Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Cii5aKFEM0w_GDiUEp2VX2nVqrc.roa
File:                     Cii5aKFEM0w_GDiUEp2VX2nVqrc.roa (raw, json)
Hash identifier:          R2T1+T5kQIa1gLRdQByLCUe5KZQNgdvp0E1JToDHE1U=
Subject key identifier:   0A:28:B9:68:A1:44:33:4C:3F:18:38:94:12:9D:95:5F:69:D5:AA:B7
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B81
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Cii5aKFEM0w_GDiUEp2VX2nVqrc.roa
Signing time:             Wed 29 Sep 2021 02:46:41 +0000
ROA not before:           Wed 29 Sep 2021 02:46:41 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.194.108.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7041 (0x1b81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:41 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=0A28B968A144334C3F183894129D955F69D5AAB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:09:60:a7:ab:5b:8b:43:f8:7b:0b:c0:b2:cc:
                    59:08:79:51:3f:a9:02:32:a9:fe:cb:95:c1:a9:2c:
                    12:1c:49:33:cd:a4:cd:02:40:e1:2f:9e:e4:54:70:
                    e0:f8:1a:88:d5:38:e8:b1:0c:cc:66:89:7f:2b:5d:
                    75:98:51:07:69:01:19:90:5a:89:d6:7b:a5:f9:0a:
                    49:b9:f7:d7:ce:ee:14:eb:06:1a:00:9e:f3:91:34:
                    98:ae:ca:30:30:7c:4f:b4:7c:22:91:2e:9f:48:11:
                    4e:46:ed:d5:04:2b:37:1a:f9:88:3f:f8:28:a9:1f:
                    28:a1:4c:72:85:5e:30:69:1d:6f:e4:65:d9:0d:64:
                    60:bd:7c:18:70:bd:9f:00:f3:e2:97:96:d1:07:a8:
                    ac:1b:23:a9:87:56:22:5e:72:5c:7f:71:97:64:7f:
                    ff:e2:95:ff:59:97:03:e8:7e:d2:51:e2:e1:15:d3:
                    3b:ec:57:11:de:3f:c6:a7:63:f8:66:6e:26:0c:17:
                    46:81:20:d6:d9:92:2c:7c:52:9e:76:96:14:40:f7:
                    31:58:5a:27:12:dd:e0:82:bc:b8:cf:7e:9f:43:ec:
                    62:01:b4:be:58:86:f6:13:16:05:49:37:23:0d:33:
                    d1:6d:d7:75:c6:90:8c:e7:a1:37:5e:53:43:44:9e:
                    49:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:28:B9:68:A1:44:33:4C:3F:18:38:94:12:9D:95:5F:69:D5:AA:B7
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Cii5aKFEM0w_GDiUEp2VX2nVqrc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:cd:75:54:59:91:64:b6:0d:1b:3a:68:c6:4a:06:3d:e9:ce:
         58:6e:75:01:e5:7f:f2:9a:c0:8e:6b:39:1f:2f:a8:f0:1f:19:
         49:d6:65:a0:bd:15:0e:09:ef:31:26:f7:eb:22:10:92:1f:7a:
         52:7f:cb:65:51:24:6a:cc:a2:e8:0c:f3:01:df:e7:d8:8b:6a:
         08:25:8b:d0:75:f7:62:96:23:a4:da:88:87:c3:b9:7d:51:0d:
         65:8e:c9:e4:58:84:af:c2:0d:52:08:43:47:7a:20:06:81:99:
         18:12:94:34:b6:9f:c3:21:65:6f:f8:7b:8d:aa:91:e6:01:7e:
         f7:a7:16:69:04:0b:26:db:86:1f:28:08:be:17:3b:9f:ad:a2:
         40:1f:bd:a8:72:64:be:34:4c:fa:fd:24:fa:c5:cd:9d:32:72:
         c0:19:6f:f7:a1:09:eb:bd:17:1f:7d:68:7d:af:eb:a3:f3:87:
         a6:bc:99:1a:41:ab:a5:f9:24:61:0a:ac:ff:69:e3:26:87:21:
         2d:ad:09:a9:b1:5a:35:96:e2:8e:dd:1f:55:70:ca:30:bd:a2:
         c3:0c:fa:9a:ef:99:58:a6:f0:70:66:3a:cc:29:65:e8:03:e6:
         d7:15:0e:13:d9:1f:fa:34:41:39:ad:4f:5f:9a:25:70:95:3f:
         a8:0f:7a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----