Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CdBUETAL9HrfDNr_yumE8hLPJ-w.roa
File:                     CdBUETAL9HrfDNr_yumE8hLPJ-w.roa (raw, json)
Hash identifier:          4RE4bivtCVd7VEfcwy5VoxF+SPKV8IiQ3azqkzlpDb8=
Subject key identifier:   09:D0:54:11:30:0B:F4:7A:DF:0C:DA:FF:CA:E9:84:F2:12:CF:27:EC
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C59
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CdBUETAL9HrfDNr_yumE8hLPJ-w.roa
Signing time:             Wed 29 Sep 2021 02:47:38 +0000
ROA not before:           Wed 29 Sep 2021 02:47:38 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        118.233.24.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7257 (0x1c59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:38 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=09D05411300BF47ADF0CDAFFCAE984F212CF27EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1a:32:b8:c2:fe:26:57:db:74:8d:a9:9e:64:
                    3c:fb:52:4f:46:7d:e0:bb:53:61:0d:56:ac:41:bb:
                    36:0f:f4:50:b6:44:a1:ed:c1:e4:31:84:b1:97:e9:
                    13:e7:cc:08:dc:e2:07:38:75:10:dd:ea:7c:8b:a9:
                    b4:60:e1:84:e4:20:62:51:0e:87:2b:61:57:0b:d5:
                    98:a5:db:0f:7a:b3:e6:0b:fe:37:e2:45:8a:17:b3:
                    5c:e8:b8:34:1b:56:22:35:45:32:0c:78:88:9f:31:
                    0c:05:98:08:8e:95:75:5e:03:21:e1:a1:a9:a5:00:
                    02:15:0c:d4:c5:f2:5f:92:83:7c:5a:67:aa:40:9d:
                    c3:96:e6:31:e6:85:a2:90:20:14:17:a5:d7:54:f8:
                    64:7e:17:b0:0f:ed:6b:c7:4f:68:2f:85:54:ab:33:
                    d9:89:8e:33:1f:d0:04:c5:41:7d:58:59:83:b2:a9:
                    8f:1e:c9:29:e7:d8:55:e0:3d:a3:d5:95:b4:96:4b:
                    c8:a4:df:40:68:3a:5f:a7:cb:2e:66:5f:b0:48:00:
                    a8:0f:62:f2:da:c0:60:2f:45:1e:a0:07:89:51:85:
                    53:5d:11:c8:f4:54:f0:12:66:6b:45:35:8f:02:a8:
                    3c:34:35:78:31:7e:2d:c0:46:01:41:16:03:b8:f6:
                    75:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D0:54:11:30:0B:F4:7A:DF:0C:DA:FF:CA:E9:84:F2:12:CF:27:EC
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CdBUETAL9HrfDNr_yumE8hLPJ-w.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:12:c7:86:55:ee:74:38:16:4c:d3:c9:9b:f6:61:34:84:6a:
         f2:f1:84:21:6c:85:a4:b1:e8:83:92:c7:d7:58:53:36:c2:24:
         e8:63:f4:bd:9f:66:ab:d4:fe:03:7b:8c:f1:c5:0c:32:2a:eb:
         b5:53:30:56:2e:0c:19:ba:e7:ee:7f:36:d8:a4:bc:2f:26:62:
         1b:e4:84:b2:96:d6:34:f4:52:a8:d1:61:83:13:ee:ab:10:77:
         e1:16:dc:d1:97:a1:96:51:a4:e1:24:a7:3a:49:64:70:bc:fb:
         a8:15:0e:09:65:54:c4:fb:0b:3b:d9:03:ed:1f:e0:f2:77:d4:
         70:df:82:d1:f6:b4:ef:b5:48:92:bc:43:69:32:cd:81:1d:16:
         1b:a5:60:56:5d:ff:6c:53:b8:5d:ec:23:4e:45:7d:49:c2:f4:
         38:fc:44:2f:7b:b6:9b:30:11:bd:b5:dc:7b:c5:ab:ec:f2:7c:
         c6:28:e5:8a:d4:09:ec:8f:b9:29:c0:53:cb:3b:0c:1f:0a:0c:
         64:9f:2b:02:36:19:e1:3f:83:dc:76:0f:b4:e6:ed:b0:a9:0b:
         5d:65:e4:41:88:04:a5:ee:d2:aa:0d:80:d0:0d:90:ad:e6:45:
         69:42:c5:0b:94:28:0f:51:c0:21:ac:cc:4a:50:3a:66:2c:87:
         09:09:0c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----