64:bc:55:b3:3d:
                    62:8b:c8:ce:48:b9:6b:1d:26:a0:83:b8:24:9b:ba:
                    5a:7b:13:97:25:f3:4a:69:c8:c6:dd:3c:b6:e7:d5:
                    14:d2:ad:9f:58:e1:4c:57:66:3b:87:c1:b1:ae:e1:
                    77:7f:ba:de:08:a4:96:e6:0f:2a:05:42:90:76:57:
                    6b:5d:88:e0:c1:51:af:bc:57:92:3f:14:43:35:5a:
                    bc:d5:98:78:12:27:16:2e:9c:fd:99:08:92:4c:3f:
                    0d:b7:c2:20:08:82:29:46:ff:8f:66:b7:e6:5f:6b:
                    cd:cf:8d:1e:f6:e8:ec:1c:19:1b:d0:56:7b:f9:ec:
                    e1:97:00:ca:4e:6d:af:e4:2e:bc:49:83:f7:3b:86:
                    4c:e7:f8:a0:90:75:38:56:65:7a:79:81:a6:bf:71:
                    b0:dd:21:31:a3:6d:53:3a:d3:c6:a6:d4:2c:1b:23:
                    85:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F8:2E:FB:CF:D3:42:5C:03:5A:4D:35:F1:CE:4A:79:F8:78:80:DF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2vgu-8_TQlwDWk018c5Kefh4gN8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         14:f3:ff:15:ed:7b:68:58:8e:99:32:4e:a0:0f:c4:8b:38:6c:
         e7:02:8d:91:ae:fe:fa:05:65:e0:28:5f:44:49:37:63:7c:7c:
         0e:3d:5b:12:02:ce:24:24:3e:9a:a6:c8:07:b2:fb:72:32:f8:
         1b:2e:b1:c7:41:42:ac:bc:9e:7d:f5:c6:f9:3f:f7:3e:6e:98:
         67:3b:55:1e:f5:06:10:9b:c4:2b:a5:bd:08:2a:47:db:7c:23:
         da:ab:a5:d3:05:e3:15:67:a7:ec:b9:cc:56:fe:52:ec:55:c8:
         af:ff:51:26:50:fb:06:e6:31:c5:1f:ee:5d:87:04:0f:57:ff:
         40:01:c3:a6:aa:db:6f:3c:f4:5e:13:07:63:79:fe:d8:1b:a0:
         ed:79:fe:24:02:0b:20:18:8d:da:5b:5d:f4:d5:e6:f1:95:97:
         8e:82:ba:3f:9c:ad:af:58:90:51:3d:f7:a3:db:da:58:7d:e9:
         b7:0e:21:e0:86:8d:7a:6f:da:b0:41:4f:8b:37:21:4a:5f:50:
         3c:68:24:2c:22:81:b3:50:1c:6e:dc:bd:89:9c:4a:40:2b:06:
         65:a9:b8:63:24:23:f7:ad:94:d3:0a:03:57:d7:00:89:84:47:
         2c:8f:24:dc:20:ce:9c:38:f0:17:7e:69:1d:5d:57:35:30:5d:
         a2:d7:5e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----