Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/73Nk_rgjSsX_lFYOY9yhSF9Dcro.roa
File:                     73Nk_rgjSsX_lFYOY9yhSF9Dcro.roa (raw, json)
Hash identifier:          r0XLIzIGkteQKx2QiAtuQOkJ3RfvCSnFLtWaNnkMWwA=
Subject key identifier:   EF:73:64:FE:B8:23:4A:C5:FF:94:56:0E:63:DC:A1:48:5F:43:72:BA
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D7D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/73Nk_rgjSsX_lFYOY9yhSF9Dcro.roa
Signing time:             Mon 04 Oct 2021 01:44:20 +0000
ROA not before:           Mon 04 Oct 2021 01:44:20 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        2407:4d00:ff04::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7549 (0x1d7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Oct  4 01:44:20 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=EF7364FEB8234AC5FF94560E63DCA1485F4372BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d8:6f:75:ce:6c:4d:03:5a:3b:da:79:3a:84:
                    08:10:15:ad:0a:81:ee:47:58:7e:f9:ab:26:0d:66:
                    f7:b8:0e:c4:83:6a:7d:f4:c1:97:ff:3c:78:3a:4a:
                    ad:18:7d:22:c9:12:1d:32:4c:45:e9:58:6f:80:54:
                    26:63:a1:2c:2f:81:94:3a:93:de:95:24:71:db:e7:
                    21:3e:31:79:22:2e:1d:cb:01:1a:c3:67:24:2e:b6:
                    6f:87:a6:4b:85:ac:16:47:98:c9:80:62:82:b2:32:
                    78:d6:5f:fd:b8:b2:f2:2f:04:75:37:9c:88:91:20:
                    b3:cf:24:d5:dd:c2:3b:58:00:33:5d:4e:7f:c0:8a:
                    a6:7a:88:1b:f8:c2:47:63:84:a8:2c:81:0b:15:3c:
                    5c:4c:7c:0f:f3:d9:4b:61:5e:c4:e1:21:1d:c6:95:
                    12:8b:44:9e:77:7a:af:cd:2d:38:37:7d:c6:6e:3e:
                    fb:1d:a0:fc:cc:68:4c:c3:b5:49:50:0a:a6:35:d8:
                    b4:48:a5:63:2c:47:38:de:92:0c:05:af:34:5d:00:
                    77:f8:61:c0:a3:7f:ec:da:9a:6d:4d:03:f4:89:46:
                    ad:82:fe:5e:6f:ce:0a:69:ec:09:85:c2:50:1b:40:
                    f6:03:e2:d5:32:c2:44:e3:b8:71:a5:f8:5d:bf:ae:
                    4b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:73:64:FE:B8:23:4A:C5:FF:94:56:0E:63:DC:A1:48:5F:43:72:BA
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/73Nk_rgjSsX_lFYOY9yhSF9Dcro.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4d00:ff04::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:83:ea:cd:42:78:37:2e:6b:e5:71:3f:3c:4a:e4:a1:a5:40:
         63:f4:1b:78:40:df:c3:32:0d:c0:bb:6e:37:aa:d0:6a:1f:88:
         3f:aa:f1:ff:77:58:74:cd:ee:f4:fa:b8:53:ea:b8:57:99:ae:
         37:ac:da:64:57:e7:7b:52:b0:b4:e4:e2:3b:51:b4:bd:02:f3:
         5a:ea:0b:92:53:b0:9f:54:b4:8a:22:39:00:fb:fd:9e:38:76:
         8c:07:5a:d3:35:4a:7f:30:fc:d0:d8:0d:60:a2:b1:47:cb:30:
         fb:a3:50:7b:3d:94:46:31:e6:67:e7:6c:b9:a8:02:38:a6:0d:
         10:4a:9a:27:e1:89:78:44:2b:eb:46:ba:a0:3a:92:ca:25:57:
         b2:77:89:5e:69:14:b5:eb:a1:83:b5:5d:b5:79:bf:e9:da:16:
         03:26:92:e0:26:97:67:03:d5:53:78:0c:c7:dc:26:24:b4:bd:
         f4:dc:6f:78:d7:05:82:20:41:51:d1:62:42:03:9f:d4:0a:6e:
         27:d8:33:f4:00:f0:56:3c:d4:ad:4e:70:ea:2c:78:1c:92:5b:
         51:99:cb:92:76:36:ff:7b:2d:c9:c6:1c:fb:07:57:dc:d2:b3:
         3c:9d:e2:1b:07:56:cc:12:64:ee:5c:ab:e9:30:24:b1:7f:f5:
         e4:27:6c:0a
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICHX0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTEwMDQw
MTQ0MjBaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEVGNzM2NEZFQjgyMzRB
QzVGRjk0NTYwRTYzRENBMTQ4NUY0MzcyQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC92G91zmxNA1o72nk6hAgQFa0Kge5HWH75qyYNZve4DsSDan30
wZf/PHg6Sq0YfSLJEh0yTEXpWG+AVCZjoSwvgZQ6k96VJHHb5yE+MXkiLh3LARrD
ZyQutm+HpkuFrBZHmMmAYoKyMnjWX/24svIvBHU3nIiRILPPJNXdwjtYADNdTn/A
iqZ6iBv4wkdjhKgsgQsVPFxMfA/z2UthXsThIR3GlRKLRJ53eq/NLTg3fcZuPvsd
oPzMaEzDtUlQCqY12LRIpWMsRzjekgwFrzRdAHf4YcCjf+zamm1NA/SJRq2C/l5v
zgpp7AmFwlAbQPYD4tUywkTjuHGl+F2/rkt1AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU73Nk/rgjSsX/lFYOY9yhSF9DcrowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzczTmtfcmdqU3NYX2xGWU9Z
OXloU0Y5RGNyby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk
B00A/wQwDQYJKoZIhvcNAQELBQADggEBADmD6s1CeDcua+VxPzxK5KGlQGP0G3hA
38MyDcC7bjeq0GofiD+q8f93WHTN7vT6uFPquFeZrjes2mRX53tSsLTk4jtRtL0C
81rqC5JTsJ9UtIoiOQD7/Z44dowHWtM1Sn8w/NDYDWCisUfLMPujUHs9lEYx5mfn
bLmoAjimDRBKmifhiXhEK+tGuqA6ksolV7J3iV5pFLXroYO1XbV5v+naFgMmkuAm
l2cD1VN4DMfcJiS0vfTcb3jXBYIgQVHRYkIDn9QKbifYM/QA8FY81K1OcOoseByS
W1GZy5J2Nv97LcnGHPsHV9zSszyd4hsHVswSZO5cq+kwJLF/9eQnbAo=
-----END CERTIFICATE-----