Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4ZxD6oo1dkin-HjASQTpnp31hQo.roa
File:                     4ZxD6oo1dkin-HjASQTpnp31hQo.roa (raw, json)
Hash identifier:          UVhTjCwrpXY8nGO4fIgVJxKqOmEmjeD2rpIojqFMwCY=
Subject key identifier:   E1:9C:43:EA:8A:35:76:48:A7:F8:78:C0:49:04:E9:9E:9D:F5:85:0A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B06
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4ZxD6oo1dkin-HjASQTpnp31hQo.roa
Signing time:             Wed 29 Sep 2021 02:46:02 +0000
ROA not before:           Wed 29 Sep 2021 02:46:02 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.193.176.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6918 (0x1b06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:02 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=E19C43EA8A357648A7F878C04904E99E9DF5850A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:74:a7:58:35:ee:e3:9c:b3:22:86:c0:32:ab:
                    cb:87:63:5c:5f:94:47:58:1c:63:64:79:b3:60:63:
                    a7:1e:20:6d:92:4e:61:cf:fb:0d:c6:22:ef:42:84:
                    f4:db:19:d2:f7:84:e5:1c:50:7f:24:8b:ef:e5:6d:
                    6e:e4:d9:dd:fd:2c:47:b3:a1:e7:19:0f:7a:20:cc:
                    de:1b:5f:4f:75:e0:cc:c6:ee:a2:c0:4e:d5:c6:ea:
                    e7:33:5e:fd:f2:7f:b0:9b:2f:71:54:14:46:2e:60:
                    70:7b:4a:e2:d1:b8:2f:82:d7:41:11:1d:3d:ff:71:
                    ab:90:f5:5e:86:ea:68:2b:f0:88:d3:8a:99:be:d9:
                    b7:21:a1:e4:02:26:9e:aa:72:88:6a:b5:31:1b:1b:
                    da:18:f6:78:d9:0c:76:2f:10:bf:fe:35:69:59:9f:
                    2a:da:85:62:e6:d4:d0:d3:8d:51:34:33:8c:a1:df:
                    33:32:75:f2:e9:4f:e2:1b:82:43:e0:b0:0b:5b:cc:
                    f9:8d:34:2e:b5:18:f1:68:28:19:85:84:7a:8c:84:
                    24:18:98:50:74:ec:27:02:e6:44:68:db:38:3a:10:
                    96:2f:9e:e0:5b:ce:3a:72:86:c7:05:9c:54:20:df:
                    82:a5:84:d3:09:1a:bb:ec:d8:51:7e:12:d2:c0:3d:
                    9d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:9C:43:EA:8A:35:76:48:A7:F8:78:C0:49:04:E9:9E:9D:F5:85:0A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4ZxD6oo1dkin-HjASQTpnp31hQo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:55:b5:b2:bb:8f:c6:69:d0:55:38:db:6d:f6:3e:c7:cf:92:
         2a:92:69:f4:c7:b0:f7:70:c2:88:3d:20:03:94:51:7b:f2:c2:
         44:7b:77:56:b9:c3:f0:45:5f:3c:c3:14:ac:b9:fd:8a:ab:e1:
         81:af:3c:77:a8:36:8d:49:39:60:58:d5:ec:75:36:99:14:16:
         4d:13:0b:13:01:51:80:08:4f:eb:cf:1b:c3:6b:bb:ba:21:00:
         0d:b6:f8:62:3a:f6:ae:a2:c4:4b:7f:86:6a:73:06:3f:1c:32:
         b5:93:eb:cd:9d:dd:c2:3c:de:93:57:8e:4e:54:35:3e:f2:bc:
         1c:8d:d1:03:f5:d4:93:16:1f:33:1d:3f:7f:09:74:ee:c3:6b:
         b5:69:82:cb:da:2d:fa:49:3c:ed:8c:4f:6e:22:18:3d:40:02:
         c8:8c:8b:53:d1:cb:fc:21:9a:0a:23:7b:35:89:43:5c:22:a0:
         97:0d:4c:ad:70:73:00:0f:95:a5:7d:41:64:5a:5b:8c:8d:08:
         d6:21:9f:1b:01:01:27:e8:5e:a3:3a:fa:a2:d5:04:dc:26:96:
         9d:b9:0a:bb:9e:cd:4e:af:29:58:e7:91:b0:ac:bd:92:d2:d5:
         94:6b:a3:e3:4c:82:14:74:27:7a:47:74:ac:18:88:e2:32:c6:
         f2:ed:5a:4c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGwYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ2MDJaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEUxOUM0M0VBOEEzNTc2
NDhBN0Y4NzhDMDQ5MDRFOTlFOURGNTg1MEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDjdKdYNe7jnLMihsAyq8uHY1xflEdYHGNkebNgY6ceIG2STmHP
+w3GIu9ChPTbGdL3hOUcUH8ki+/lbW7k2d39LEezoecZD3ogzN4bX0914MzG7qLA
TtXG6uczXv3yf7CbL3FUFEYuYHB7SuLRuC+C10ERHT3/cauQ9V6G6mgr8IjTipm+
2bchoeQCJp6qcohqtTEbG9oY9njZDHYvEL/+NWlZnyrahWLm1NDTjVE0M4yh3zMy
dfLpT+IbgkPgsAtbzPmNNC61GPFoKBmFhHqMhCQYmFB07CcC5kRo2zg6EJYvnuBb
zjpyhscFnFQg34KlhNMJGrvs2FF+EtLAPZ35AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU4ZxD6oo1dkin+HjASQTpnp31hQowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzRaeEQ2b28xZGtpbi1IakFT
UVRwbnAzMWhRby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wbAwDQYJKoZIhvcNAQELBQADggEBAAdVtbK7j8Zp0FU42232PsfPkiqSafTHsPdw
wog9IAOUUXvywkR7d1a5w/BFXzzDFKy5/Yqr4YGvPHeoNo1JOWBY1ex1NpkUFk0T
CxMBUYAIT+vPG8Nru7ohAA22+GI69q6ixEt/hmpzBj8cMrWT682d3cI83pNXjk5U
NT7yvByN0QP11JMWHzMdP38JdO7Da7VpgsvaLfpJPO2MT24iGD1AAsiMi1PRy/wh
mgojezWJQ1wioJcNTK1wcwAPlaV9QWRaW4yNCNYhnxsBASfoXqM6+qLVBNwmlp25
CruezU6vKVjnkbCsvZLS1ZRro+NMghR0J3pHdKwYiOIyxvLtWkw=
-----END CERTIFICATE-----