Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3BY9zCPIq5Ifa11ip_OM48KTLhk.roa
File:                     3BY9zCPIq5Ifa11ip_OM48KTLhk.roa (raw, json)
Hash identifier:          n+OWCyq00tTCqFzXZvHgfLUnN11D3zJA1HKz3EAhhec=
Subject key identifier:   DC:16:3D:CC:23:C8:AB:92:1F:6B:5D:62:A7:F3:8C:E3:C2:93:2E:19
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       18A7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3BY9zCPIq5Ifa11ip_OM48KTLhk.roa
Signing time:             Sun 07 Feb 2021 12:50:45 +0000
ROA not before:           Sun 07 Feb 2021 12:50:45 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        118.232.64.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6311 (0x18a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:50:45 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=DC163DCC23C8AB921F6B5D62A7F38CE3C2932E19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e6:85:57:79:91:44:7e:86:fc:1e:fa:47:ae:
                    51:c2:2e:c1:a7:0a:50:45:f6:56:d8:32:6d:fd:a2:
                    d6:ee:73:66:c7:d2:07:26:18:7b:02:44:8e:51:e2:
                    02:87:d2:af:37:0c:41:ed:67:41:86:c6:59:71:c6:
                    4b:3c:a4:a6:f8:c9:e3:42:58:59:f3:9b:77:29:6a:
                    15:a9:21:af:e7:df:71:25:4f:3f:30:c7:64:32:f7:
                    6f:d5:9a:19:07:47:7f:4a:81:8c:01:e6:46:3b:33:
                    c7:5b:9e:8e:84:60:ef:71:f8:cb:96:f4:33:88:ec:
                    4f:d8:a6:87:98:6b:c7:8e:19:92:2a:a1:08:0a:5e:
                    64:3b:68:d3:90:a8:23:ea:7a:a6:89:2b:6e:1e:58:
                    c2:68:0e:ec:89:a0:07:f4:c3:71:62:03:8f:fd:7a:
                    ba:e1:b5:9a:fe:d6:56:5f:3e:87:16:9a:46:fb:79:
                    72:2f:0e:bc:41:d2:4d:66:0e:be:09:ff:cc:12:3d:
                    61:a1:8e:21:0a:13:03:17:78:5f:43:21:0b:c2:c8:
                    73:37:e0:71:03:64:59:df:12:8b:11:25:34:45:4f:
                    fd:ab:05:97:e3:3c:b4:de:64:63:0b:85:7e:80:ad:
                    13:5e:ea:e6:b5:62:c6:45:67:c3:6d:59:76:ef:55:
                    ee:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:16:3D:CC:23:C8:AB:92:1F:6B:5D:62:A7:F3:8C:E3:C2:93:2E:19
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3BY9zCPIq5Ifa11ip_OM48KTLhk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         92:ad:22:ab:4c:7b:46:04:24:db:4b:d7:a7:7a:06:72:41:1c:
         45:93:7c:de:ad:5d:f1:7f:8b:80:18:2f:cf:2f:df:61:48:77:
         02:b3:2e:e3:06:5f:e7:bb:50:f1:5c:03:bb:ea:b0:0f:1c:b3:
         74:59:ed:3b:1e:6e:48:62:ed:9d:e3:3c:c5:0c:f8:c1:58:08:
         93:55:96:54:53:3d:28:83:00:58:13:ff:68:b2:00:c6:3e:dd:
         37:52:1a:91:72:1d:bf:88:f7:59:c2:23:c0:93:84:04:96:8e:
         4a:33:f8:11:4c:6b:be:e1:79:3b:1c:df:1a:51:87:14:16:32:
         8e:c8:ed:c7:d1:fa:21:00:09:5b:e0:56:c6:7e:44:55:4d:5c:
         7a:61:ca:13:a6:2d:64:2c:41:2e:63:80:64:eb:7b:ab:02:da:
         7b:6d:8c:51:c9:e7:c3:aa:bb:94:11:a2:96:44:76:5d:a3:7a:
         28:45:47:82:9c:4f:80:07:f4:56:e6:0c:51:4b:24:89:0a:87:
         b8:99:c6:47:14:08:f0:2c:d6:b0:96:5e:34:97:a4:8d:58:5f:
         3a:1a:20:ef:51:b7:4f:80:a7:97:ac:51:76:28:19:c9:d6:30:
         8b:67:51:25:54:a7:f6:d6:8b:e2:da:fa:1d:5e:ca:f6:32:8f:
         ae:a4:62:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----