Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CGsvOCGh1mWypwmaFQQCth6F86c.roa
File:                     CGsvOCGh1mWypwmaFQQCth6F86c.roa (raw, json)
Hash identifier:          q2fFNieEgX8OdkhDSCNmsHDk5Q4+AIzsKA8fd3w0LjY=
Subject key identifier:   08:6B:2F:38:21:A1:D6:65:B2:A7:09:9A:15:04:02:B6:1E:85:F3:A7
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C20
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CGsvOCGh1mWypwmaFQQCth6F86c.roa
Signing time:             Wed 29 Sep 2021 02:47:23 +0000
ROA not before:           Wed 29 Sep 2021 02:47:23 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        118.232.52.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7200 (0x1c20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:23 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=086B2F3821A1D665B2A7099A150402B61E85F3A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ab:b4:e1:75:71:74:00:f9:f6:8f:2a:26:f0:
                    d1:a1:37:c4:9d:7e:43:27:3b:f3:ac:27:2f:5b:0c:
                    0a:87:ca:70:8a:c4:2a:64:64:49:83:9f:6d:c2:4e:
                    ea:5d:a0:71:ff:a1:b7:61:e1:83:80:50:31:e8:39:
                    77:76:6e:ff:b8:40:a9:30:d8:a6:f9:85:2a:8f:4a:
                    b9:b3:40:e5:73:fa:aa:31:4a:6b:2e:e1:4d:40:e4:
                    20:7e:0b:05:7d:de:2f:0d:66:9c:9f:23:17:21:01:
                    68:5d:0e:3e:5c:83:1c:8a:fa:5a:8d:01:c7:1e:70:
                    9d:47:44:ae:00:33:68:dd:f9:85:04:1f:91:31:e3:
                    a7:e3:79:9f:c7:b8:0a:e5:fa:01:9b:a5:13:9e:58:
                    72:3c:25:6c:24:ea:9a:35:d3:17:ee:a4:70:a6:e1:
                    f0:37:d7:77:56:b9:61:a1:c8:d2:77:9e:37:b1:ae:
                    c6:e1:da:9a:27:ad:5f:f7:14:bf:60:ac:7b:d6:8b:
                    18:e1:8d:2e:22:dd:0b:35:98:21:b2:21:7f:82:8f:
                    a8:1f:70:5d:f3:79:0f:fd:13:6a:5b:95:09:aa:b4:
                    04:f4:06:75:24:c9:16:3e:f3:41:3d:f3:59:9b:c1:
                    13:dc:f4:e4:b1:ca:d8:1d:7f:6d:3e:bc:11:35:1a:
                    6e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:6B:2F:38:21:A1:D6:65:B2:A7:09:9A:15:04:02:B6:1E:85:F3:A7
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CGsvOCGh1mWypwmaFQQCth6F86c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:82:f8:3f:6a:30:de:61:72:79:c1:65:e7:9f:f6:21:48:77:
         c7:92:7f:07:44:a8:60:75:10:c1:27:92:94:30:93:d3:26:a4:
         92:0b:8c:41:3d:66:da:21:45:9e:e2:66:ed:00:62:c3:5e:63:
         09:23:05:88:d8:70:82:fc:a9:82:09:05:21:e3:ca:59:ed:95:
         93:aa:b3:3f:8a:d5:0c:3f:31:f4:4b:08:a0:aa:0d:04:ac:ca:
         1c:ae:a9:56:eb:a0:87:5c:38:71:b1:2f:8b:c1:15:67:1d:d4:
         41:92:52:ab:9e:33:ff:66:34:3c:23:10:87:67:73:36:88:a0:
         f9:f0:ef:d4:ae:dd:fe:a2:0f:26:6e:e7:69:71:88:45:fc:62:
         a3:69:3c:23:7a:f8:fb:65:97:0f:31:1d:06:0f:12:79:bd:70:
         ad:5f:68:f9:6e:67:9b:73:79:63:2b:7b:a4:4f:b3:39:44:10:
         22:f0:e7:2d:16:00:ac:18:de:62:fa:37:58:71:1a:1d:18:bc:
         ad:88:b6:7b:65:f4:36:36:33:5f:f4:6f:89:36:cb:d1:1f:f5:
         74:0f:bc:8f:b8:e6:4f:55:04:cb:e3:59:7e:45:7b:ca:86:35:
         64:e1:12:09:ca:69:e2:e9:d6:e4:01:73:a8:a2:87:27:fd:0e:
         1a:62:79:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----