Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JiSKekNOueoVlDA8ardlTIdoXUw.roa
File:                     JiSKekNOueoVlDA8ardlTIdoXUw.roa (raw, json)
Hash identifier:          MGiHYJCKLb0CB0n9DCbgn5VRF54y6ClXzl8PpEQXR9U=
Subject key identifier:   26:24:8A:7A:43:4E:B9:EA:15:94:30:3C:6A:B7:65:4C:87:68:5D:4C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B2A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JiSKekNOueoVlDA8ardlTIdoXUw.roa
Signing time:             Wed 29 Sep 2021 02:46:14 +0000
ROA not before:           Wed 29 Sep 2021 02:46:14 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.193.4.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6954 (0x1b2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:14 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=26248A7A434EB9EA1594303C6AB7654C87685D4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:13:22:41:d4:a8:9b:cd:46:80:7f:6c:9b:89:
                    2f:89:43:15:e7:4c:a2:74:f8:bb:45:ff:62:96:85:
                    46:84:c4:0e:3d:28:5c:87:20:33:c8:c8:91:a9:7c:
                    79:5b:31:13:d3:2f:51:b6:d6:3c:e9:2c:1f:f7:19:
                    08:1b:1e:4c:6e:e2:a3:6a:d8:87:5a:76:bf:b3:6d:
                    00:67:2c:a4:92:90:d8:ce:e9:2b:5f:8c:26:86:71:
                    2e:7f:88:c6:88:b4:22:fa:69:99:d9:7f:92:18:62:
                    5d:88:7b:5f:c9:53:bd:d5:93:13:3c:0f:56:9e:56:
                    e0:e3:04:14:92:72:f5:8c:19:23:74:ce:98:2e:7a:
                    57:76:d0:c7:19:03:d3:a1:08:eb:2f:ba:53:0b:e9:
                    fe:48:2a:7f:05:87:7b:23:59:40:98:5e:f2:65:80:
                    94:4d:5e:4a:19:f9:5f:f9:ff:e9:36:48:e5:dd:03:
                    97:94:76:20:39:1e:c2:58:07:af:cb:e1:7f:cf:d3:
                    60:d8:2b:dd:21:df:e6:ac:94:87:ca:34:8a:8e:4e:
                    5a:39:4c:5f:e4:0c:6e:cf:22:c9:e7:c7:d7:a5:10:
                    58:ba:3e:47:af:8a:e5:01:9c:e2:5c:a4:a7:89:8d:
                    c4:3c:89:04:cc:c3:b2:e8:e7:ae:aa:da:57:14:ec:
                    7f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:24:8A:7A:43:4E:B9:EA:15:94:30:3C:6A:B7:65:4C:87:68:5D:4C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JiSKekNOueoVlDA8ardlTIdoXUw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:2f:e2:37:33:1a:5c:9c:cb:90:46:21:fe:5c:dc:ac:47:86:
         f1:3f:0f:80:f1:f5:0f:eb:2b:5d:26:a5:f2:55:4b:9f:4b:d9:
         59:30:77:ca:86:d3:54:7d:b1:42:3c:c0:8b:4b:54:da:2e:d5:
         87:c3:29:e7:ed:e2:ee:b4:72:be:6b:80:e3:5d:ba:9c:65:04:
         12:f8:e4:50:8b:cf:59:b3:4f:f0:c8:17:a6:2c:95:b7:2c:4d:
         d1:cf:15:8e:96:f8:d7:db:01:7d:a6:b4:fb:52:02:6c:e3:a8:
         ae:6a:32:c1:aa:8b:b2:22:65:90:ab:05:d1:e5:d3:c3:8c:0a:
         6f:46:21:73:a3:26:9a:b2:c5:42:cf:1f:81:1c:df:b7:34:7e:
         c6:46:95:65:fd:d7:a8:f6:b4:f7:9d:8d:86:4c:0d:11:22:84:
         9a:02:c5:49:76:c3:73:7d:5c:5f:77:0f:fd:6d:11:2b:3f:d9:
         94:ec:a1:d6:a4:72:19:d1:57:26:b3:41:a1:35:40:d6:0d:6c:
         3a:88:1f:39:5d:b0:17:63:55:a8:71:89:3c:c0:60:fc:a4:06:
         41:12:74:11:5b:25:40:31:7c:22:35:b2:7b:f8:25:c9:55:58:
         a9:7c:bc:4f:9e:4a:b4:4b:e4:2e:d8:2e:09:50:37:b2:a8:cd:
         12:a4:c6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----