Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7oO24IfgFEwkv2UQrRKm9FUDfl4.roa
File:                     7oO24IfgFEwkv2UQrRKm9FUDfl4.roa (raw, json)
Hash identifier:          DGasZ2xX+o6qoPsh6evv7m8yIQmsw5jqFfXO3l+8WF8=
Subject key identifier:   EE:83:B6:E0:87:E0:14:4C:24:BF:65:10:AD:12:A6:F4:55:03:7E:5E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1BCE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7oO24IfgFEwkv2UQrRKm9FUDfl4.roa
Signing time:             Wed 29 Sep 2021 02:47:01 +0000
ROA not before:           Wed 29 Sep 2021 02:47:01 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        118.233.148.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7118 (0x1bce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:01 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=EE83B6E087E0144C24BF6510AD12A6F455037E5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d1:76:5d:b0:71:88:18:6f:56:b3:4f:c7:e3:
                    4b:a9:13:25:df:f0:06:62:82:ab:a9:49:86:43:ac:
                    c7:1a:7d:94:22:2f:3c:21:91:30:e1:20:5a:02:16:
                    85:84:01:7c:1b:63:a2:aa:a9:d0:c7:01:d2:39:33:
                    61:c4:d0:28:7d:1d:a6:e1:ca:ce:1f:20:53:05:d3:
                    94:fe:46:e2:ea:dd:3b:44:dc:03:ca:60:38:7f:bd:
                    b7:88:e9:d5:13:09:9f:92:64:4d:3b:58:30:3b:12:
                    89:f6:11:b8:93:12:d2:b6:5d:91:ee:d0:b6:59:22:
                    bd:97:b9:29:db:b6:ad:dd:3e:f6:b3:97:df:3d:85:
                    31:c0:53:35:23:41:c1:11:76:c1:97:ef:2f:92:3b:
                    a6:4d:3c:37:a6:52:2e:e8:7d:54:47:d7:3c:45:1d:
                    be:06:07:58:14:e5:bf:3a:f3:c0:e0:1d:a4:f5:f9:
                    ea:f7:f3:c8:32:00:5e:f7:56:4f:9d:48:80:da:e7:
                    78:11:ac:df:9c:f9:13:2e:f2:c2:41:f3:77:bc:23:
                    21:cb:ba:5c:31:10:4a:de:7b:2c:e1:0c:ec:70:47:
                    14:98:ac:70:5b:15:28:d1:5c:5f:b3:c5:f4:fa:36:
                    42:e1:d5:38:22:61:7f:d6:78:52:7c:fd:01:d1:12:
                    f9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:83:B6:E0:87:E0:14:4C:24:BF:65:10:AD:12:A6:F4:55:03:7E:5E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7oO24IfgFEwkv2UQrRKm9FUDfl4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:81:19:2c:40:22:7d:d7:20:fd:de:d2:64:b1:5b:9c:dc:7a:
         6d:ca:81:1c:a8:83:bb:e8:f4:11:ad:13:54:97:e3:8a:d1:b7:
         0b:76:8c:10:90:32:0b:e0:7a:43:4a:15:46:e9:89:28:e1:a4:
         d9:6a:13:a5:6b:61:77:50:38:6f:6b:85:e3:66:e5:22:32:7b:
         0d:9c:4d:b6:d0:0d:89:58:5e:3e:57:bd:f6:99:c1:d7:3a:27:
         44:00:ad:2b:31:b5:c9:42:b0:a6:e7:38:19:61:c6:3e:bc:e5:
         59:32:1d:98:87:9e:3d:96:33:ad:0f:d4:67:d8:6e:cb:d2:93:
         15:24:b6:65:be:15:2f:6c:88:3d:2a:bb:d7:f3:ce:e2:9e:33:
         ef:36:da:d2:f1:c4:ee:68:05:76:ca:cc:1c:2f:bc:6c:b6:8c:
         38:a7:43:5f:c4:41:07:13:fe:8e:1e:0d:34:32:6e:69:22:4c:
         ba:6d:f0:32:24:8b:43:bb:cd:35:93:9a:bb:35:59:e3:b0:89:
         ba:91:dc:35:9b:47:81:80:b1:f5:1d:d4:ff:9b:05:be:9a:9b:
         2f:d1:f7:e2:d5:a0:d1:67:8f:73:dc:76:f5:03:7a:20:61:e7:
         29:2e:47:19:c0:3e:d1:04:8c:16:bd:ca:a4:b7:db:ce:6e:3a:
         18:d2:9a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----