Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AT1KYDglljZv7-OzJfqygTWQCLY.roa
File:                     AT1KYDglljZv7-OzJfqygTWQCLY.roa (raw, json)
Hash identifier:          dnqSJYOKQSldpOh1dX7eS2LZnalILL390HpBv3iXtfA=
Subject key identifier:   01:3D:4A:60:38:25:96:36:6F:EF:E3:B3:25:FA:B2:81:35:90:08:B6
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1BB4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AT1KYDglljZv7-OzJfqygTWQCLY.roa
Signing time:             Wed 29 Sep 2021 02:46:54 +0000
ROA not before:           Wed 29 Sep 2021 02:46:54 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.195.8.128/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7092 (0x1bb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:54 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=013D4A60382596366FEFE3B325FAB281359008B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:08:27:da:45:f7:55:24:a1:2e:0f:29:9c:8d:
                    49:c5:3d:2e:69:db:39:ee:16:09:9b:fb:88:96:2f:
                    ee:83:a4:44:8e:b1:05:e3:b7:6f:9c:8a:86:c3:c9:
                    7c:06:b0:4b:16:77:b8:6c:31:09:9b:01:ef:e4:b3:
                    a7:5e:bb:fe:e2:63:ba:60:8a:ab:39:1d:48:1a:71:
                    e2:a5:07:b1:6d:a0:f1:13:df:43:ca:59:91:fd:13:
                    f5:01:0f:24:d2:5b:9c:7d:5b:c7:a9:ab:58:62:8d:
                    62:a4:62:7c:bb:12:da:38:9c:ee:5c:7d:cb:38:ba:
                    7f:23:d5:bd:3a:3e:db:1b:d1:95:ff:ea:59:c3:64:
                    e7:b1:51:0c:5d:b9:c0:f3:00:3a:0d:75:62:d7:ee:
                    25:a3:22:77:9e:67:32:51:40:9b:52:82:af:65:e0:
                    25:ce:a1:ec:59:c9:76:70:d1:93:ec:b3:ff:22:34:
                    6f:85:3b:d6:29:a5:c1:d2:f2:19:60:4e:77:33:06:
                    26:da:50:07:e9:da:a6:4a:49:fd:8c:0d:76:a8:62:
                    de:b5:cd:6a:c4:36:a1:28:79:77:b5:90:44:13:3b:
                    38:14:28:01:19:d2:c4:43:cb:0d:22:3d:67:d7:73:
                    f2:6c:e7:67:b5:87:94:12:1a:df:c9:19:f0:18:dc:
                    ca:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3D:4A:60:38:25:96:36:6F:EF:E3:B3:25:FA:B2:81:35:90:08:B6
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AT1KYDglljZv7-OzJfqygTWQCLY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.8.128/26

    Signature Algorithm: sha256WithRSAEncryption
         97:54:c1:fd:cf:cc:82:d3:c5:95:de:d5:75:99:b7:c1:91:8b:
         86:66:13:6c:c5:1b:bc:8f:c6:3b:b6:99:c2:85:ca:1e:ae:34:
         fe:9b:08:8f:11:3f:1c:5a:4c:06:1a:1d:0a:68:74:be:a1:4c:
         f2:fc:79:7f:e8:83:ec:9a:32:9c:63:0a:0e:7a:04:b7:25:d1:
         39:69:e9:97:af:12:0e:b1:4c:ff:69:44:dc:b1:a3:02:07:4b:
         b6:a8:bb:85:4d:cb:b8:a5:66:ce:97:30:6f:7d:97:75:36:e7:
         9d:2d:9d:ab:08:d2:e9:52:1f:4e:7a:1c:31:b5:6a:18:a4:82:
         7e:a4:ad:c5:41:61:44:60:28:c7:3f:ab:d2:03:d8:60:48:54:
         8d:f6:6b:50:11:35:c6:39:88:6e:c6:ec:a2:53:63:0a:78:26:
         fa:33:ee:3d:fb:bd:42:16:72:f7:0b:d1:83:ad:fa:e7:29:68:
         b7:89:25:19:d6:21:38:ba:e8:f7:7d:72:97:64:5b:71:2a:f1:
         65:4b:bf:ef:ad:6d:09:82:0d:a9:18:03:79:82:1a:ac:34:62:
         11:fe:76:28:a0:69:1b:b5:34:5b:7d:cf:37:7b:74:1b:10:37:
         f1:5c:d5:50:a0:b1:8f:fc:35:53:79:ab:0d:1b:ee:5a:e7:03:
         21:bf:7b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----