Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IEOCuvWjqughz9nEhWOXTi7aX6M.roa
File:                     IEOCuvWjqughz9nEhWOXTi7aX6M.roa (raw, json)
Hash identifier:          Iguxyj0C2bvigbcEZL99cwYE5hoRbgvE4BYDnZoT/Jk=
Subject key identifier:   20:43:82:BA:F5:A3:AA:E8:21:CF:D9:C4:85:63:97:4E:2E:DA:5F:A3
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B01
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IEOCuvWjqughz9nEhWOXTi7aX6M.roa
Signing time:             Wed 29 Sep 2021 02:46:00 +0000
ROA not before:           Wed 29 Sep 2021 02:46:00 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.192.208.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6913 (0x1b01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:00 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=204382BAF5A3AAE821CFD9C48563974E2EDA5FA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:00:9d:54:66:40:25:dc:da:35:bf:a0:73:21:
                    f6:8c:13:bb:4f:cd:72:0a:92:f5:e8:ce:36:15:a4:
                    4f:4b:9f:69:b4:e7:00:a9:60:a0:72:da:d0:19:30:
                    09:4b:e0:3c:ac:cb:83:64:e2:67:61:24:36:0b:b3:
                    8f:7b:02:c0:66:4b:e1:c7:a0:80:c4:bd:e1:14:77:
                    c5:c7:d6:99:99:da:3e:fa:5e:d7:5b:c3:36:37:2f:
                    e8:ae:a6:fb:54:43:3c:26:81:db:d7:ca:a4:ec:be:
                    f9:14:08:d4:2a:e4:fb:29:0b:9c:e3:5d:60:94:c6:
                    a5:c2:ff:44:c6:f6:a1:10:7d:b5:f1:6f:20:e8:96:
                    d3:dd:6d:24:2c:0e:fd:df:ec:d0:54:cd:57:b7:63:
                    ac:8a:50:d8:f5:b9:c9:e9:75:f9:92:e1:8f:ec:05:
                    f4:32:15:61:5f:ac:97:92:09:82:bb:de:a0:f0:dd:
                    26:90:68:cd:a0:d5:b8:c0:24:be:25:4d:dc:be:95:
                    7e:21:09:59:9b:cb:3c:fb:91:2b:30:2d:fe:1a:a7:
                    52:fc:48:7f:f9:09:56:ea:f6:3e:c8:12:28:c8:70:
                    a0:66:82:34:52:09:96:d5:b3:93:71:48:c1:4a:89:
                    dc:de:40:fc:f2:c7:c6:b6:63:1f:17:b3:30:54:99:
                    2f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:43:82:BA:F5:A3:AA:E8:21:CF:D9:C4:85:63:97:4E:2E:DA:5F:A3
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IEOCuvWjqughz9nEhWOXTi7aX6M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         69:33:0b:82:00:20:fd:e6:fb:f6:18:90:c6:c6:71:8a:ca:0c:
         79:d8:83:4a:64:f9:52:81:af:58:43:14:06:7f:dc:a4:f9:97:
         14:c1:c6:cb:b0:dc:78:07:76:23:2d:64:4c:73:e8:dc:7b:a5:
         89:eb:cb:91:79:73:a2:91:21:3e:03:3e:e4:34:e6:09:a5:96:
         cf:80:cf:25:4c:ef:a9:9b:75:3a:99:4a:fb:6d:31:56:c6:fe:
         1b:17:37:bf:58:de:10:b1:91:a5:9a:54:1f:a0:ed:3c:70:3d:
         3e:07:f9:e3:b2:f2:33:65:47:a5:22:2c:4e:c5:5d:a5:9c:a5:
         7c:65:52:06:bd:e2:3f:99:b3:1c:9c:6d:f9:f0:9d:3f:a9:b4:
         17:d3:1d:b8:71:ea:5c:97:2b:b4:99:91:33:19:5c:f9:19:13:
         82:10:8b:e6:c3:8c:cb:4c:c3:c5:f0:4f:9a:a9:74:b3:19:56:
         24:fe:8f:9b:42:05:a6:f6:d0:24:c5:5a:dc:37:68:ad:6f:b8:
         70:83:57:2b:d8:1c:3a:6f:3a:14:9f:9e:6d:be:27:66:5d:f5:
         97:74:16:f2:5a:e5:13:f6:00:6d:0f:b5:99:73:5f:09:34:52:
         c1:e2:15:9d:f3:8a:4b:f2:d3:0e:88:e7:75:34:f8:7a:c2:18:
         f9:44:02:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----