Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K9ib_mkvXU-pSaf3rV3NdJdzszU.roa
File:                     K9ib_mkvXU-pSaf3rV3NdJdzszU.roa (raw, json)
Hash identifier:          p3skk/rAQg68vVNSKKSRsZSH/cbezN8QdX9UGCND2Jc=
Subject key identifier:   2B:D8:9B:FE:69:2F:5D:4F:A9:49:A7:F7:AD:5D:CD:74:97:73:B3:35
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       18A5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K9ib_mkvXU-pSaf3rV3NdJdzszU.roa
Signing time:             Sun 07 Feb 2021 12:50:41 +0000
ROA not before:           Sun 07 Feb 2021 12:50:41 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        118.232.64.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6309 (0x18a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:50:41 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=2BD89BFE692F5D4FA949A7F7AD5DCD749773B335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:75:3d:25:00:fd:00:9e:79:7b:04:8e:6c:85:
                    43:78:a9:14:a6:05:a3:cc:e3:4e:73:17:08:b9:0c:
                    89:5c:5f:f5:01:e8:06:be:07:1c:11:d3:cf:a1:14:
                    02:f9:94:3e:1f:ae:b4:bd:8f:bb:82:22:9f:7a:14:
                    a9:a2:1e:c9:a7:d3:c5:33:f3:46:e2:44:94:87:1e:
                    41:99:54:25:2a:5a:12:17:c7:29:f5:79:cd:ec:58:
                    cd:d6:4b:ec:02:9f:81:9c:aa:ac:f6:89:39:f6:71:
                    4b:8f:53:69:eb:05:c5:b3:3d:b0:06:9d:00:51:ba:
                    e6:63:7f:77:26:a3:27:e9:2a:65:51:e2:69:94:27:
                    46:88:93:e3:6d:0c:e3:64:42:f8:c9:3c:b0:db:ce:
                    3b:85:4b:96:2e:41:4e:89:09:7e:1d:06:28:bf:d3:
                    98:6a:2b:e1:25:72:85:f5:64:cb:66:7b:b9:ef:7a:
                    2b:03:ed:91:6a:6a:e7:0e:a6:fc:81:10:3c:06:aa:
                    6c:39:a8:41:c7:6f:93:15:80:8f:cd:9f:5a:0e:53:
                    f5:d4:16:e6:f7:da:56:9d:85:be:a3:23:95:a0:f5:
                    a1:53:a7:46:77:65:d7:7a:0f:93:f8:69:f4:d0:34:
                    9e:82:d2:08:dc:82:96:b6:a9:39:2a:08:c5:25:b5:
                    62:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D8:9B:FE:69:2F:5D:4F:A9:49:A7:F7:AD:5D:CD:74:97:73:B3:35
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K9ib_mkvXU-pSaf3rV3NdJdzszU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6c:2f:51:0f:bf:b5:39:17:2e:13:29:af:46:0a:56:78:f6:49:
         4a:8a:8c:6b:0b:d7:1e:e6:93:1f:12:6e:f9:f2:c3:a8:6e:cf:
         5f:f8:c9:53:3f:2c:8f:7e:45:e2:de:a6:df:ee:79:8a:d1:f5:
         0b:47:7c:07:c9:ca:1e:96:1a:e5:86:67:72:6d:c4:c7:c5:4e:
         e9:20:2a:a4:49:a9:76:93:36:66:08:4c:50:36:b1:31:f5:28:
         31:d1:95:0e:25:30:ae:38:02:43:46:d4:c0:97:53:dc:d4:59:
         b6:70:09:74:4f:1d:4c:b1:ec:e5:84:7a:28:6a:ee:09:84:99:
         eb:27:5c:60:c1:b4:53:c2:5b:56:17:8e:fb:74:99:60:6c:c5:
         6f:f2:e9:e6:0e:68:1b:b7:f2:de:ae:5a:e6:76:12:2a:b8:fd:
         77:c4:19:e1:b5:27:4c:af:4f:63:11:05:47:99:f6:cb:3f:86:
         ba:07:af:0e:50:ab:a1:c8:98:65:34:57:86:c0:85:2f:c0:f5:
         18:9e:d9:d6:9f:52:84:90:07:24:93:3c:96:ab:b0:3f:01:bd:
         6d:d0:51:19:aa:4c:ff:93:01:9b:7d:f6:ef:61:5a:3f:a8:9c:
         e0:00:37:2e:82:71:d9:4f:d6:fc:f7:f3:dd:fb:bd:0a:8c:ac:
         83:ca:0b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----