Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7hLLerVuIFjRpPbqjchPMr23Tfk.roa
File:                     7hLLerVuIFjRpPbqjchPMr23Tfk.roa (raw, json)
Hash identifier:          45mdXNvwz1gSp+8+0HygncDuNglIOa1TUmKFNVxU3oo=
Subject key identifier:   EE:12:CB:7A:B5:6E:20:58:D1:A4:F6:EA:8D:C8:4F:32:BD:B7:4D:F9
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C83
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7hLLerVuIFjRpPbqjchPMr23Tfk.roa
Signing time:             Wed 29 Sep 2021 02:47:52 +0000
ROA not before:           Wed 29 Sep 2021 02:47:52 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        118.232.77.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7299 (0x1c83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:52 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=EE12CB7AB56E2058D1A4F6EA8DC84F32BDB74DF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0e:92:1f:84:8f:25:ed:ed:c0:cd:0b:e8:ea:
                    16:40:be:3a:d5:5b:27:81:33:c0:bc:3f:7b:8c:1c:
                    9b:06:88:08:49:f4:23:6b:3a:30:bc:5c:69:64:ea:
                    72:fe:3b:01:e8:29:16:cd:14:ce:cc:3c:aa:37:a3:
                    21:03:88:19:6a:8c:0f:52:27:c9:41:88:63:e0:71:
                    88:e3:bb:95:09:3b:3b:a7:3c:58:34:b0:09:cc:dd:
                    b2:39:8e:72:c0:c5:33:c6:19:45:e1:d2:f4:c1:91:
                    ae:65:3e:05:0d:68:e2:ef:e7:12:73:e8:fc:3d:b9:
                    e2:12:2c:80:86:8a:ef:1a:ed:bd:79:ad:3a:22:c5:
                    85:6c:48:28:9b:63:cd:39:19:07:cb:9e:4c:05:5f:
                    87:8d:81:c0:30:19:85:45:22:b3:de:56:e1:c1:25:
                    9b:1e:2b:d2:6a:f7:2c:0c:e0:0a:50:71:76:67:a5:
                    8d:69:cf:00:8b:6d:8e:b3:62:c4:0a:a8:22:e2:f8:
                    ae:00:73:1c:ac:16:e8:f0:5b:42:e7:9e:bc:1a:c1:
                    01:9c:e1:2f:06:ae:4c:65:6b:77:99:08:a3:bc:b1:
                    2a:58:c0:6f:d2:41:5e:ff:4d:4b:5e:69:e4:9d:14:
                    97:5c:4e:ba:99:4a:97:6b:12:ae:d3:c1:fa:98:67:
                    af:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:12:CB:7A:B5:6E:20:58:D1:A4:F6:EA:8D:C8:4F:32:BD:B7:4D:F9
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7hLLerVuIFjRpPbqjchPMr23Tfk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:fe:ff:12:ea:ef:2c:cc:5c:63:59:e0:5e:82:16:a3:5c:f1:
         c9:7b:1e:10:62:17:a3:9b:84:54:35:f8:64:e5:23:44:04:fb:
         5c:1b:73:7e:ac:db:6b:26:9c:bb:3a:8d:65:0b:5d:17:1a:84:
         30:72:b2:4b:7d:05:37:34:5a:55:8c:b9:02:dd:b5:f9:cf:b5:
         09:1d:45:5f:00:a9:2c:e4:a8:73:52:fe:aa:24:fe:d9:08:3d:
         2b:34:6a:85:20:fc:96:e2:db:c5:af:6f:75:36:c2:bd:e8:28:
         77:55:f4:41:5e:cc:ac:eb:4b:99:f9:f9:8f:d2:23:91:b9:d6:
         3b:0c:97:e4:03:38:ea:85:61:e4:13:0c:e5:54:40:24:a5:7b:
         99:f5:62:96:33:97:68:7f:24:de:08:af:d7:12:7e:ad:ba:27:
         72:74:04:cf:a8:5d:6c:c9:a4:5d:fd:11:8a:58:f9:6e:f7:eb:
         95:69:99:23:db:eb:7e:91:71:29:7f:a2:0e:48:0f:d4:3b:32:
         f5:df:f4:9b:15:38:5e:e4:cf:00:b9:2f:c9:1a:99:96:2c:2e:
         41:19:55:4b:aa:05:b1:d5:8c:a0:a5:0c:e7:1b:56:7b:d2:ff:
         81:80:f2:75:ce:db:65:61:49:a7:63:ed:ee:58:82:88:1f:c6:
         25:ba:51:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----