Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Gob8B-5f0__di2b9Z9XqxmRztlk.roa
File:                     Gob8B-5f0__di2b9Z9XqxmRztlk.roa (raw, json)
Hash identifier:          k0AIuzRpUqz4jj0okfpl173mN/iNymz7SawdXXgARWI=
Subject key identifier:   1A:86:FC:07:EE:5F:D3:FF:DD:8B:66:FD:67:D5:EA:C6:64:73:B6:59
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B3F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Gob8B-5f0__di2b9Z9XqxmRztlk.roa
Signing time:             Wed 29 Sep 2021 02:46:20 +0000
ROA not before:           Wed 29 Sep 2021 02:46:20 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.194.200.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6975 (0x1b3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:20 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=1A86FC07EE5FD3FFDD8B66FD67D5EAC66473B659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:08:ba:ac:b1:6b:c4:6a:ca:e5:ff:8b:94:d4:
                    02:05:96:b3:0c:ef:ca:08:ca:07:77:78:e4:2b:a8:
                    6d:2e:57:b2:ec:d7:23:27:68:66:5d:13:fd:b3:e6:
                    f6:e3:77:56:f9:19:0c:13:b4:1a:43:2b:f9:0d:9b:
                    aa:d8:f0:0a:f6:d0:64:47:95:ea:33:76:19:25:89:
                    fe:b4:ae:f7:4f:1f:2a:6a:e8:f9:b5:30:c3:5b:05:
                    59:ac:c9:32:48:cf:8b:01:3a:4c:84:c5:8d:df:fa:
                    29:1b:7b:cf:3f:58:ef:a6:fb:08:f9:f0:cf:6c:d1:
                    b7:19:37:cc:eb:9f:51:1c:c8:3d:6f:47:55:8b:65:
                    f4:51:4f:52:72:9b:d6:61:f3:9a:03:1c:56:4d:8b:
                    a9:b3:87:90:39:98:9e:43:2d:e4:3f:ab:2d:82:2b:
                    bd:66:3b:a9:19:77:9f:e8:8c:4b:1b:81:cb:ce:96:
                    c8:ac:ab:01:a6:70:f9:1a:91:07:46:38:3a:1d:65:
                    42:45:ea:48:41:fe:6d:b9:8d:0d:57:bb:a3:f8:e3:
                    96:6c:54:9e:04:9f:d9:a5:67:88:60:23:a9:58:24:
                    4a:50:bd:1d:20:63:66:85:f2:17:1e:bd:04:a8:ae:
                    e7:ce:7f:83:da:32:c3:3c:51:f5:21:5e:70:71:9c:
                    de:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:86:FC:07:EE:5F:D3:FF:DD:8B:66:FD:67:D5:EA:C6:64:73:B6:59
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Gob8B-5f0__di2b9Z9XqxmRztlk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0f:12:a2:02:d5:fc:f1:d2:f9:71:c5:c2:74:46:f5:c7:60:66:
         b3:10:bd:71:17:40:16:e5:46:f2:7d:e1:dd:bb:ca:d7:da:2b:
         f7:fa:25:07:4a:0e:bc:d1:52:e3:ba:f4:8c:7f:2b:69:a7:c5:
         8f:63:2b:89:92:2b:f7:18:c3:68:a5:7c:ef:2e:ef:ad:16:ca:
         ad:d9:f1:e2:ec:c8:81:c9:4e:ac:74:ef:a2:ae:39:07:0b:ef:
         25:bd:69:c2:c2:dd:30:67:97:3f:38:07:b8:9a:10:8c:27:02:
         51:72:1e:71:6a:65:d5:33:eb:ef:08:fd:35:68:b1:81:d5:54:
         e3:6e:b2:45:ee:07:4d:f7:80:8a:4f:9f:92:bd:01:cd:47:c3:
         59:6d:8b:16:c6:f0:35:72:63:c7:b5:33:b0:dd:f7:3b:46:5c:
         a4:b5:c1:62:73:b3:e4:f6:20:13:67:92:b4:28:05:d9:c9:b0:
         23:30:6f:58:41:68:dc:65:f0:7b:4d:56:8d:15:e2:da:96:4d:
         36:98:a3:af:95:83:a0:d6:a6:7f:36:b0:6d:2b:7d:f2:ab:66:
         83:ae:5e:c2:fd:5e:c1:9e:d5:97:2f:eb:53:a4:f1:0c:cb:57:
         04:21:13:f9:32:96:68:ec:68:12:89:2f:23:40:a8:36:9c:d4:
         c0:c2:e1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----