Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JHbqTk3ZmK0urtDgE_6NspeLRmU.roa
File:                     JHbqTk3ZmK0urtDgE_6NspeLRmU.roa (raw, json)
Hash identifier:          LNdMulyFzyHExpuoCqWSC1+yjCXbGQtr/qCnV8jzapA=
Subject key identifier:   24:76:EA:4E:4D:D9:98:AD:2E:AE:D0:E0:13:FE:8D:B2:97:8B:46:65
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D17
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JHbqTk3ZmK0urtDgE_6NspeLRmU.roa
Signing time:             Wed 29 Sep 2021 02:48:36 +0000
ROA not before:           Wed 29 Sep 2021 02:48:36 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        103.224.192.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7447 (0x1d17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:36 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=2476EA4E4DD998AD2EAED0E013FE8DB2978B4665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:50:58:e8:67:a6:d2:91:c8:59:2c:22:07:8d:
                    03:65:84:b4:8a:a4:05:af:0c:57:4e:51:64:3f:df:
                    5b:d3:7b:97:eb:ac:52:e3:eb:88:6b:08:5d:a7:e1:
                    3d:08:16:03:9c:44:dd:1a:26:89:c1:db:e0:e8:98:
                    f2:dd:14:ef:74:17:0e:4a:2c:da:71:35:06:2c:73:
                    78:ed:b2:61:3f:32:41:c2:ec:d2:3b:8f:46:ef:cc:
                    62:c0:34:60:73:51:32:e1:2a:8f:37:b6:ff:02:dc:
                    10:09:43:77:0e:2a:73:33:3b:0a:17:dd:64:a1:7d:
                    90:5b:2c:4f:1f:61:ed:9b:a9:6d:4e:77:9f:fa:b2:
                    24:fa:f0:df:8b:26:f1:20:0f:df:5f:84:18:b4:09:
                    9d:79:a3:e8:d6:be:3c:08:19:ca:22:35:1a:af:4f:
                    a0:08:77:09:26:16:92:76:57:fa:76:ec:a1:9d:8a:
                    73:e0:bb:07:ae:64:2e:78:75:df:e6:93:2e:d9:d7:
                    ed:7e:d6:7c:56:ed:70:09:8b:97:f8:97:0c:4c:a5:
                    3a:4e:22:da:57:0a:45:4a:f9:3a:dc:ef:bc:e8:3a:
                    4e:a7:fd:04:2b:f8:e0:36:2c:f4:cf:cd:a3:b0:ed:
                    c4:30:15:b5:e2:55:a3:68:54:1f:3f:2a:34:22:71:
                    9e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:76:EA:4E:4D:D9:98:AD:2E:AE:D0:E0:13:FE:8D:B2:97:8B:46:65
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JHbqTk3ZmK0urtDgE_6NspeLRmU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:de:56:75:a2:c2:f1:02:1a:5a:fc:e9:53:ae:e4:36:0a:47:
         cc:0b:81:f3:62:64:d4:0f:77:6d:4d:56:8f:1e:8f:c5:f6:d8:
         37:7d:65:ab:bd:d4:ba:3b:a3:32:54:11:5f:61:2d:d0:3f:9f:
         d8:f4:35:41:55:4d:0b:bb:a6:37:b9:da:51:16:a3:2e:72:b7:
         33:f3:91:d6:34:df:00:90:d8:09:2b:1d:eb:2d:f0:9f:35:20:
         7c:18:6b:b5:cc:74:b4:da:c3:ba:5c:bb:9c:23:0a:02:d9:41:
         3f:e6:72:f1:03:a8:d2:58:45:54:2c:09:70:92:a0:f6:d3:f9:
         e4:68:22:a1:39:ef:80:54:bd:99:3f:c3:15:c6:4c:6e:c9:f8:
         8c:f4:41:6a:e9:d6:c6:60:ca:f6:a2:b0:1c:04:01:e0:3d:d9:
         86:24:e0:de:ec:b4:54:40:88:5f:dd:c2:e9:83:9a:b3:ad:77:
         95:9e:b4:41:f5:52:c7:8d:b7:30:69:7e:93:f5:fb:8a:e6:8e:
         0c:31:d7:92:b1:c0:ea:d3:a5:31:e7:d4:e1:6a:bd:86:31:1f:
         c3:ea:3e:ed:57:7c:f0:1d:8e:0d:95:2b:07:3f:73:6a:33:55:
         92:ad:ed:15:3d:ff:43:e8:b0:d1:e4:f7:8c:ba:52:53:c5:6f:
         18:24:1a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----