Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5t2qqjkEufl1Mzl8A4naQJ73Txs.roa
File:                     5t2qqjkEufl1Mzl8A4naQJ73Txs.roa (raw, json)
Hash identifier:          7UCRKEA8Sh+lqze1wovCjzdzA81j3n4lcbGKj03k4Ts=
Subject key identifier:   E6:DD:AA:AA:39:04:B9:F9:75:33:39:7C:03:89:DA:40:9E:F7:4F:1B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B25
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5t2qqjkEufl1Mzl8A4naQJ73Txs.roa
Signing time:             Wed 29 Sep 2021 02:46:13 +0000
ROA not before:           Wed 29 Sep 2021 02:46:13 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.192.56.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6949 (0x1b25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:13 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=E6DDAAAA3904B9F97533397C0389DA409EF74F1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b1:75:d1:54:b0:95:15:05:e3:4e:64:49:79:
                    ab:ac:6f:37:3e:5a:48:b2:bd:ae:e3:34:c7:3a:e8:
                    e6:b4:87:c5:c3:d3:83:3e:3c:ea:2d:f7:ad:41:90:
                    0d:43:30:e2:9e:85:71:ca:43:0e:b4:f1:93:51:39:
                    3b:18:54:46:51:87:49:7a:7f:68:c7:3e:95:5b:a0:
                    33:73:51:65:74:2a:89:1a:6a:8d:f7:13:36:38:dd:
                    9d:b3:9e:a3:58:08:89:8a:4e:8a:d5:4c:60:06:63:
                    3b:ae:89:3e:ce:42:15:cc:fd:1f:a8:78:78:3e:76:
                    5b:67:6b:b5:69:9f:37:72:ca:ae:05:03:4f:f3:3f:
                    3e:0f:78:6f:55:06:12:74:71:e1:77:9d:d3:a4:35:
                    f3:a0:71:50:a4:7b:6e:e2:ff:68:35:a6:c7:cc:7a:
                    18:14:de:cf:06:9e:f3:8e:fd:54:3d:49:c4:7e:ca:
                    f3:b9:73:ff:bb:41:53:fb:89:33:2f:1e:9a:e6:51:
                    41:08:14:52:d5:25:35:cb:0f:ba:ef:e9:ae:9f:2b:
                    d4:68:1e:e6:37:81:7a:7f:6c:c3:90:9b:cb:ca:09:
                    d7:64:db:59:00:74:82:57:ac:89:e7:0c:4b:8b:29:
                    46:32:35:42:9d:4f:7d:a8:5d:2f:96:9d:9e:d4:d0:
                    58:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:DD:AA:AA:39:04:B9:F9:75:33:39:7C:03:89:DA:40:9E:F7:4F:1B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5t2qqjkEufl1Mzl8A4naQJ73Txs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9f:b9:52:74:d1:d7:63:72:1c:2b:bb:f0:35:41:60:a3:bd:52:
         d0:1f:0f:39:73:ae:2f:aa:69:f9:11:a3:4b:eb:c8:a4:d1:64:
         8b:3b:68:46:6f:c8:ab:96:8c:44:9e:4b:13:ca:92:48:d9:2d:
         45:9f:eb:05:2b:25:5c:22:53:b5:6c:38:bf:08:32:7b:f5:bb:
         31:5a:ea:a2:9a:12:59:2d:f4:f7:d7:dd:33:53:93:03:77:ab:
         db:a4:d5:9d:a2:3b:e1:9e:c5:97:08:1f:31:04:e8:e5:55:04:
         fe:af:6f:e6:21:38:98:45:ac:7d:b3:5e:20:b6:68:fe:2e:6c:
         d7:9d:72:1d:f3:80:45:e8:1d:ac:ef:c0:36:40:a8:87:41:b4:
         17:10:59:c8:1c:c1:dc:d0:6c:7a:08:5f:05:47:ed:81:0a:dd:
         3a:ba:9a:31:c8:08:50:65:5e:31:d0:5c:8d:ce:ce:5c:67:de:
         4a:f8:f3:79:de:93:c6:81:ff:72:55:3d:b3:37:13:2f:5f:09:
         2f:c3:bd:2d:19:97:45:d2:d0:cb:f0:cc:16:99:64:92:f2:22:
         13:64:b5:71:e3:cd:ee:53:54:1e:4c:85:e5:54:0c:90:3b:45:
         a6:12:25:8a:a4:38:de:d6:0b:73:f3:5c:e7:40:36:3c:d7:1a:
         53:bb:8d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----