Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3cM7r1khvatlrQ9mMSbwoUkDg78.roa
File:                     3cM7r1khvatlrQ9mMSbwoUkDg78.roa (raw, json)
Hash identifier:          2pxZ9cbzwjDqEhN9icQCuekUoW+p8MSKITT3NWCpzFU=
Subject key identifier:   DD:C3:3B:AF:59:21:BD:AB:65:AD:0F:66:31:26:F0:A1:49:03:83:BF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C09
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3cM7r1khvatlrQ9mMSbwoUkDg78.roa
Signing time:             Wed 29 Sep 2021 02:47:18 +0000
ROA not before:           Wed 29 Sep 2021 02:47:18 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        211.76.119.0/25 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7177 (0x1c09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:18 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=DDC33BAF5921BDAB65AD0F663126F0A1490383BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:82:c7:4a:a2:0b:83:ab:89:61:54:e8:96:0b:
                    44:59:c6:5c:12:59:ca:66:d6:c0:dd:79:2b:9e:38:
                    41:33:06:80:f8:b7:a4:3d:6d:2c:b4:fe:c5:58:68:
                    4a:74:80:f2:d9:62:a4:fa:9d:1a:3f:8a:b8:b8:b3:
                    0b:42:cc:3e:82:0c:b2:1b:41:0a:80:4c:6e:51:93:
                    4e:7f:13:77:80:5b:6e:9f:63:1f:1c:55:88:9b:29:
                    9b:3f:81:d1:72:a7:81:a3:6b:98:65:d7:d3:db:60:
                    91:a2:23:f1:b4:00:57:5f:f8:d4:ef:43:25:f9:8e:
                    a1:09:c7:d3:df:49:3a:ae:40:71:2f:1d:dd:91:65:
                    c1:bd:26:09:91:64:3e:91:49:43:ef:13:24:65:13:
                    38:3d:1f:99:b4:b4:37:48:45:07:6f:8e:a8:fc:c6:
                    41:d2:d9:33:40:b1:49:18:9d:8b:56:4c:0e:54:67:
                    e2:81:38:68:17:3d:18:5f:2a:12:c6:92:9f:92:b9:
                    e0:d3:75:e1:41:0f:d7:9c:88:4c:df:77:ae:11:97:
                    01:71:0d:95:a9:0d:fe:96:bc:77:c1:c2:cb:03:57:
                    69:af:54:63:7c:44:e2:f3:32:da:15:fc:24:75:07:
                    53:4e:92:f3:c1:36:04:2a:ae:eb:84:c8:f3:27:f2:
                    54:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C3:3B:AF:59:21:BD:AB:65:AD:0F:66:31:26:F0:A1:49:03:83:BF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3cM7r1khvatlrQ9mMSbwoUkDg78.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.119.0/25

    Signature Algorithm: sha256WithRSAEncryption
         59:b0:a4:4e:d4:52:65:9a:e4:6e:bc:b8:e0:f9:da:ba:2d:f6:
         ea:db:a3:61:d5:f9:c8:86:7e:2e:cd:83:e0:ec:fc:ae:6b:ac:
         f0:54:47:bf:4f:04:55:92:c0:fd:8c:2f:62:64:08:fa:92:e8:
         ad:3b:b1:17:e6:cc:e9:ed:e3:ce:b2:7c:f3:82:ee:40:14:6d:
         91:f5:85:4c:11:4e:ff:3c:50:21:ce:fe:5b:2b:a7:41:61:1d:
         ce:bd:71:84:79:cc:fb:0f:69:3a:19:9d:b2:03:03:35:f1:18:
         47:48:57:b4:79:36:03:52:70:c8:fb:55:d5:b2:fa:69:9f:29:
         cc:53:85:3b:0b:5f:a6:cc:a0:3c:8f:77:f9:7b:e0:21:10:63:
         7e:8d:83:16:bc:06:cf:d9:f3:55:b8:80:d7:ea:a1:31:7a:2b:
         ed:16:ef:29:a4:65:ee:78:5b:58:30:a1:69:a2:33:ba:9e:54:
         a6:d1:c2:50:82:8c:c7:b9:7c:97:11:d9:1b:96:bb:ed:0c:ea:
         f6:f3:c5:5a:e2:df:d6:ba:95:03:d6:bf:c8:3f:af:9a:6b:4d:
         d6:9b:53:ed:c7:26:a6:bd:96:40:80:2c:5a:59:d4:bb:d0:24:
         18:c9:e7:c5:b9:e1:c1:c5:27:16:9a:7e:91:e1:66:33:07:a1:
         61:43:39:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----