Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/48Gxk_7zcHerwKJee1vIsxkFBOg.roa
File:                     48Gxk_7zcHerwKJee1vIsxkFBOg.roa (raw, json)
Hash identifier:          RN1kiP5xUvtZy7Lrni7KcSYhhhHorPPOgDk/usC4X6A=
Subject key identifier:   E3:C1:B1:93:FE:F3:70:77:AB:C0:A2:5E:7B:5B:C8:B3:19:05:04:E8
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B26
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/48Gxk_7zcHerwKJee1vIsxkFBOg.roa
Signing time:             Wed 29 Sep 2021 02:46:13 +0000
ROA not before:           Wed 29 Sep 2021 02:46:13 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.193.16.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6950 (0x1b26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:13 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=E3C1B193FEF37077ABC0A25E7B5BC8B3190504E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:96:f2:5a:9a:04:9c:4f:0e:f1:7b:e0:4c:1d:
                    70:a0:63:2d:d8:e0:26:a5:c2:ab:a3:01:68:ba:f8:
                    74:35:1e:6d:d5:0e:a3:a3:26:8d:80:5f:17:e8:c2:
                    f4:b9:d8:66:03:81:40:cd:eb:7a:f6:6e:11:25:f1:
                    15:5e:53:0e:0f:1b:e1:b5:99:8c:77:eb:7b:7d:7a:
                    61:4e:ba:45:a1:3f:22:01:41:2e:8f:e8:fb:72:f3:
                    b4:1a:fa:a0:2d:ac:e6:0d:ad:ea:32:6e:89:e7:89:
                    1e:e9:d9:71:f4:d0:13:2f:1a:3f:a3:2b:61:d3:79:
                    d7:52:37:09:86:2b:1c:6c:c0:d3:79:0a:66:6c:43:
                    e4:d2:f5:c3:ec:d1:83:7a:f9:42:74:19:f0:6f:91:
                    d0:84:92:87:a6:b4:fd:0a:ad:04:80:b5:e8:d5:11:
                    a5:21:5b:7d:28:9b:01:0d:81:19:35:7f:9d:2e:ab:
                    7a:89:0d:e2:b3:c5:37:b0:eb:74:a0:46:28:b2:0d:
                    b0:4b:ef:93:4f:12:9b:61:7d:37:ac:53:49:db:de:
                    7d:fb:05:45:96:bd:e2:22:3c:ee:cb:f8:22:b6:e5:
                    25:8a:67:39:61:7a:59:08:bf:c8:30:e0:1b:97:d0:
                    e3:28:11:7e:48:be:45:16:5e:8b:e9:50:7d:b9:c0:
                    f1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C1:B1:93:FE:F3:70:77:AB:C0:A2:5E:7B:5B:C8:B3:19:05:04:E8
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/48Gxk_7zcHerwKJee1vIsxkFBOg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         80:e7:76:6d:ad:57:30:bb:1e:85:61:32:fc:a7:2c:48:7d:e2:
         8c:3d:0a:23:13:8c:10:09:23:28:b3:74:df:17:ca:a0:c5:72:
         ba:90:da:95:7d:91:fe:39:3a:33:ea:d6:79:83:2f:8f:89:1f:
         34:04:6e:1b:79:18:1f:da:1f:ca:96:fe:df:f1:c7:d2:91:b7:
         5b:be:ac:fb:c5:b0:f7:b9:04:ae:74:1f:a4:66:8e:55:a2:32:
         4f:5f:c6:09:c8:eb:91:cd:ec:d9:c6:ee:45:30:73:c6:e7:58:
         95:0c:da:ca:eb:a7:de:05:f7:81:08:fd:f1:27:11:5f:2f:4a:
         3c:d2:65:a4:c1:f2:57:d7:e8:08:00:34:6c:3a:ba:f5:82:e3:
         dc:4d:16:e7:fd:41:96:08:b6:bc:14:66:32:e3:d2:bf:6b:fc:
         1b:81:02:b6:19:a8:d6:2b:ba:9e:89:88:1d:fa:21:5c:2e:48:
         c3:bc:a2:5c:3b:88:b6:06:36:c1:4c:1c:ce:3f:52:ab:df:1f:
         7f:73:c1:6d:d3:00:f7:d6:9a:6a:c4:48:6c:93:d6:70:35:e3:
         e4:ec:0f:00:d0:6a:6c:57:63:bc:15:ea:66:2c:26:8f:38:be:
         bb:99:a7:84:8a:f3:ed:f8:a1:21:ec:f7:c8:0d:68:30:3d:9f:
         bf:40:9a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----