Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9Crt6gu4xRyPDt8E3opohBpWB9w.roa
File:                     9Crt6gu4xRyPDt8E3opohBpWB9w.roa (raw, json)
Hash identifier:          gFElR+GBTiolLa7n1ViBhZWflaxG7kYmE5bYrcIwemM=
Subject key identifier:   F4:2A:ED:EA:0B:B8:C5:1C:8F:0E:DF:04:DE:8A:68:84:1A:56:07:DC
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D46
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9Crt6gu4xRyPDt8E3opohBpWB9w.roa
Signing time:             Wed 29 Sep 2021 02:48:49 +0000
ROA not before:           Wed 29 Sep 2021 02:48:49 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        123.195.128.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7494 (0x1d46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:49 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=F42AEDEA0BB8C51C8F0EDF04DE8A68841A5607DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ed:7b:6e:e0:91:fc:0e:1e:63:c6:09:9c:84:
                    a6:24:0f:58:4c:6b:d2:1b:f0:4f:75:27:60:c9:66:
                    02:52:ee:58:e3:ba:a3:13:c7:45:92:2a:f9:6f:50:
                    44:88:17:44:fe:e7:e8:b9:6f:e9:49:db:a2:e7:fc:
                    f1:a7:77:b4:3c:c6:d7:12:0c:fd:2f:ea:8d:33:25:
                    51:bb:84:5b:b3:98:a6:27:16:8b:7f:17:d8:71:83:
                    6f:5f:0b:52:6c:13:36:07:97:ee:c9:8c:d3:98:d6:
                    31:5f:c4:42:96:84:c3:03:a7:f0:cb:23:b1:b6:60:
                    82:fa:16:89:06:43:6b:20:57:08:bb:72:7b:83:b7:
                    e2:37:0d:e5:32:52:01:a3:1b:93:2a:9d:db:e8:6e:
                    90:bb:00:b7:1c:a7:bf:1e:29:dc:84:f5:20:28:5c:
                    19:73:3a:91:0b:47:81:67:fb:82:e1:87:b6:74:5e:
                    8b:55:47:12:5f:a4:40:53:5b:42:80:fa:17:b5:a9:
                    ee:56:86:62:ec:c6:6e:a4:3b:ec:2a:05:5d:1c:f8:
                    46:e0:15:f7:e2:d2:ad:c8:3f:c9:37:73:6a:94:2b:
                    a6:41:94:47:d4:31:5e:2c:91:90:79:7a:25:c2:bc:
                    f6:e2:a8:6d:d5:65:e5:79:64:74:b9:3f:2d:61:25:
                    9a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2A:ED:EA:0B:B8:C5:1C:8F:0E:DF:04:DE:8A:68:84:1A:56:07:DC
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9Crt6gu4xRyPDt8E3opohBpWB9w.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         76:b7:91:d0:82:d4:a9:9d:61:9a:3d:9e:ff:15:38:79:7a:f9:
         f0:e2:42:25:87:9d:10:cb:b9:8b:28:e1:a9:b9:1e:6c:60:8a:
         e2:ec:6c:fc:14:6e:c1:4b:cb:df:e9:4c:b3:d3:9e:6e:f6:55:
         b0:cd:39:7f:ca:5e:09:7d:7d:b6:7d:61:7f:3b:0f:ed:2a:9b:
         13:b4:08:16:de:8f:5b:2e:b4:f9:e5:47:eb:92:bc:ac:3d:17:
         9a:77:29:c6:1c:08:42:9e:20:b3:d9:e0:21:1e:b1:02:f6:d9:
         0c:0a:56:16:58:79:41:65:8e:c1:65:10:52:bd:0d:c0:9b:c1:
         75:91:27:78:27:31:30:1f:8b:f1:2d:3e:4a:a7:98:fd:56:61:
         73:27:fa:62:f9:27:cb:ba:6e:30:fe:88:f3:2e:57:0f:b5:bd:
         8d:5a:63:18:50:01:2c:6c:c7:92:c0:a4:14:b5:db:6b:cf:e7:
         54:f3:08:e2:80:57:f4:61:a3:cb:00:41:85:a9:da:f2:45:24:
         fe:9c:2a:c7:b8:0d:b6:7d:e9:39:8b:b1:e8:fd:a4:59:6a:d9:
         a0:3a:33:c5:bb:b2:54:b2:70:99:67:28:9e:37:9a:0f:b8:0c:
         4e:19:fd:77:75:e5:a3:7f:1d:b7:86:83:9a:6f:6b:4d:c5:d0:
         fe:2c:c0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----