Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9-TI_0VI6FnmLb4oagx4OMmgitw.roa
File:                     9-TI_0VI6FnmLb4oagx4OMmgitw.roa (raw, json)
Hash identifier:          OYuty5fQKUPe+sf1JUlR4MClmtx3zYhhFrVAf2/BxT8=
Subject key identifier:   F7:E4:C8:FF:45:48:E8:59:E6:2D:BE:28:6A:0C:78:38:C9:A0:8A:DC
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1AD8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9-TI_0VI6FnmLb4oagx4OMmgitw.roa
Signing time:             Wed 29 Sep 2021 02:45:49 +0000
ROA not before:           Wed 29 Sep 2021 02:45:49 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.194.136.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6872 (0x1ad8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:45:49 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=F7E4C8FF4548E859E62DBE286A0C7838C9A08ADC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:97:a8:7f:7e:39:ba:63:e0:e1:f1:1c:4f:20:
                    0a:12:eb:b1:ee:c8:e1:c3:cc:fe:df:70:5b:27:13:
                    fc:21:39:84:dc:1e:44:1f:18:68:c2:09:8d:ca:6a:
                    16:e9:ef:be:82:6e:f2:9f:93:c3:29:0b:30:20:9f:
                    66:c1:0b:0e:4a:50:cd:d9:17:53:c8:48:f7:ee:58:
                    db:ab:2c:e8:63:78:48:c0:93:73:4a:f9:66:68:20:
                    1a:6e:e4:f0:fa:4c:e3:a1:cf:8a:2d:7c:d7:39:79:
                    bf:71:2b:c5:9a:c1:8c:0d:e6:27:b3:72:9b:3f:55:
                    0a:11:4f:0d:76:30:50:04:c8:72:50:03:39:77:cd:
                    ee:00:8c:7f:63:04:e6:78:87:08:10:2d:6a:79:1f:
                    dc:c1:f6:93:2a:54:48:00:5c:70:ae:e4:ed:ed:2d:
                    02:fa:49:23:15:a9:3a:dd:12:4f:1b:b0:5a:17:c1:
                    4e:9e:3d:a2:e4:99:8e:56:57:21:27:4b:b5:f4:c0:
                    71:35:fe:43:f7:c8:e2:f8:1a:3a:df:a8:50:61:75:
                    93:ed:c1:1f:b7:8c:f3:03:d0:21:fb:02:b9:07:a3:
                    ee:6c:b7:7b:7c:17:af:1e:d3:6b:20:9d:4e:6c:a3:
                    0c:be:9c:ec:64:35:d0:1b:02:70:b2:93:67:7a:25:
                    dd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E4:C8:FF:45:48:E8:59:E6:2D:BE:28:6A:0C:78:38:C9:A0:8A:DC
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9-TI_0VI6FnmLb4oagx4OMmgitw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         75:51:24:db:b6:90:5b:51:21:9e:9a:98:2c:55:13:37:2e:b8:
         bf:72:78:c9:94:83:5a:2d:3f:9c:60:25:39:28:5e:0c:9b:44:
         45:db:ca:c1:1c:da:03:2c:95:05:f5:4c:16:ec:89:b0:f1:9a:
         d1:aa:79:24:91:1f:f1:9a:d8:0e:55:92:b7:de:e3:ed:82:b3:
         19:6e:9b:9e:03:89:f7:77:52:2b:e6:75:bb:be:8e:4f:aa:97:
         35:a9:be:05:90:4e:2e:fe:fd:cd:87:88:7f:aa:ae:11:d7:95:
         01:d0:f4:af:4e:e1:9c:a5:c5:ed:b4:37:36:c1:4a:b5:9d:2a:
         b3:8d:54:3b:be:f8:f1:60:ed:86:fd:e1:3c:e2:7e:19:db:41:
         20:ce:a1:a6:f3:ec:67:ad:39:3b:5c:47:0c:e6:98:b7:61:ca:
         ae:ec:9e:e9:7b:71:0c:0b:4b:84:94:8b:c7:c2:f8:97:d1:3b:
         e7:57:73:11:55:90:b6:81:67:67:69:0f:0b:dd:ce:ef:65:89:
         4b:6f:6c:9a:4d:7d:8b:17:09:ec:15:ad:02:04:a4:e6:82:61:
         05:06:a6:17:dd:f9:f6:e8:fb:2c:3a:d6:81:19:d6:3b:c4:4c:
         c1:9c:6d:84:19:5c:10:c6:9f:89:78:49:3c:06:81:88:04:36:
         29:e3:98:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----