Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2zjE_F4Foyd-iTVTe8zgBQaK590.roa
File:                     2zjE_F4Foyd-iTVTe8zgBQaK590.roa (raw, json)
Hash identifier:          VIhKArAytnB5tZtGhcSsOr7jVAfVts/323vLXmV4mUw=
Subject key identifier:   DB:38:C4:FC:5E:05:A3:27:7E:89:35:53:7B:CC:E0:05:06:8A:E7:DD
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C0A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2zjE_F4Foyd-iTVTe8zgBQaK590.roa
Signing time:             Wed 29 Sep 2021 02:47:18 +0000
ROA not before:           Wed 29 Sep 2021 02:47:18 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        211.76.119.128/25 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7178 (0x1c0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:18 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=DB38C4FC5E05A3277E8935537BCCE005068AE7DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:73:03:28:e6:d1:e6:ba:52:48:9e:89:12:30:
                    8a:f2:36:2b:92:72:63:5a:f6:d2:0e:dc:d4:c8:ce:
                    43:a9:2c:2c:33:99:30:e8:32:f4:ff:62:17:da:7e:
                    38:ca:6c:05:67:6d:54:ae:b8:15:f9:51:66:b7:af:
                    5d:69:9d:de:a2:1b:b8:ee:46:7b:33:34:76:ca:5f:
                    96:45:0f:87:c1:a1:f9:5d:98:c7:66:22:17:cf:b0:
                    8e:c8:0b:11:23:58:09:e6:5c:57:e8:ae:35:00:df:
                    b7:ac:c5:01:ce:9d:31:4e:fa:e7:85:e7:2a:14:2d:
                    65:d6:e1:46:d1:81:e9:45:2a:f4:11:86:16:01:1e:
                    00:4f:3f:69:da:f6:2b:5a:7d:42:31:95:d8:2a:52:
                    da:3d:fb:c0:01:84:ed:04:b6:3f:48:77:81:cb:14:
                    0f:b9:92:ca:14:c7:70:16:26:8d:86:90:f5:f7:f3:
                    e9:d5:3a:f0:cf:5d:a4:45:75:a7:ee:62:41:6b:c1:
                    d9:b9:0a:1e:7b:87:9b:3a:21:c4:0c:0d:96:9d:ec:
                    44:d1:13:d6:a9:a5:a2:44:8a:74:5c:59:7a:49:cc:
                    e0:1a:3d:03:12:0b:f4:4f:8f:f3:8b:d8:16:fc:87:
                    d2:82:a8:02:6e:b7:74:ee:ce:51:b7:c8:19:65:97:
                    4f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:38:C4:FC:5E:05:A3:27:7E:89:35:53:7B:CC:E0:05:06:8A:E7:DD
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2zjE_F4Foyd-iTVTe8zgBQaK590.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.119.128/25

    Signature Algorithm: sha256WithRSAEncryption
         97:17:d5:60:98:d6:2d:20:47:bf:46:d9:4b:c3:6f:3c:30:19:
         26:1b:f3:67:a5:77:69:c0:a1:88:4f:1e:1b:2d:d6:93:f2:08:
         61:bc:62:1e:25:e0:97:08:2b:c4:46:b8:2a:c8:07:f3:96:17:
         1b:bf:61:e0:73:99:5f:30:16:08:cb:0c:e3:f5:99:74:58:79:
         de:f4:5e:92:6b:b3:0b:33:70:af:b9:d4:75:90:39:7f:2c:77:
         31:01:88:e9:ce:88:fd:22:97:7f:d6:3b:d2:30:89:a3:f2:a6:
         26:b1:71:e3:1d:36:02:42:0b:54:1a:66:61:96:59:93:c7:71:
         5c:e7:8c:47:c4:36:24:cb:63:8e:17:7f:c5:15:92:40:f8:b9:
         4e:dc:fe:cf:3b:99:e3:c0:02:7d:bc:bc:25:64:9c:1f:5f:fe:
         70:49:f2:f4:4e:3f:72:67:fe:98:36:0e:c2:43:cc:2c:1b:bc:
         74:da:07:e5:83:e3:bb:a8:db:d4:a2:66:7e:76:e1:16:25:0a:
         a2:ff:7a:95:cd:2a:df:67:55:89:ec:1c:96:53:3a:a9:f3:97:
         23:17:b5:f9:d0:46:40:35:9d:4d:72:2a:41:e0:a9:30:bc:ab:
         cf:93:6f:54:97:26:88:44:f4:c6:44:fc:07:f1:5b:22:33:94:
         2e:d2:9e:2d
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICHAowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ3MThaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKERCMzhDNEZDNUUwNUEz
Mjc3RTg5MzU1MzdCQ0NFMDA1MDY4QUU3REQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDkcwMo5tHmulJInokSMIryNiuScmNa9tIO3NTIzkOpLCwzmTDo
MvT/YhfafjjKbAVnbVSuuBX5UWa3r11pnd6iG7juRnszNHbKX5ZFD4fBofldmMdm
IhfPsI7ICxEjWAnmXFforjUA37esxQHOnTFO+ueF5yoULWXW4UbRgelFKvQRhhYB
HgBPP2na9itafUIxldgqUto9+8ABhO0Etj9Id4HLFA+5ksoUx3AWJo2GkPX38+nV
OvDPXaRFdafuYkFrwdm5Ch57h5s6IcQMDZad7ETRE9appaJEinRcWXpJzOAaPQMS
C/RPj/OL2Bb8h9KCqAJut3TuzlG3yBlll08TAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQU2zjE/F4Foyd+iTVTe8zgBQaK590wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzJ6akVfRjRGb3lkLWlUVlRl
OHpnQlFhSzU5MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQfT
THeAMA0GCSqGSIb3DQEBCwUAA4IBAQCXF9VgmNYtIEe/RtlLw288MBkmG/NnpXdp
wKGITx4bLdaT8ghhvGIeJeCXCCvERrgqyAfzlhcbv2Hgc5lfMBYIywzj9Zl0WHne
9F6Sa7MLM3CvudR1kDl/LHcxAYjpzoj9Ipd/1jvSMImj8qYmsXHjHTYCQgtUGmZh
llmTx3Fc54xHxDYky2OOF3/FFZJA+LlO3P7PO5njwAJ9vLwlZJwfX/5wSfL0Tj9y
Z/6YNg7CQ8wsG7x02gflg+O7qNvUomZ+duEWJQqi/3qVzSrfZ1WJ7ByWUzqp85cj
F7X50EZANZ1NcipB4KkwvKvPk29UlyaIRPTGRPwH8VsiM5Qu0p4t
-----END CERTIFICATE-----