Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BrQN4cqikD4Jj9vDdFsdqrwPhek.roa
File:                     BrQN4cqikD4Jj9vDdFsdqrwPhek.roa (raw, json)
Hash identifier:          O9smFvYpE/SUDRVKyFGHMQjQwbvTxMEEit26/YvdWVw=
Subject key identifier:   06:B4:0D:E1:CA:A2:90:3E:09:8F:DB:C3:74:5B:1D:AA:BC:0F:85:E9
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C60
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BrQN4cqikD4Jj9vDdFsdqrwPhek.roa
Signing time:             Wed 29 Sep 2021 02:47:41 +0000
ROA not before:           Wed 29 Sep 2021 02:47:41 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.194.248.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7264 (0x1c60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:41 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=06B40DE1CAA2903E098FDBC3745B1DAABC0F85E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cd:36:01:cb:73:61:9f:85:a7:7b:7e:65:15:
                    77:aa:d9:df:1f:c3:08:03:2f:6b:53:81:e9:74:3b:
                    d3:c0:2d:90:e5:bb:1d:b4:fa:21:d7:f0:e3:d0:8a:
                    4b:97:66:13:1a:03:fb:77:a5:20:14:46:b4:04:e6:
                    da:fa:a2:9c:74:11:22:d0:19:7b:e5:4a:b2:69:07:
                    fe:ca:eb:a9:b9:15:67:44:40:32:67:16:73:7e:ed:
                    36:71:91:a4:97:79:ba:15:4e:81:a3:12:d6:4f:76:
                    b7:ad:0c:24:5f:55:15:53:6d:96:ed:62:11:53:00:
                    65:fa:9d:61:6c:79:92:bb:36:8a:58:15:d7:b5:52:
                    6d:25:13:dd:09:89:d3:0f:ea:73:2d:d6:ac:d4:6d:
                    b3:55:43:c8:c3:2d:d4:db:53:07:53:7b:4b:5c:c9:
                    7a:b9:f0:f7:1c:48:b3:ee:3f:5d:b9:b6:ca:59:e0:
                    ca:3b:e7:7b:47:be:60:10:f1:f6:fc:4e:a5:ae:55:
                    25:e6:74:6b:70:95:17:18:66:33:f8:1d:50:da:a6:
                    4d:9c:df:84:d2:14:b7:f9:89:33:02:96:5f:16:3e:
                    4d:74:1c:2a:be:6f:e5:45:ff:6b:e3:33:e3:f1:c7:
                    9f:37:95:20:5c:75:22:fb:91:e8:3c:bf:68:0a:c8:
                    72:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B4:0D:E1:CA:A2:90:3E:09:8F:DB:C3:74:5B:1D:AA:BC:0F:85:E9
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BrQN4cqikD4Jj9vDdFsdqrwPhek.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7e:1a:1e:c9:a7:86:cc:48:77:c0:a8:ca:e2:96:e9:a6:a2:2b:
         ba:3e:ce:a4:8d:30:4e:e4:73:93:34:04:f8:b0:5e:39:de:e6:
         5c:75:08:75:1f:33:3a:29:e3:17:68:46:a0:bf:08:aa:29:bb:
         e3:77:3e:11:9c:9f:36:53:07:96:24:12:3d:f5:16:37:00:34:
         5e:48:2e:e9:48:78:21:a5:30:98:01:e5:d2:63:71:67:3d:4f:
         8a:d5:52:ad:7c:21:df:c1:e7:5b:10:c4:2f:83:19:f4:d8:c6:
         9b:aa:9e:c2:61:ad:b0:30:9a:cb:03:cf:00:96:c2:2e:f1:79:
         ba:59:f5:93:b5:6b:88:80:18:30:08:c9:07:5e:11:08:88:ed:
         ef:87:df:2a:68:46:4d:20:41:8e:c6:56:34:62:d8:9c:30:10:
         18:65:33:43:9e:71:e6:62:0e:2d:e3:66:06:52:3d:31:fb:88:
         b4:df:b8:2a:dd:dc:4c:6c:3b:fb:6e:2a:13:5a:8c:f2:62:03:
         82:c2:3d:68:0f:6c:bf:bf:72:15:05:47:93:fe:4b:c2:30:22:
         98:16:b7:77:34:1b:ce:77:c4:a2:49:23:93:63:81:5b:15:82:
         e5:df:b3:06:5f:b3:05:11:39:81:f3:63:72:e5:fc:7f:fc:f9:
         22:38:24:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----