Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C4DJJLW8RXuSdCDu8Bd1hpEMdms.roa
File:                     C4DJJLW8RXuSdCDu8Bd1hpEMdms.roa (raw, json)
Hash identifier:          SV38QHlggzqvGGivJuajwJlarjQfU5E0b0/6W+PjDRI=
Subject key identifier:   0B:80:C9:24:B5:BC:45:7B:92:74:20:EE:F0:17:75:86:91:0C:76:6B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B2C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C4DJJLW8RXuSdCDu8Bd1hpEMdms.roa
Signing time:             Wed 29 Sep 2021 02:46:15 +0000
ROA not before:           Wed 29 Sep 2021 02:46:15 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.193.44.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6956 (0x1b2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:15 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=0B80C924B5BC457B927420EEF0177586910C766B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:af:a0:30:62:6e:45:76:b3:33:40:eb:28:25:
                    1f:63:9b:55:4e:3d:71:91:b5:97:b3:0b:a9:9a:65:
                    c6:78:fe:53:77:ef:43:10:c1:1e:43:ba:89:63:e3:
                    fc:53:1a:ea:fb:69:96:61:b5:e1:b0:ad:2b:31:53:
                    5f:f2:a5:55:a4:01:ce:ec:0c:5e:b1:e0:48:00:c6:
                    a3:6b:8b:07:32:87:56:c9:9e:6e:6f:68:2e:2f:80:
                    0e:4d:ca:43:b0:34:2d:4b:c5:de:47:fb:55:b3:e1:
                    06:4a:ca:70:c0:bc:96:0f:25:9f:f2:28:32:06:91:
                    5b:f3:8a:b6:99:e5:48:34:ab:7b:6a:4d:bd:0a:58:
                    10:db:5d:2d:7d:b2:4e:1b:eb:e2:7b:b0:97:76:cd:
                    5b:f3:0b:48:6f:c1:6f:b0:58:1b:a9:83:58:9f:af:
                    48:f4:83:2a:63:d9:56:c1:77:5a:0c:44:c1:ff:f5:
                    85:9f:dc:76:70:c4:d0:76:ad:a4:d4:16:87:fd:bf:
                    e3:79:6f:1f:ec:59:8b:4d:bf:44:e2:c6:1a:63:7d:
                    6e:22:5a:f2:ad:ea:0c:a1:86:fb:b1:4c:ad:65:10:
                    62:b3:ce:e6:40:c4:24:c2:94:da:1a:23:a0:3d:af:
                    8a:e4:44:c0:a3:cd:2e:4e:6f:20:8c:51:c2:94:96:
                    53:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:80:C9:24:B5:BC:45:7B:92:74:20:EE:F0:17:75:86:91:0C:76:6B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C4DJJLW8RXuSdCDu8Bd1hpEMdms.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:28:85:e6:d9:94:13:0c:5c:db:d0:ba:e0:4b:36:f3:bf:3a:
         10:9f:5a:3b:90:2c:d1:78:99:f2:00:18:38:5b:7d:3f:4f:3d:
         b2:50:83:54:52:88:b1:37:1f:02:54:53:22:47:43:2d:c7:fd:
         f8:ff:b7:21:fe:31:12:67:0d:6f:b6:78:98:f8:9c:8e:e5:33:
         68:45:52:a8:58:a9:cd:a7:49:74:b6:12:36:f7:80:15:15:06:
         f7:b6:66:df:81:7a:e8:57:87:39:d2:3c:33:c7:6c:fc:c9:aa:
         f9:0c:06:f5:d2:e9:8e:af:e4:ef:21:a8:14:e6:cb:89:bd:30:
         41:22:aa:49:d0:08:28:f8:21:1b:6a:e3:57:da:f2:2e:d9:79:
         7c:3d:36:07:3e:ff:11:80:be:d6:6e:9e:67:43:a3:24:72:0e:
         1e:c7:7a:1c:17:a1:08:22:a3:32:b7:19:fe:13:83:f6:17:8b:
         1b:f4:c0:a5:85:8a:38:da:82:02:c9:47:4c:50:b1:57:23:7e:
         89:a4:4d:9b:24:ae:10:6d:62:9c:ba:7f:1b:fe:96:47:1e:9d:
         86:b1:00:e5:b4:e3:64:61:63:e1:c1:99:ed:53:e8:68:6c:d7:
         73:c7:76:cd:4f:f6:5f:d3:01:17:4f:08:13:77:7f:d7:f9:5b:
         16:b0:f6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----